Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa
File:                     1feacc45-abc0-30a4-b522-017d85a47719.roa (raw, json)
Hash identifier:          2BHB27t6nFAoP+n0X3dmN8tioH6WXTb+Vb3uMy/ybrk=
Subject key identifier:   D3:39:78:97:5C:7E:2A:36:88:A6:F2:6A:66:03:F4:4D:A9:BE:05:F3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A03452D3244424F15D3D40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        172.217.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:34:52:d3:24:44:24:f1:5d:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=41e97063-0f9d-4b45-b7ac-61cd1e2bde78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:54:3a:91:c5:f0:79:5f:02:b6:19:1d:3d:
                    fa:00:0a:a1:2d:61:93:c3:a6:8c:b4:f6:e9:4f:72:
                    23:17:ea:f4:06:22:f8:13:37:75:48:be:84:e2:27:
                    17:a8:e5:52:c9:91:f8:63:84:a4:51:85:d3:07:7c:
                    42:03:7f:2f:c7:f7:2c:f5:13:bc:e9:a4:05:fb:fd:
                    5e:04:a2:1e:85:83:c4:8c:2a:d3:96:dd:c1:3a:5c:
                    2a:8d:c8:d4:11:dc:34:c4:44:d0:ef:2e:5d:5d:1c:
                    5c:07:c5:4a:45:20:c8:bd:ea:9e:4d:0e:b8:38:67:
                    ac:df:22:61:99:5b:73:b7:05:a3:83:6f:59:33:49:
                    aa:8b:90:7d:1a:e6:ba:c5:80:ff:22:5a:1a:28:14:
                    e2:0f:a9:0f:01:b4:07:47:0f:d6:34:80:b1:62:f7:
                    4d:60:15:38:47:2d:da:a2:e5:29:42:ae:1e:73:c5:
                    89:f3:45:bf:8e:e2:53:80:03:98:c3:64:5b:dc:b8:
                    ba:99:94:c9:94:fc:bc:4f:87:e8:f1:72:82:93:da:
                    3a:7e:b0:83:f0:3e:86:ed:70:c4:3f:fa:d8:cf:d8:
                    a6:75:88:52:41:5c:cb:06:f4:1b:8f:6d:1e:7c:59:
                    86:f3:7d:7f:31:55:f1:1d:32:84:b2:3e:bb:c8:c4:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:78:97:5C:7E:2A:36:88:A6:F2:6A:66:03:F4:4D:A9:BE:05:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:54:a8:50:78:9e:25:ec:f3:1f:e0:01:27:ca:ea:82:bc:
         b3:8a:e9:3b:ec:af:a2:77:c9:13:3c:50:0c:ab:f4:17:bd:b0:
         a8:e7:e1:da:e2:7b:86:dd:6c:3a:c5:50:cd:a4:fc:a6:62:6d:
         8d:6c:3a:94:91:26:46:5c:50:40:79:a5:09:d7:a4:64:b4:49:
         c2:ad:1e:07:d5:74:f4:90:38:58:85:67:d5:4d:3e:52:12:97:
         00:8d:7d:e3:8c:7d:84:57:a9:8b:c6:57:10:69:fe:64:67:cf:
         72:3d:ae:1b:cb:26:5d:31:0a:5f:e3:90:1b:95:13:d6:3b:c4:
         22:1a:82:63:7c:23:ab:f8:6c:a3:b3:19:b6:3b:53:c7:b5:de:
         4a:3e:b6:38:18:32:20:a6:8b:cd:0b:c4:3f:37:03:27:58:fb:
         f2:68:b3:fc:1f:f0:ab:10:e9:d3:bd:b3:35:c5:d0:30:78:16:
         8d:d7:ab:d8:8f:af:9f:8c:20:23:3e:27:b7:de:1b:8a:45:9c:
         40:d4:19:bd:b0:d8:d3:7a:d6:be:40:1f:5c:f7:4f:13:24:0f:
         9b:94:5c:d6:48:ba:b5:54:32:ac:1a:1a:0e:1d:ae:d5:d1:a2:
         0f:37:a7:25:7f:cb:a7:f5:f3:99:2a:9c:f9:d9:f0:0d:50:ac:
         18:bf:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:46:38 2026 by rpki-client