Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/fe5a6860-9b9b-3031-86b7-e5ac074bd7f2.roa
File:                     fe5a6860-9b9b-3031-86b7-e5ac074bd7f2.roa (raw, json)
Hash identifier:          XrG6sVy4DXBqA2so1HIPWwXWcES5uo6iO7QqSRzoT50=
Subject key identifier:   D8:02:29:ED:EB:DB:7E:87:54:41:4F:11:F6:DD:05:FE:4B:B6:04:57
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584EB2B1F898B9CA9A30E7A86F00
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/fe5a6860-9b9b-3031-86b7-e5ac074bd7f2.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     393939
IP address blocks:        72.50.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f8:98:b9:ca:9a:30:e7:a8:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=ff785e16-556b-49a1-8a34-0e11bee8e42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:80:4f:b0:f2:e3:5c:b8:64:f7:56:b8:76:
                    ad:1e:f0:bd:eb:f5:e6:dc:b1:5e:f6:8c:a5:4c:20:
                    6f:6d:ca:91:c2:1b:e9:c7:8c:47:39:7e:37:69:4a:
                    ff:dd:de:1a:2f:cf:72:77:77:55:c5:8f:90:95:fa:
                    0d:dc:a7:fe:19:ee:3b:c2:cf:20:02:ab:f3:95:99:
                    bb:65:d1:89:81:0f:d6:c4:ff:b6:ac:0c:bf:20:dc:
                    4c:d6:eb:f6:1b:23:aa:8a:94:19:24:97:c2:cf:be:
                    db:01:41:f0:0a:1f:19:cc:64:4c:1b:ea:33:25:a3:
                    6c:7b:6d:86:07:8c:8c:70:d8:10:02:2e:f3:82:2d:
                    d0:1a:64:eb:0b:94:e4:ec:41:70:fe:f3:2e:38:33:
                    e4:29:31:f6:06:d6:e6:43:20:06:d6:0a:be:45:e6:
                    f1:4b:fe:35:91:3f:cd:89:17:f6:41:46:9b:2d:46:
                    cd:8b:15:8f:8c:52:39:0c:67:2c:7f:63:f9:d2:97:
                    42:db:2d:2b:d5:7a:4e:aa:34:5d:56:4d:5a:65:04:
                    5a:5a:40:c4:db:6c:d0:1e:f4:88:31:50:e0:7e:c2:
                    a9:3b:27:85:35:9e:e1:93:5e:3d:41:a9:25:bb:dc:
                    f4:42:63:4a:50:45:02:6b:16:3e:0d:22:12:d3:5b:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:29:ED:EB:DB:7E:87:54:41:4F:11:F6:DD:05:FE:4B:B6:04:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/fe5a6860-9b9b-3031-86b7-e5ac074bd7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.50.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6f:7a:21:a6:94:0b:68:30:de:2b:fd:1e:d2:ea:a4:3e:7d:
         0b:74:47:87:cb:9e:79:c1:75:7a:1f:1f:46:4c:ee:8e:b5:1c:
         78:ea:ed:a6:85:0a:3d:ba:27:2e:86:56:c1:64:b9:ed:09:67:
         d7:99:71:0e:58:bb:44:d1:1b:4c:d9:86:d9:79:71:59:8d:21:
         3b:e6:52:4f:76:89:ad:d2:7e:cb:0e:4a:7c:4e:ef:43:b4:f6:
         00:e4:04:0c:1a:78:2d:27:d9:f2:84:78:f8:42:e9:26:21:f2:
         02:9e:33:d4:2c:70:35:3d:f9:9e:a8:51:f7:86:bc:5b:71:a8:
         4d:14:29:3c:2a:31:6f:b1:56:5d:2b:a5:f5:41:52:a7:c9:a2:
         73:bf:2b:ef:f0:8c:f0:a3:91:de:fc:ce:2d:96:6b:b1:67:a4:
         72:c5:36:0a:32:3b:1e:23:ed:96:a5:23:f9:fd:63:b0:1b:8e:
         28:4f:8a:34:81:97:d5:ee:9d:36:3c:78:2b:b9:3c:f6:42:74:
         c1:68:38:53:19:31:19:c0:4e:90:ea:d9:b7:6d:5f:f9:14:08:
         3f:f1:41:ad:f7:b4:f9:76:6d:68:53:c5:0d:f3:79:83:e5:e9:
         d2:37:98:01:a2:1a:58:97:af:c5:4f:c4:2e:b5:dc:8f:96:13:
         d8:ba:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:34:58 2026 by rpki-client