Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa
File:                     fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa (raw, json)
Hash identifier:          NjEi/N2HQPZ+35ecWrWHmEma+OWn7FvMLBX4H6P4lno=
Subject key identifier:   6D:D9:26:CA:8B:28:62:92:1A:55:0D:EC:27:D3:A6:D1:82:AC:41:57
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0700A5D30F32379267F3AE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396982
IP address blocks:        208.76.71.96/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a5:d3:0f:32:37:92:67:f3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=62f76ce8-0001-4ada-a696-4573cc95376a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:fa:0c:3d:52:83:2e:50:74:c8:7e:f7:d5:
                    ad:06:e4:6e:d9:bb:19:f0:7a:be:2d:43:37:0c:38:
                    b6:48:c3:59:1e:83:1b:2e:00:9b:ed:b4:f5:1c:eb:
                    c0:af:89:6c:70:c5:fe:e2:6c:5b:b0:73:8a:55:fe:
                    b3:69:51:65:b0:8c:10:c9:22:44:cc:05:81:ac:ba:
                    f4:50:3d:c0:2a:a0:0c:e5:60:2d:31:a0:28:6e:da:
                    fa:7b:c3:da:c9:e2:2e:d9:cf:67:2d:13:3b:aa:7c:
                    13:a1:09:64:a7:fe:39:69:55:ee:6c:dc:86:68:5f:
                    71:73:a3:71:34:66:14:bf:60:da:93:aa:91:ba:ce:
                    53:ad:aa:a3:5e:06:47:47:55:18:00:5d:34:1b:1c:
                    49:0d:0b:82:13:0c:df:6f:a2:37:b7:69:10:1c:72:
                    1c:0b:61:cc:34:27:a3:4b:1c:ee:11:7f:cb:de:2d:
                    7d:a3:e6:a8:7f:f8:be:48:d7:d4:3b:b8:56:8c:bb:
                    a4:78:83:dd:2f:03:fe:53:ae:dc:48:c8:b7:23:ab:
                    50:80:21:be:62:a3:86:5f:1b:a9:7f:ea:f3:af:ea:
                    ee:bb:69:63:c4:3c:34:ae:88:32:92:82:01:a7:99:
                    dd:57:05:d8:b2:76:93:07:23:9e:ed:74:32:8c:3d:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:26:CA:8B:28:62:92:1A:55:0D:EC:27:D3:A6:D1:82:AC:41:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.96/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:59:09:81:e5:3c:d8:76:32:bf:e6:5b:b3:27:b6:77:eb:23:
         a3:72:5f:16:1f:85:da:69:1d:e5:f9:a4:62:10:28:04:00:0a:
         9b:7d:8f:bc:bd:21:bc:3a:fd:da:9c:b9:28:1b:04:0e:44:2c:
         47:ed:2e:d7:b2:69:01:25:17:f0:bb:2a:c4:b6:58:9b:70:68:
         aa:72:96:a5:3a:48:45:ae:33:1a:5c:2e:c8:2c:83:f3:3e:b5:
         ba:0f:53:11:1d:19:fd:52:e6:2d:dd:83:0a:81:19:fa:9e:41:
         8e:6b:6f:65:55:0e:6f:c9:2e:46:0c:ca:10:e7:1b:ff:c3:08:
         cb:ad:e6:4d:2d:b4:78:84:d7:65:a0:76:6e:45:cb:06:02:7b:
         4f:40:ac:5f:c6:44:fd:c0:7a:60:b5:8a:6c:e5:a3:9c:29:f1:
         10:c3:cd:31:4f:f0:9e:57:3b:f1:5c:31:65:29:57:15:71:bf:
         9a:83:bb:b2:18:12:7c:3e:3e:e8:c7:a6:70:fe:02:4e:de:76:
         99:59:3e:48:83:fe:44:e7:96:8b:49:10:3d:a9:ee:a0:6b:ab:
         c9:d1:b9:60:8f:fd:5f:ca:6f:f4:5f:e6:bc:19:10:de:47:aa:
         34:ca:af:81:a0:10:60:6b:76:3f:ba:7b:0c:a3:54:6d:5b:12:
         d1:26:2c:a5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4HAKXTDzI3kmfzroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
NjJmNzZjZTgtMDAwMS00YWRhLWE2OTYtNDU3M2NjOTUzNzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXD6DD1Sgy5QdMh+99WtBuRu2bsZ8Hq+LUM3
DDi2SMNZHoMbLgCb7bT1HOvAr4lscMX+4mxbsHOKVf6zaVFlsIwQySJEzAWBrLr0
UD3AKqAM5WAtMaAobtr6e8PayeIu2c9nLRM7qnwToQlkp/45aVXubNyGaF9xc6Nx
NGYUv2Dak6qRus5TraqjXgZHR1UYAF00GxxJDQuCEwzfb6I3t2kQHHIcC2HMNCej
SxzuEX/L3i19o+aof/i+SNfUO7hWjLukeIPdLwP+U67cSMi3I6tQgCG+YqOGXxup
f+rzr+ruu2ljxDw0rogykoIBp5ndVwXYsnaTByOe7XQyjD3ZgwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG3ZJsqLKGKSGlUN7CfTptGCrEFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmI4YjExNTUtZjdkNS0z
NDViLWEyOWEtMGI4NjdlYjM3YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHYDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdWQmB5TzYdjK/5luzJ7Z36yOjcl8WH4XaaR3l+aRiECgEAAqbfY+8
vSG8Ov3anLkoGwQORCxH7S7XsmkBJRfwuyrEtlibcGiqcpalOkhFrjMaXC7ILIPz
PrW6D1MRHRn9UuYt3YMKgRn6nkGOa29lVQ5vyS5GDMoQ5xv/wwjLreZNLbR4hNdl
oHZuRcsGAntPQKxfxkT9wHpgtYps5aOcKfEQw80xT/CeVzvxXDFlKVcVcb+ag7uy
GBJ8Pj7ox6Zw/gJO3naZWT5Ig/5E55aLSRA9qe6ga6vJ0blgj/1fym/0X+a8GRDe
R6o0yq+BoBBga3Y/unsMo1RtWxLRJiyl
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:34 2026 by rpki-client