Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa
File:                     10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa (raw, json)
Hash identifier:          1gDY+w58kr/yr316Ls2QOb0dezsGg/JhELcnbTxaZZY=
Subject key identifier:   75:F3:91:AF:80:0F:71:3D:DE:F5:31:AF:30:41:5A:D5:AB:40:76:A2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D2644D2DC2373045181641AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        208.76.71.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d2:dc:23:73:04:51:81:64:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=16914547-8c2a-4b68-b119-2baa44b6beb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:71:e8:a7:13:32:71:cd:fc:b7:c6:03:0d:
                    84:6f:e5:b0:5f:79:06:c5:4f:db:e1:92:dc:b1:a0:
                    a8:1e:cf:27:6e:ae:2e:c7:dd:ae:fc:56:32:76:8f:
                    a2:c6:62:eb:1a:64:c4:c8:ae:63:7a:c5:d9:59:a6:
                    81:50:f8:d8:de:55:16:83:0b:ca:fc:7f:37:99:6b:
                    b6:95:ac:d8:25:be:72:50:1d:ff:5a:b8:db:f8:d6:
                    ab:39:fd:63:3c:22:0d:be:47:92:27:8f:09:5e:10:
                    a8:c3:95:6d:93:23:21:98:a1:8d:d5:26:1b:76:82:
                    96:5b:d5:9b:cb:71:f0:73:a2:27:56:0a:d8:8f:cc:
                    fa:0f:c7:40:21:be:e7:2f:b5:8b:07:ed:1a:ef:ed:
                    6e:62:83:4d:1d:e2:7d:5a:5d:58:60:41:52:63:ce:
                    1a:8c:6d:09:e6:24:ab:43:d8:b0:dd:ff:24:d7:bd:
                    f1:6a:36:4f:6c:21:78:05:e5:bd:81:0e:a2:d0:f0:
                    19:7b:10:9a:29:45:7d:75:77:53:7d:9e:3f:1c:b9:
                    e0:cd:94:c7:40:56:93:b8:74:21:06:97:4d:b7:06:
                    cf:28:ce:5c:53:ce:ce:3c:ab:1e:12:6b:83:5f:d0:
                    6a:cc:c9:0c:ec:c2:48:e7:6c:04:7b:14:00:cd:ba:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F3:91:AF:80:0F:71:3D:DE:F5:31:AF:30:41:5A:D5:AB:40:76:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.128/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:11:fa:2f:23:bd:61:0d:86:8e:98:87:de:c2:d7:84:03:9a:
         4c:58:5f:f4:bb:07:d8:d3:ad:92:a3:cc:fe:b4:2f:68:47:7c:
         32:9e:17:e2:d3:5f:d7:83:57:fe:cd:10:bf:4d:ed:60:05:61:
         91:54:a8:5a:28:a7:49:e2:4e:81:4a:cd:d3:19:93:e8:62:d7:
         44:49:c3:83:b2:0d:22:6f:28:f0:1b:65:03:5a:25:2c:d9:58:
         df:d5:28:71:59:58:14:b1:55:7d:e4:56:6f:32:95:28:dc:de:
         b8:4d:fd:34:9c:22:5f:d0:1a:e5:8e:ea:88:36:e4:13:bf:2e:
         9c:fc:b5:25:64:f7:89:d6:9b:05:6f:9f:ca:41:f8:8f:9e:c6:
         e2:b6:6b:c3:49:45:3c:94:eb:3d:c1:b4:c7:03:02:3a:65:d3:
         ce:c7:11:a2:33:33:ee:ac:f5:23:be:e7:8f:1c:db:da:15:25:
         79:48:b9:ec:f1:e3:d6:1d:5f:ed:2e:cd:f3:6c:b4:bf:38:41:
         70:61:06:95:d9:ad:f2:47:df:44:b4:44:86:26:46:b8:9a:d3:
         c5:cb:2c:90:ae:d7:10:c4:c8:e0:0b:00:10:87:b2:d9:18:46:
         6d:78:8a:4e:07:dd:67:eb:5e:b4:1f:65:9f:29:2e:7f:b2:a3:
         25:79:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:33 2026 by rpki-client