Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa
File:                     75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json)
Hash identifier:          QDZzDpo9NXGiLjhDjCPifEdiz3I6jWgITZFVr4vPHfw=
Subject key identifier:   D7:93:66:25:7C:9D:D4:11:AB:02:2E:1B:FD:FE:A9:DD:3B:6C:A1:AB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79EA848609A1099FFE64300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        172.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:a8:48:60:9a:10:99:ff:e6:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c8eb463b-7ec4-4d00-a49c-6fd0ceca49e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:b0:a8:38:7c:82:09:07:e4:19:d8:0a:94:
                    11:20:9f:39:be:ea:8b:2b:04:09:cc:6d:22:60:81:
                    96:9c:15:45:54:3f:07:5a:35:db:2e:c0:af:7c:47:
                    00:f7:36:a3:e6:68:f9:16:0b:26:55:65:93:47:68:
                    8f:b8:a8:61:6d:c6:55:54:60:88:e7:93:35:1c:72:
                    44:56:de:da:13:55:6f:ce:3e:81:8a:d7:2b:c8:5c:
                    1d:a2:ab:f3:67:fb:90:ba:63:e5:62:64:04:06:b4:
                    b0:ee:2a:21:a9:4f:14:3e:e1:5b:2b:64:b1:dd:c2:
                    94:16:a2:4a:62:16:68:30:47:bf:82:61:36:44:82:
                    00:53:31:35:eb:66:50:d9:ba:c6:ed:1f:af:86:b4:
                    fc:1a:bd:4b:b7:2d:0d:d9:ee:85:69:d0:5e:3c:18:
                    c4:53:df:16:2b:67:12:ac:d2:db:c2:05:a1:7d:77:
                    ec:63:ba:cc:71:e4:03:0d:38:50:f1:f1:89:e5:26:
                    6b:94:a0:78:9b:0f:c5:22:8f:d9:29:8f:b1:d9:bc:
                    56:d1:4c:47:a3:aa:4f:2c:6c:01:66:da:ad:49:fc:
                    21:57:84:77:da:46:b2:b0:1f:5a:d9:e3:d1:ff:17:
                    56:ad:54:d3:05:38:1b:1b:53:80:ed:ab:c1:a6:ad:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:93:66:25:7C:9D:D4:11:AB:02:2E:1B:FD:FE:A9:DD:3B:6C:A1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:5b:51:59:2a:ca:6d:13:73:56:49:a4:ad:fe:39:6d:bf:
         6b:31:1f:ab:1f:fa:66:62:5d:21:0d:0b:1d:76:54:4a:0c:fb:
         0d:f1:ff:98:6d:34:cd:61:7a:d4:dd:73:f0:30:4a:7b:ee:78:
         76:f1:00:6b:d0:fd:b5:30:f4:89:c0:94:4a:6b:ea:87:c9:36:
         ec:21:17:f7:f5:e8:9f:7c:b1:99:c3:e3:a9:0e:d2:1a:e0:88:
         96:04:75:3e:0a:71:ad:16:d8:4e:8d:db:1a:58:d8:bf:e9:93:
         24:9e:b8:ab:d5:88:8b:ff:84:0f:ba:46:9c:cd:64:98:85:dc:
         9b:b1:13:22:21:72:c7:52:24:55:76:16:58:4a:9c:dc:e6:ba:
         61:3a:0b:2b:11:a6:0e:a1:c4:56:92:74:a3:4b:ad:73:ba:17:
         68:d3:7b:64:3a:da:d9:f7:6b:ee:a7:75:d2:2e:0a:55:e8:1c:
         2c:cc:a7:09:89:4d:02:19:36:6e:61:15:55:e7:12:8d:ef:1e:
         85:fe:82:9d:3a:42:b8:be:f4:3f:81:3e:a7:2d:7d:50:a6:51:
         ba:c1:82:c9:dd:0d:08:15:37:a0:58:aa:c6:07:5b:b2:62:a2:
         67:bc:ff:44:48:b3:ba:52:fc:8f:f6:dc:d1:db:00:ec:2f:cf:
         50:8f:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:21 2026 by rpki-client