Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa
File:                     08faf29f-43ea-3741-adc8-4b04d7d43597.roa (raw, json)
Hash identifier:          QXe8zuaF5aUGMTLBLQ2jQuFI624wubaipcuHcSn3ycI=
Subject key identifier:   C5:60:24:91:35:7C:86:EA:66:48:5F:C3:71:33:44:82:34:42:AB:C4
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F4328584E66DA1468E5C0B43814A2D000
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        204.76.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:14:68:e5:c0:b4:38:14:a2:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=bec02e58-33b6-4689-9c4d-427c4ef64bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:44:c4:f5:65:7e:2c:15:dd:e8:1f:44:fb:
                    4d:65:50:d4:a0:e9:5f:09:85:7f:f0:43:df:44:1e:
                    c4:45:22:b8:3d:d5:df:37:ee:12:cc:e8:06:a6:08:
                    c7:c0:2d:85:45:37:81:c8:51:04:99:7c:92:88:b2:
                    97:3d:c4:e0:ba:d4:bb:27:49:68:a2:53:eb:b1:5a:
                    3c:e1:2d:77:16:b9:fb:5e:a5:07:e5:e0:84:fa:8b:
                    55:41:2a:ca:b1:5c:9a:a1:fe:0e:ad:84:77:12:93:
                    a1:ee:bc:f7:e3:a2:bf:9e:e3:1e:56:7e:b2:e6:62:
                    06:f7:40:00:f5:10:d1:ff:2e:98:67:fa:6e:bc:3e:
                    68:95:59:f6:3f:1b:21:00:51:37:30:71:d7:62:23:
                    67:77:99:23:43:98:2c:68:d8:e6:12:cf:de:8d:d8:
                    df:fb:03:50:2f:8c:db:c8:e2:d0:10:c9:48:10:64:
                    e5:b7:b6:38:a5:4c:7b:60:83:b1:ce:26:fd:a2:44:
                    d5:e8:a0:bf:94:fa:a5:16:70:52:39:ef:e2:a9:55:
                    34:00:dd:ad:99:21:f2:74:11:e3:be:41:d8:02:27:
                    21:4a:8b:0b:1f:a2:06:e3:e7:dc:89:df:e2:9a:94:
                    f0:92:43:d9:a1:8e:76:93:d0:57:9a:c8:dc:dd:9e:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:60:24:91:35:7C:86:EA:66:48:5F:C3:71:33:44:82:34:42:AB:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.76.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:d8:ea:29:ae:df:5e:b9:ae:2d:50:94:37:cf:a7:8a:05:
         ce:5a:58:ec:2e:c0:20:8c:91:88:d3:3d:97:0b:03:f5:23:83:
         1b:8a:c8:cc:dc:ce:41:b3:db:90:ec:4d:dc:90:d8:1c:33:6c:
         9b:bd:f2:0e:94:f6:ce:b0:ab:a5:95:f5:5e:9a:4f:7a:34:23:
         fa:cf:f4:8e:fc:91:f7:c4:35:93:f0:69:45:00:19:7c:e5:92:
         8a:0e:a9:97:f8:a8:64:5a:d0:93:19:37:48:c5:d2:df:e1:54:
         04:2a:a2:39:08:37:04:09:96:c6:f4:06:df:54:0d:02:cc:83:
         aa:69:2b:ad:8d:ad:77:49:d3:1a:39:5e:06:61:64:c2:ad:6b:
         32:44:5f:c0:58:7a:0b:99:b4:fc:f9:5d:44:91:cb:0d:29:48:
         aa:01:fc:9c:33:77:5e:be:e0:2d:b9:9f:e5:80:5e:61:ce:d2:
         67:cc:99:64:2f:06:95:77:f1:b8:c8:02:61:55:28:55:75:b8:
         9c:13:75:bd:f8:00:15:03:98:32:e9:ef:18:ae:93:22:df:e9:
         ed:61:bf:2c:6e:f2:54:8a:20:28:da:f6:8c:8e:91:3d:b7:6a:
         a6:c1:b8:a1:85:8d:4e:e6:b8:1d:8a:c4:c4:0d:f3:26:f7:90:
         75:d6:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:33:04 2026 by rpki-client