Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
File:                     81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa (raw, json)
Hash identifier:          eVqQzOxJ943HeF7JCDnvI0z4wwT/VJZckZXmvmBa+9E=
Subject key identifier:   1F:3D:EB:2A:A5:78:5B:72:DB:F6:87:90:BD:CE:28:15:31:F0:07:65
Certificate issuer:       /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial:       010D0C9F4328584E640F656593981E62260221A0
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     40339
IP address blocks:        206.71.154.0/23 maxlen: 24
                          208.78.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:65:65:93:98:1e:62:26:02:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=9b6dfef8-ab16-4656-be12-9566f407f9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:b0:a5:b9:fe:38:b0:52:29:13:3c:c1:4c:
                    0e:a5:51:dc:c8:db:ab:ff:ff:32:62:7f:cf:1f:a4:
                    fa:b2:6b:5c:7c:fd:37:21:cd:8e:dc:b9:52:ed:22:
                    fe:b6:dc:36:3b:84:b1:24:5c:06:7c:53:4a:36:c6:
                    5b:bf:35:ae:2d:16:39:66:cf:ee:e7:bb:ca:f9:7b:
                    c9:cc:46:3e:5f:47:5b:b5:dd:cb:ba:d0:0a:ed:41:
                    68:1a:bc:aa:c0:06:46:cd:9a:3f:f1:da:f1:4d:70:
                    54:c1:fd:07:69:df:de:a6:6d:a9:29:ec:7f:b9:48:
                    10:4e:f8:8b:ae:39:76:d6:a0:d7:fb:e5:43:1b:04:
                    3b:23:1f:64:08:4c:89:a1:c6:82:87:60:d8:32:69:
                    fa:dd:92:f5:93:6b:a7:24:eb:0f:86:45:88:01:16:
                    b7:11:98:3e:29:60:0b:a4:73:fc:4e:f4:b6:9b:f7:
                    ee:63:5b:db:44:a1:9c:88:98:f6:61:c8:7a:3b:d2:
                    6b:ff:10:51:30:71:f4:4d:ce:7f:8a:81:88:7a:e8:
                    72:79:84:97:ec:66:54:bd:d4:15:b7:3b:98:4f:77:
                    67:05:48:60:a8:a1:36:10:2a:2b:72:35:49:78:e5:
                    e8:0b:5b:f2:5a:28:4e:62:02:4f:c8:7a:af:7c:9f:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:EB:2A:A5:78:5B:72:DB:F6:87:90:BD:CE:28:15:31:F0:07:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl

            X509v3 Authority Key Identifier:
                keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.154.0/23
                  208.78.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b8:05:48:ab:9c:1a:c3:9e:8e:f1:dd:f5:fa:86:a0:5d:ee:
         08:79:05:e1:de:35:f0:05:d2:73:4b:e7:d8:89:04:0a:c9:4e:
         45:5d:37:44:68:79:33:75:ca:4d:97:9a:cc:a3:92:44:89:ef:
         05:84:59:14:36:6b:4f:dd:a9:82:ae:ea:5c:2d:61:27:ae:d9:
         6b:dd:90:eb:f6:9a:43:cf:1b:0b:36:24:c7:5e:5f:a1:b2:f4:
         19:df:1f:5b:1b:ae:86:03:93:e9:49:1f:2f:c8:1e:a2:f6:5a:
         52:8d:4e:ed:44:2c:86:84:33:84:fc:ce:e1:f7:c6:65:e7:7f:
         d6:ee:ae:45:e2:de:04:aa:92:26:b3:10:89:e7:37:0b:28:13:
         65:05:d0:1e:b3:14:6e:04:4d:0a:da:7a:46:f7:bd:d6:de:51:
         93:15:58:7d:52:ff:99:ee:4d:15:41:c2:11:93:94:cd:53:cb:
         ac:70:50:c7:8a:de:6f:a3:91:2c:15:23:c8:af:c4:a6:0b:f3:
         ed:aa:32:9b:c6:9b:b7:cf:15:eb:23:ec:7a:f4:a5:66:1d:8f:
         3a:6d:8c:6d:23:3c:b9:1b:66:aa:33:f7:16:b0:a1:12:16:a1:
         a6:39:46:cb:14:cc:e2:7e:e5:bb:31:dd:8a:15:d5:b6:72:86:
         e3:fb:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:07:19 2026 by rpki-client