Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe762207-c010-3db9-8e70-6bedc941a8c2.roa
File:                     fe762207-c010-3db9-8e70-6bedc941a8c2.roa (raw, json)
Hash identifier:          Ph4ZYT7WRFV39NpvBieSLS06pj8GXPIcGk7A2XxE8mI=
Subject key identifier:   CA:0E:93:5D:DA:7F:44:BB:01:16:DC:28:CC:5F:46:2E:77:20:2D:1C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA78753751633A81C21BF7900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe762207-c010-3db9-8e70-6bedc941a8c2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        172.217.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:53:75:16:33:a8:1c:21:bf:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6b1dc173-4e86-4083-b056-9eed3e8f11ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:28:25:15:9b:8f:d7:ee:32:88:b8:f5:b4:
                    a6:26:6c:f8:b1:23:f4:70:b2:f5:41:78:80:72:9b:
                    20:df:1e:a9:22:06:66:9c:24:c2:a4:b4:05:ad:12:
                    86:11:74:9c:ba:76:3c:9a:9e:48:ca:89:56:d1:ad:
                    12:91:81:dd:a1:45:fe:3f:ed:f6:a4:5c:60:d7:eb:
                    77:45:40:8c:e4:9e:2b:c8:cc:6a:5d:4f:48:08:ce:
                    e4:28:53:d9:57:2f:7f:1b:dc:9f:e0:03:a7:b7:24:
                    5e:2a:f8:fb:c0:32:f9:ab:2f:9a:42:5e:47:c9:04:
                    bb:07:40:c9:ae:21:ab:9e:f0:e6:fe:a7:e7:10:70:
                    c0:9f:dc:e5:64:dd:97:de:6e:27:0c:ea:1f:9c:c1:
                    f7:78:8b:2c:9a:e5:6f:7e:ef:75:45:51:eb:2d:ab:
                    eb:70:a5:f8:82:00:b7:f3:fc:4f:c7:7c:f9:73:3e:
                    db:b4:fc:52:06:49:3c:56:d6:d0:78:be:fe:8f:8a:
                    e0:1c:08:d7:4c:1d:4d:40:17:d9:5a:5a:9e:79:ef:
                    fa:27:5c:5b:42:76:89:bc:04:e5:c7:85:d4:4e:a0:
                    64:e7:c8:ce:c3:82:b0:09:2b:39:37:6f:90:3f:0c:
                    cb:e8:9f:a7:06:bb:c0:0e:a6:2b:af:d1:05:77:7e:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0E:93:5D:DA:7F:44:BB:01:16:DC:28:CC:5F:46:2E:77:20:2D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe762207-c010-3db9-8e70-6bedc941a8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:e7:97:f0:91:5d:77:52:7f:e2:6d:68:8f:44:47:3f:fc:
         d8:9a:4b:81:ef:4b:91:e5:96:1c:b7:3d:b7:64:af:8f:69:d7:
         ce:55:08:97:1f:4a:1d:e1:7d:a6:f4:8a:a8:87:9c:91:26:58:
         5f:39:5f:7a:39:24:df:fd:36:fb:65:f6:77:0c:09:8d:05:c4:
         20:5b:bb:8a:17:3a:4e:a3:54:cf:14:8c:ae:da:d4:19:b0:d1:
         5f:c5:27:c4:8f:cf:e1:70:75:17:21:a8:27:a0:ed:d5:d1:c7:
         da:0b:03:79:b3:ed:ec:67:de:3b:65:c4:5a:23:65:63:83:58:
         e8:f8:7e:98:58:d1:a1:55:de:04:64:96:af:09:e2:ab:1b:d7:
         0c:1e:04:90:5d:7a:7b:bf:ee:31:9d:3e:c2:1c:13:a9:25:87:
         d0:31:45:39:85:ff:21:c1:65:2d:b5:58:42:19:6d:06:29:6b:
         c8:43:3e:f6:9e:fb:78:39:ee:19:15:ef:10:02:67:89:37:69:
         6a:ba:cc:1e:f6:f6:07:89:03:c6:17:12:78:d8:26:db:db:c5:
         af:27:7b:cc:c9:67:cd:b5:7c:35:7f:da:88:0c:c6:66:82:90:
         68:ea:56:21:90:b6:b3:c7:ad:2c:52:ab:f7:ec:8d:3c:0b:46:
         13:99:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:47 2026 by rpki-client