Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa
File:                     a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json)
Hash identifier:          ScxGUgSGnO3yrQoMsfdh3zzbf/MIQFRIxASTGKCKdvk=
Subject key identifier:   A9:D7:13:79:F2:FD:EB:1D:C2:2F:E0:C8:F7:52:D0:D6:CD:94:E3:37
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79EC683F71D481A2AA46C40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        172.217.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:c6:83:f7:1d:48:1a:2a:a4:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=39a13a55-7073-48ad-b462-e5b3cf6f050e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b6:ef:df:4c:74:4c:d2:b6:a9:e1:7b:18:0a:
                    69:14:5a:1b:cf:63:b8:79:29:ce:fa:cb:a3:9f:45:
                    dd:a7:0a:55:4e:32:4e:4e:33:a1:a0:75:35:84:2a:
                    58:c9:c2:a0:5e:8d:04:b8:03:f5:a5:b2:fe:87:b4:
                    8e:4a:52:97:4f:4e:ca:6f:0f:b7:fb:74:97:51:8f:
                    6d:99:01:2a:1f:f3:99:08:dd:1b:38:10:f6:2d:b1:
                    41:eb:0a:cd:08:75:1a:48:83:d9:d7:02:b6:e5:8a:
                    b6:dc:d8:c5:f5:0a:21:02:de:dc:9f:b3:83:e7:97:
                    1e:7c:e5:fd:e0:6d:ad:13:84:77:09:e3:07:84:6f:
                    b9:03:fd:e6:2d:8c:88:7c:0a:87:5b:4d:86:0d:18:
                    e1:c0:1e:16:e4:6b:3e:10:bb:bb:ac:43:ba:cc:5d:
                    c1:c8:72:b2:a2:95:61:4f:42:8a:6f:5b:eb:ba:eb:
                    d9:d1:c8:45:ab:14:2b:30:a5:64:55:91:ff:35:59:
                    9f:0b:9f:6e:8b:19:88:cf:f7:2a:59:ee:5e:7c:e7:
                    61:70:97:18:ad:10:50:9a:5c:e6:94:18:b5:00:ae:
                    36:23:3a:f5:e5:b7:04:35:31:25:5e:87:68:44:c1:
                    f4:39:72:52:77:7a:0c:30:e9:3c:6d:52:3c:e8:2f:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D7:13:79:F2:FD:EB:1D:C2:2F:E0:C8:F7:52:D0:D6:CD:94:E3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:6a:09:08:29:a6:bf:a1:3d:a4:4d:41:78:98:9e:ec:40:
         15:06:59:0f:ae:23:7d:cf:fa:33:2c:44:f2:3a:20:09:0f:00:
         78:43:1c:6b:93:8d:b1:88:d8:12:e0:e1:60:0f:15:00:bf:1d:
         a6:ff:fb:0b:ba:34:f8:44:48:1b:c9:d2:fd:09:32:e6:f0:29:
         7f:79:3d:93:03:0e:ff:48:73:8a:d7:70:5f:fb:5b:43:3c:37:
         9e:93:4a:a2:e7:b0:85:8f:b0:87:0e:cc:40:f3:2b:a6:01:31:
         b5:9f:56:3e:bb:cc:6d:4b:f0:d1:7b:d3:7f:0b:d0:d5:36:38:
         cb:35:a5:a3:9d:e3:a9:8a:a3:08:84:68:5c:e2:6d:2e:eb:13:
         1d:00:7f:34:70:ad:45:b1:5f:be:a3:51:ca:2f:27:a0:69:be:
         ac:a3:a4:f4:78:15:c3:bd:73:a2:38:9c:f3:bf:b0:df:f6:7b:
         b5:be:7a:14:3e:ed:2a:03:71:64:1b:8b:73:0f:0b:a1:cb:6c:
         34:f2:c5:75:c7:2f:ad:d0:3f:a4:3a:86:34:88:aa:b2:cc:25:
         ec:d4:17:3d:d0:03:71:a9:fa:05:e2:8e:b5:c2:7c:9c:b3:7d:
         0d:e8:04:ce:43:8d:21:93:65:75:95:bb:32:72:65:34:dd:cf:
         9c:3a:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:15 2026 by rpki-client