Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/76cbac63-c2b1-3b69-ad27-ce0dd0d8626e.roa
File:                     76cbac63-c2b1-3b69-ad27-ce0dd0d8626e.roa (raw, json)
Hash identifier:          4+JvHekaynsPklTBYGAo1bKW7wXAz+sLiUI00FkWG4s=
Subject key identifier:   54:D0:81:D4:41:E9:C7:61:E2:A9:B2:F9:48:E7:C5:73:A1:7B:27:1B
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584EE9924A15ABA8FBC4CBA3B100
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/76cbac63-c2b1-3b69-ad27-ce0dd0d8626e.roa
Signing time:             Fri 21 Aug 2026 16:46:37 +0000
ROA not before:           Fri 21 Aug 2026 16:46:37 +0000
ROA not after:            Thu 19 Nov 2026 17:46:37 +0000
asID:                     31898
IP address blocks:        129.101.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:92:4a:15:ab:a8:fb:c4:cb:a3:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Aug 21 16:46:37 2026 GMT
            Not After : Nov 19 17:46:37 2026 GMT
        Subject: CN=c1668bf3-264a-4dfa-bb40-7dd2c1738899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:62:c2:a4:d1:92:fd:f4:d5:1c:64:24:c8:
                    a4:90:bb:10:30:c7:97:77:e2:35:91:64:3f:12:44:
                    fb:b0:d6:b6:1d:1e:ad:e8:de:fc:e9:ae:50:10:15:
                    7d:9f:10:b8:10:f7:d2:53:5f:d4:c9:de:70:45:38:
                    ea:60:70:5e:a4:eb:c6:90:fb:66:d7:8a:11:43:06:
                    8c:1e:35:b1:b2:9a:c5:5e:21:03:79:13:06:9b:7c:
                    76:1a:de:a9:2d:f7:f1:d7:2e:17:5c:b4:9c:12:01:
                    29:fc:64:be:b7:5f:ee:90:24:46:8f:50:5c:53:41:
                    f2:ce:e8:dc:89:6c:f7:2f:a4:f5:53:c1:ce:d8:20:
                    23:4f:4f:4e:b4:24:57:74:0e:f6:9f:39:82:46:17:
                    93:dc:5a:6d:24:a1:f0:f8:92:4f:39:b2:99:8f:2a:
                    0c:4f:ee:ee:5d:c8:96:bf:b6:37:a9:7a:44:f2:24:
                    53:73:f5:c2:8a:5a:f8:fa:22:d0:6f:3c:10:f6:e1:
                    75:1a:1e:18:45:c4:ed:b6:cf:7f:ee:ae:54:37:27:
                    39:f0:01:32:01:db:6c:de:b6:1a:02:e1:f0:c7:38:
                    29:e3:81:63:85:68:ec:b6:50:9d:e9:32:be:5b:6f:
                    d3:5c:e7:23:de:9e:5f:f6:0d:d7:9b:b9:4b:5e:ac:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:81:D4:41:E9:C7:61:E2:A9:B2:F9:48:E7:C5:73:A1:7B:27:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/76cbac63-c2b1-3b69-ad27-ce0dd0d8626e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:ff:40:df:5c:91:65:85:77:75:69:9c:df:e5:49:b7:d4:
         c1:53:0f:1f:0b:67:fb:ad:5a:46:f8:8a:ea:e9:4d:3e:7d:30:
         d8:54:24:ba:c5:cb:e4:20:cf:25:5d:6b:57:87:4c:e1:47:89:
         21:71:8c:e6:57:f5:a6:3a:b7:cc:46:bd:f0:49:a6:86:76:86:
         bc:82:7f:28:8f:01:9c:c9:6d:05:e2:d6:fb:86:44:05:9e:ee:
         94:cf:19:65:4b:1f:04:62:17:88:90:80:ae:83:8a:71:35:5f:
         ff:37:71:c5:17:1b:cf:80:ac:57:4d:58:04:7d:19:7a:27:3a:
         de:9b:0a:3c:6f:20:03:28:bb:3e:3c:49:ae:6c:12:18:6f:06:
         35:f9:7d:bb:cc:92:8b:a2:e3:2b:17:75:2c:64:07:83:ea:b2:
         93:e7:06:fe:13:10:5c:bc:3b:65:b6:06:c5:a6:dd:6f:ea:f9:
         e7:85:21:63:e2:e8:b9:7b:44:2c:3d:f7:dd:40:61:57:81:8c:
         22:06:9b:d8:7c:41:6a:ca:27:9e:92:bc:ff:7c:ac:28:74:3b:
         79:1a:21:c4:36:04:dd:e7:1f:0e:9b:79:74:d0:67:9f:f8:59:
         54:7f:87:cc:1a:c0:1f:0a:74:a8:b8:56:a9:19:d8:72:d6:48:
         a6:3d:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:33:44 2026 by rpki-client