Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa
File:                     3be7d533-8374-34e8-8ae6-527bb38f1d34.roa (raw, json)
Hash identifier:          ApkXCCsCMPJc3dPNT4jtMqoZLFKCPKeYQ+JBbr4wPIc=
Subject key identifier:   DB:55:80:74:D3:39:BC:57:5D:F1:AB:48:F5:E6:6B:7E:24:74:93:83
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EC0A7386D19F82345EA141080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        172.217.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:38:6d:19:f8:23:45:ea:14:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=8acb7255-1c1e-4fe0-8baf-516d3d73e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:5e:f5:c7:18:6a:63:82:6a:8a:f0:cf:e5:
                    41:c2:c6:3a:f6:33:9b:d2:84:6f:81:ca:f3:97:a8:
                    cc:33:ce:df:37:67:42:28:9a:b7:cb:49:b0:33:fa:
                    d6:0e:2d:56:a4:4b:25:eb:16:82:5d:a3:df:c1:d2:
                    a5:18:98:b2:4d:a7:1e:56:c1:d0:8e:42:af:14:86:
                    af:81:30:69:74:32:1d:03:d8:5c:c1:fb:58:d9:31:
                    e8:6f:82:71:eb:b0:89:f6:1a:13:e9:31:fb:56:17:
                    0b:3c:3c:f5:92:10:e1:af:fd:83:86:26:d9:9f:50:
                    71:a5:76:cc:42:03:9c:32:a1:3c:b7:5f:f2:8d:c2:
                    7c:60:7b:b6:15:a6:6d:d3:86:93:c3:da:a0:b7:4e:
                    b5:47:3d:6b:38:fe:69:49:3b:0e:61:0e:db:2e:08:
                    b3:ba:c7:df:9e:1c:9f:0f:89:4f:2b:ca:72:e9:a6:
                    cd:8a:bf:1a:b6:2e:0d:d5:1b:7b:97:7a:a0:15:93:
                    f4:5a:e6:34:87:a1:ca:e9:b7:b7:81:c9:3b:71:1b:
                    44:23:ca:74:75:b7:77:8c:1a:d1:5d:94:ae:67:02:
                    a9:76:19:96:49:7e:d1:47:66:48:95:18:8f:32:42:
                    66:ce:6b:19:ad:c3:1a:25:c6:ce:e5:e9:65:98:cb:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:55:80:74:D3:39:BC:57:5D:F1:AB:48:F5:E6:6B:7E:24:74:93:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1e:e0:32:b4:4e:9f:96:6f:10:df:13:60:1c:06:4d:1c:f5:
         c0:9a:25:0f:a6:e3:d6:a6:c1:b2:99:35:a6:81:5a:b9:90:42:
         4b:df:c0:f1:1a:8c:a8:94:9f:4e:d9:4e:52:94:ea:74:14:c1:
         c2:bb:7f:a5:4c:fb:47:e0:17:c5:64:49:7c:ea:7b:68:89:33:
         de:76:29:e1:2a:b7:29:ca:0a:a4:4c:33:52:c2:0a:e8:e1:77:
         08:7b:8b:71:3f:16:7c:19:4a:36:c0:a6:26:36:57:57:d2:0c:
         56:e6:dd:0a:aa:b0:52:6d:c9:76:91:93:b7:ec:d7:84:fa:7a:
         0f:30:db:e0:ae:fa:b9:a0:a9:13:37:ed:8e:16:f0:99:d4:4a:
         b4:02:ac:c0:5e:ea:ef:40:a3:ca:93:19:59:ca:8e:d3:6e:ef:
         88:1e:dd:18:5c:3d:ce:fa:9b:5e:0c:b3:72:41:5a:96:ad:f5:
         62:17:c8:15:d9:d5:0b:59:dc:ab:71:f9:2d:71:76:4f:fd:14:
         5c:7c:a9:b0:5b:89:99:e2:97:2c:74:cf:31:b9:e1:bf:23:03:
         b1:e4:a3:4e:46:b9:2e:0a:70:8a:4b:ed:52:3a:4b:e3:94:f3:
         5a:62:12:b5:c3:ba:f5:90:4d:47:62:1a:27:de:26:e6:78:08:
         8d:a6:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:46:38 2026 by rpki-client