Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa
File:                     08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa (raw, json)
Hash identifier:          4PZO0QKy7ViVUb053QDszVbfVs4LgQoYoiNevYWANxU=
Subject key identifier:   97:D7:B1:7A:44:F9:D6:FD:BD:D3:6C:08:59:9F:32:E5:A1:13:CD:CC
Certificate issuer:       /CN=299720ca-d74f-4266-9723-557a6914c4f4
Certificate serial:       010D0C9F4328584E5E6672075F733B20CEB59280
Authority key identifier: 30:57:ED:C3:EE:2A:4D:30:6C:08:48:32:8C:F2:1F:B3:94:33:CA:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa
Signing time:             Thu 02 Jul 2026 20:20:55 +0000
ROA not before:           Thu 02 Jul 2026 20:20:55 +0000
ROA not after:            Wed 30 Sep 2026 20:20:55 +0000
asID:                     4213
IP address blocks:        216.71.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:66:72:07:5f:73:3b:20:ce:b5:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=299720ca-d74f-4266-9723-557a6914c4f4
        Validity
            Not Before: Jul  2 20:20:55 2026 GMT
            Not After : Sep 30 20:20:55 2026 GMT
        Subject: CN=43b63406-84d4-4360-974e-80f873c1487e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:f9:49:de:8a:50:f8:8a:2e:22:2a:f5:1c:
                    0f:7b:11:32:6e:b5:15:a9:42:e3:fb:e4:84:a9:9a:
                    5b:00:80:eb:6e:34:3d:b2:3c:bd:8b:fa:5d:f1:3e:
                    ca:36:11:af:e0:b5:57:f2:87:b7:67:df:b1:74:a6:
                    5a:45:3b:2f:6e:1e:a7:b5:75:b7:ca:2f:2e:33:b8:
                    c8:4b:c7:e4:3a:91:65:d1:b2:e5:72:2f:f1:5c:c6:
                    52:d6:65:a9:bd:2a:6a:73:19:51:97:e3:83:bd:d4:
                    cc:18:a2:27:36:30:94:b8:0e:5a:a8:e1:4c:46:3d:
                    85:c6:63:54:6f:be:e2:b0:76:8b:98:dd:6d:f9:71:
                    6f:ee:44:ed:88:aa:8b:8f:09:58:3f:de:ff:8d:16:
                    40:1d:e0:91:30:30:c4:5e:7c:f2:c4:c3:0f:d5:5b:
                    2a:ee:ed:0c:99:72:14:74:f1:dc:24:7c:4e:1d:14:
                    87:75:8c:3f:5f:b6:23:c9:ce:0f:25:11:d8:35:9f:
                    ce:c9:f7:3d:0f:a6:98:f4:cb:d3:e2:4c:48:96:49:
                    ab:a7:75:13:d1:0f:13:32:92:ff:89:ca:db:b8:5d:
                    93:d6:67:f7:6f:7e:f8:d6:1f:95:98:68:7a:f6:d4:
                    b2:c3:c4:00:e6:08:bd:16:0e:9d:7b:4c:14:b4:1a:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:B1:7A:44:F9:D6:FD:BD:D3:6C:08:59:9F:32:E5:A1:13:CD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.crl

            X509v3 Authority Key Identifier:
                keyid:30:57:ED:C3:EE:2A:4D:30:6C:08:48:32:8C:F2:1F:B3:94:33:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:61:78:6c:ce:e8:bb:4d:91:47:4a:96:6e:ed:3e:29:30:05:
         f0:f3:27:0d:df:de:3a:af:a8:40:aa:5b:37:9e:6a:8b:8d:21:
         98:a7:44:69:d5:e7:74:85:7f:ef:e6:7d:70:90:5d:15:e7:14:
         d2:d6:e0:78:53:cd:6b:0c:59:2d:62:e8:0b:23:45:d6:63:b7:
         b6:b0:da:2d:ac:e4:b6:c6:e8:13:c9:53:c0:b7:78:6d:89:11:
         44:f7:1e:9d:bf:9f:db:a1:e9:d9:88:9a:c5:98:b6:f5:21:b7:
         da:c4:fa:24:f9:48:bc:84:82:9d:f7:b8:eb:b4:b8:f0:52:bd:
         69:a3:ef:32:46:c9:d2:c4:6f:ca:cc:d8:8b:59:7e:b3:3e:7b:
         cb:5f:8e:c3:27:04:5e:4e:b7:52:73:bc:f7:32:e4:02:20:03:
         5c:74:bc:8e:2b:ba:b4:ec:6b:7d:33:01:a4:70:e3:5d:e0:67:
         1a:ce:33:d8:36:bd:5d:52:a1:b8:fa:38:5f:5e:ad:da:2a:76:
         45:4b:50:2f:ab:61:ac:04:08:e5:ea:3e:99:08:23:25:08:9a:
         ff:ba:be:09:c4:a3:75:14:1e:70:b4:d9:bb:1c:fd:04:74:d5:
         e3:dd:7f:61:f2:49:da:f1:d8:e3:a0:50:85:e3:91:07:0e:96:
         78:ac:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:01 2026 by rpki-client