Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e343912-2ef6-33f3-b305-23dfbe847126.roa
File:                     1e343912-2ef6-33f3-b305-23dfbe847126.roa (raw, json)
Hash identifier:          5ArgRHVMMqXXrYF2NNtJcqhWEsz7u6PDpptvMuMxvsc=
Subject key identifier:   83:B0:14:63:8C:7F:CC:BB:19:56:81:E6:4F:5E:C5:36:17:48:24:BA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79ED623949B46DA252C9440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e343912-2ef6-33f3-b305-23dfbe847126.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        172.217.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:d6:23:94:9b:46:da:25:2c:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d74a7f8-f3ea-4ba6-881d-349419ccd8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:f7:04:a1:25:34:d2:83:6b:ec:0a:68:83:
                    a0:75:75:fc:c8:9f:98:30:ca:8f:be:2a:f2:b8:b7:
                    16:72:9c:0a:2e:61:d2:b4:6b:af:26:cc:f3:f3:cf:
                    10:14:98:d9:b4:f3:0f:22:a7:ac:05:70:d0:57:a1:
                    c1:a4:89:88:8e:cc:93:e4:1f:d5:1f:6a:8d:91:66:
                    59:ec:95:f5:cd:ef:c5:13:d9:09:b3:fc:9b:9e:20:
                    20:d1:8e:b6:73:98:e4:fc:c6:1b:b5:05:6f:3b:93:
                    c2:38:62:25:cf:2d:01:3f:4b:9b:5a:1f:65:46:21:
                    b1:56:e0:9b:a3:0e:ab:87:95:eb:98:c6:21:68:2d:
                    7c:03:4b:6b:e3:d3:3c:30:eb:df:9c:2f:f4:a8:b9:
                    75:49:77:7a:ee:e7:d1:09:68:26:9c:98:15:b9:31:
                    ab:c1:cf:8b:67:07:94:d1:49:e9:21:cc:d3:4c:d0:
                    31:13:94:88:f7:5f:ab:0a:a3:42:b5:e6:9e:54:1d:
                    e7:ec:b5:d9:6b:40:18:40:97:b6:37:c9:c1:83:28:
                    e1:03:13:3b:aa:01:fb:cf:ff:f5:19:73:17:9a:c9:
                    69:63:78:25:3a:a0:a6:c5:26:91:65:05:8b:e4:39:
                    52:9e:1c:e0:e9:71:97:15:0c:d7:67:a4:53:0d:57:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:14:63:8C:7F:CC:BB:19:56:81:E6:4F:5E:C5:36:17:48:24:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e343912-2ef6-33f3-b305-23dfbe847126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:08:3b:b9:bd:bc:e6:7c:28:d8:a9:79:c5:ad:0d:70:3c:a5:
         b8:89:2f:ad:fd:48:46:3b:8a:e7:01:8f:42:ed:c6:ae:ea:3d:
         5e:d8:45:ba:d8:b7:af:bb:d4:ca:07:0b:a6:4b:3f:a7:4f:dc:
         41:aa:19:bc:db:f1:5b:c0:d3:f1:11:07:22:f2:14:78:c7:e7:
         4b:72:03:cb:e5:a3:4d:8e:1a:5f:cb:c2:77:c5:8d:11:ea:f1:
         60:47:6d:ba:16:70:e1:51:05:18:eb:77:a3:04:83:7a:3c:54:
         80:24:2c:f3:36:35:b6:96:e5:e1:9f:dc:bc:1f:f4:90:88:7a:
         b9:0d:62:be:6a:5d:49:e1:88:b4:d0:ef:49:46:24:72:75:74:
         56:13:5e:c6:f4:b5:9d:79:87:91:d9:ef:6e:48:69:ee:83:21:
         d8:c0:44:e0:5d:ae:5f:f4:c1:77:dc:88:43:71:6c:7b:32:95:
         de:a4:83:58:fd:40:99:8b:cf:6a:74:c8:1e:64:7a:9e:ef:47:
         80:d9:12:e1:26:5f:65:14:b0:62:27:76:c1:ef:4b:57:31:18:
         05:60:ea:33:4f:e7:33:0f:2c:48:73:e0:8a:f0:61:4e:f9:ee:
         ee:18:20:ae:0b:e0:31:b2:04:95:b1:e3:a8:81:fe:cc:35:ac:
         59:6d:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:47:28 2026 by rpki-client