Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa
File:                     b1d37ad8-a7e8-37bb-959a-82e32375402d.roa (raw, json)
Hash identifier:          xID2UlzzVp4yMQ/16gXq0UfI97d3yvHgAEEg1tcP6J0=
Subject key identifier:   F9:5D:22:A1:99:9F:FF:F9:A0:33:5D:9D:A1:43:F4:0A:FD:1D:23:C1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BC261B970D0EF64D57780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        172.217.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:c2:61:b9:70:d0:ef:64:d5:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=62b2485c-2b2e-499a-9169-6f8b15f21e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:d1:c1:4b:80:68:e2:be:03:db:b4:d6:eb:
                    6b:b5:45:50:a7:26:16:d9:01:3c:1b:3a:e0:9b:5c:
                    44:45:c0:a6:ad:d0:5b:22:dd:53:51:ac:97:59:03:
                    d3:ca:18:e6:24:66:e3:c2:06:03:21:29:03:37:96:
                    4e:04:6d:0b:40:27:4e:f6:bc:e2:e7:2c:ed:98:00:
                    6b:8e:09:8e:0f:44:df:ba:65:dd:7f:7b:57:66:b9:
                    f6:12:fd:3f:ca:ac:28:ed:c5:1a:da:64:cc:fd:a5:
                    5e:ce:4b:32:63:53:ae:ba:6f:69:5b:6e:b3:ea:c7:
                    16:16:2a:37:e0:c9:73:ed:00:68:bd:8b:d3:76:36:
                    2a:3f:59:16:10:24:42:91:ec:30:91:c7:c1:32:55:
                    8b:46:d4:76:27:78:b1:96:8b:32:08:83:d6:a2:fa:
                    be:fd:00:f6:09:aa:bd:b8:82:eb:99:08:45:a1:f6:
                    fe:3f:46:1c:6d:41:31:98:a0:43:f5:c6:f1:f8:93:
                    9b:07:27:e3:c8:54:5e:33:74:62:c6:f0:b1:9f:52:
                    09:70:8a:c7:a7:8b:1e:32:38:fd:12:98:a4:8b:0e:
                    db:58:be:42:4f:b1:df:7f:64:30:75:a7:b8:47:23:
                    a5:23:ef:03:73:a6:38:f0:e9:4d:4d:1b:2d:1a:80:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:22:A1:99:9F:FF:F9:A0:33:5D:9D:A1:43:F4:0A:FD:1D:23:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1d37ad8-a7e8-37bb-959a-82e32375402d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:f4:d0:47:50:02:0e:96:87:ed:06:d1:a1:97:c1:a0:16:
         d6:0f:bd:32:54:9e:a4:9b:33:1a:80:d2:82:48:68:5d:f5:09:
         3a:29:ed:45:44:71:4d:56:b0:40:3e:2f:6f:4f:0e:4b:be:97:
         82:d4:df:86:0e:bd:a8:4c:3b:b0:01:79:41:a3:3e:cf:bf:34:
         e9:24:3a:08:e9:db:b1:95:1e:3d:56:06:a2:a1:51:03:b9:81:
         5b:32:2d:85:76:ad:3e:4b:82:83:4f:44:0e:89:98:93:0c:20:
         4b:19:e4:3f:7a:7a:a9:09:9e:9b:53:3b:0f:b1:2f:1b:6c:c2:
         1e:c1:9f:46:c6:cf:cd:18:f5:c7:5b:27:44:d9:b6:bb:2d:d3:
         0f:df:04:94:8f:7f:a1:d0:0f:15:11:8e:67:2c:38:b0:5e:a7:
         03:38:24:d0:20:92:4d:64:fe:46:92:f9:b0:5e:4f:b7:5e:8a:
         5f:b5:b6:0a:15:a4:88:fd:b6:1c:aa:64:02:50:56:3a:cb:1b:
         f3:8b:ad:d3:15:bc:0e:dd:2f:ec:67:1b:9a:e8:ec:92:d9:2f:
         e9:73:1b:29:e8:f3:97:9a:a3:32:f9:2b:ad:c2:b8:fd:f6:6b:
         a1:6b:d2:92:66:d4:61:93:59:94:60:b5:47:3c:3c:04:d9:cf:
         e7:ba:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:30 2026 by rpki-client