Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/9f9bcb4e-c9f8-35a9-97e6-9fd3fb3573b7.roa
File:                     9f9bcb4e-c9f8-35a9-97e6-9fd3fb3573b7.roa (raw, json)
Hash identifier:          HF1zR3jgR3zRqWQ6BuizW69t7qH6JmmoVsXb8EKAV0Q=
Subject key identifier:   AC:57:B6:50:D2:D0:CA:15:9B:D8:1D:3A:41:4F:87:32:97:13:F6:AE
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584EA7870DAA8687BC3AC62D5AA0
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/9f9bcb4e-c9f8-35a9-97e6-9fd3fb3573b7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400666
IP address blocks:        206.72.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:0d:aa:86:87:bc:3a:c6:2d:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9de48c17-ec05-410b-a3e5-e8fb0b918a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4b:a8:54:69:c2:a9:9d:8f:be:bb:a8:cb:a3:
                    6a:d8:9e:fd:89:7b:9b:5c:45:d4:b8:e2:35:27:67:
                    65:cd:f7:5b:39:cc:bb:bc:f6:6d:9a:33:85:39:3f:
                    8e:3c:6c:66:63:09:b8:58:81:50:13:27:e8:43:2e:
                    93:7c:10:21:75:93:7e:61:f3:c1:6c:57:72:a8:c3:
                    7e:8e:e7:4b:8d:c9:c5:ba:39:e3:f7:ae:14:3f:05:
                    ea:0f:d0:aa:59:e0:b7:46:24:1b:68:29:fb:60:05:
                    82:b9:7b:12:c6:47:f8:41:4b:57:7c:44:ea:af:44:
                    5f:14:64:bf:cd:37:24:04:26:f7:36:18:dd:0c:64:
                    18:b9:ab:44:b4:8b:54:43:e2:30:c8:1b:cd:19:b2:
                    a5:8f:4e:bf:cd:9e:89:1a:6c:41:72:9a:9d:b9:41:
                    31:8e:11:0f:ce:24:f9:6b:6c:35:e3:59:ba:67:3d:
                    9f:3a:ac:fb:0b:6c:a6:31:4d:72:46:86:f4:70:b7:
                    2b:93:35:e5:c5:51:c9:fb:37:a8:4c:31:8b:f9:67:
                    5b:59:3b:38:f0:23:fd:16:e3:8e:6d:7a:da:8e:5b:
                    1d:c4:43:88:f9:63:97:9f:d1:d5:d1:75:08:4c:a8:
                    7d:23:69:79:fd:a2:b3:6c:83:8e:bb:30:34:5c:ba:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:B6:50:D2:D0:CA:15:9B:D8:1D:3A:41:4F:87:32:97:13:F6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/9f9bcb4e-c9f8-35a9-97e6-9fd3fb3573b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:7d:f1:bc:4e:21:46:96:be:32:98:a0:60:46:8d:ab:6b:
         cf:8e:fd:29:c5:43:53:37:ec:23:33:cd:52:72:b7:22:b9:77:
         e2:96:59:d1:1b:c3:59:2c:2a:66:6c:0d:5c:9e:36:ba:3e:06:
         49:15:23:e2:d7:5f:70:02:f3:d4:cf:ca:3c:4f:40:9a:c9:2c:
         e6:42:d1:ae:fb:69:bb:6b:f4:4b:b3:ec:11:70:e6:28:de:2e:
         8b:94:cd:fb:71:55:7b:a4:ed:f6:93:b3:73:c3:01:5e:89:c5:
         02:5f:4f:b5:f2:b3:2f:04:10:aa:38:e1:46:be:ce:21:fc:c0:
         29:1d:bc:c7:cd:f2:d1:d4:3a:55:d2:8a:62:56:72:b9:25:95:
         ef:df:20:bd:81:0c:fc:0a:3a:be:07:a2:bc:4b:b3:c2:95:77:
         42:35:55:d4:3d:e1:05:eb:a0:a8:7e:5a:5a:db:a8:82:9b:de:
         fb:7f:0d:49:b0:97:3a:67:65:cd:38:a0:69:c3:6c:91:c5:22:
         ab:f3:cb:1a:d8:f8:1d:54:cb:45:f4:01:94:0d:6c:33:5f:6b:
         2d:6a:c8:93:7f:d2:e4:8e:fe:b8:0b:08:3c:cb:97:19:66:b6:
         1a:ec:f5:c2:68:5c:1b:32:6e:51:f0:0a:20:2a:06:ff:e5:66:
         ac:9f:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:39 2026 by rpki-client