Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c56b4d8d-ea45-3202-b21b-dd8aab75fad6.roa
File:                     c56b4d8d-ea45-3202-b21b-dd8aab75fad6.roa (raw, json)
Hash identifier:          tVnGzWIWEvBNBj8Jk0NsO6gLWzvlUmG26GoaifwMHpQ=
Subject key identifier:   D2:A2:77:7B:D1:78:D7:C1:D6:42:C8:F5:52:E3:1C:6B:BA:EC:6F:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCD3E29FA7FCD22585AE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c56b4d8d-ea45-3202-b21b-dd8aab75fad6.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        172.109.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:d3:e2:9f:a7:fc:d2:25:85:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=3d81a34f-f127-458a-a16f-d038a3ecca1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:88:29:63:73:54:db:0c:28:c7:aa:19:59:
                    f9:6a:03:60:a2:ad:9d:ce:66:c9:40:4e:57:0d:76:
                    e0:be:2a:5d:d9:58:55:6a:b4:da:89:c0:12:53:d9:
                    da:81:2d:fc:48:3c:16:66:27:09:7a:ee:a0:73:a5:
                    23:c0:4f:3d:05:17:d8:eb:f7:e6:2a:ac:51:45:32:
                    d0:2c:d4:2a:60:61:22:63:de:ae:24:d6:36:0d:3d:
                    1c:27:e3:9a:2e:b4:2c:26:42:02:fa:23:cf:0e:2b:
                    94:c9:6f:10:4a:fe:a1:83:00:b8:ff:a9:4a:fa:be:
                    f4:8c:48:30:b8:51:20:89:33:58:05:46:c8:2b:68:
                    c7:6b:42:60:f8:17:36:87:6c:20:cb:08:df:2d:a3:
                    f4:48:dd:d4:89:62:44:49:59:7d:7f:99:bb:97:ff:
                    d4:90:56:c8:29:e1:2a:c9:6b:46:84:07:51:e0:09:
                    d3:c5:fa:9e:0e:84:75:44:74:4b:6f:bb:85:c1:68:
                    54:a7:88:2b:28:87:a6:3a:ed:4b:09:43:0c:6d:a7:
                    c6:ec:45:5c:7f:d2:16:e3:d1:68:42:de:f7:a1:4a:
                    a2:3c:60:25:be:c2:29:d7:79:ad:0d:ad:f1:54:8a:
                    a1:83:71:a6:f1:77:40:f2:9e:10:fd:e2:02:65:78:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A2:77:7B:D1:78:D7:C1:D6:42:C8:F5:52:E3:1C:6B:BA:EC:6F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c56b4d8d-ea45-3202-b21b-dd8aab75fad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e3:23:6c:fe:7e:e1:c1:a1:39:4d:95:17:67:a4:d3:26:97:
         93:d2:6c:fa:76:0c:61:0d:1e:4f:00:ae:32:c6:10:fe:a2:ab:
         ec:f6:62:7e:af:4e:f7:cd:ea:88:e9:ca:05:ad:c8:55:a0:64:
         61:f2:2e:f9:17:e3:07:4c:c2:7a:be:5d:6f:e2:95:bd:1e:47:
         b9:8c:c1:c9:3e:a7:d8:8c:cd:31:71:fa:d1:c1:47:fd:5e:32:
         f2:6c:90:5d:2e:c8:f1:df:90:00:92:91:53:9a:5b:db:62:45:
         85:a8:66:4b:d5:bf:be:27:ab:74:90:b5:a9:b4:f7:e0:e3:37:
         0b:64:c8:4c:16:ee:5a:31:e3:8f:07:c2:78:89:88:fc:9d:15:
         13:f3:d7:55:bf:87:43:0b:31:5d:6b:de:03:66:2a:e2:01:b3:
         86:45:fd:bc:53:38:82:cb:7c:a5:10:23:de:09:48:b5:7f:18:
         67:7b:62:e0:58:19:5d:2d:c5:7b:f0:93:e6:77:68:9b:72:65:
         bf:e5:53:28:67:c7:2f:8f:c1:ca:e4:91:ea:87:54:c5:f7:5c:
         d9:6d:2d:b7:bd:4b:0d:33:35:2e:bd:c8:23:f1:e2:2c:fa:aa:
         15:5e:e1:3f:2b:77:f3:b3:f6:b9:1b:ec:63:c6:05:16:aa:85:
         7e:c9:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:43:22 2026 by rpki-client