Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa
File:                     5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa (raw, json)
Hash identifier:          wSYbU13IUNSyfVGqDN+0Dp1oUjtKXtDirC7YOmVF1bk=
Subject key identifier:   60:81:46:07:A1:3F:CA:7C:C0:04:8E:5A:CA:75:A4:86:E1:EE:20:25
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4C76BB85BE540E0FF0640
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        140.204.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c7:6b:b8:5b:e5:40:e0:ff:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=f1d56811-973f-4b1a-bcba-d4b45e3ae1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:22:09:59:23:75:3b:f1:01:ef:26:0c:e7:
                    8f:12:5d:2c:6b:a3:4e:3e:74:b6:d6:46:de:79:3f:
                    8b:23:d2:7d:fb:bb:7c:90:5b:57:7e:85:57:e6:b7:
                    81:2e:26:63:fc:ab:fc:c7:d6:2f:93:36:f2:67:c9:
                    86:f7:d2:34:1f:37:fb:d8:f2:3a:58:88:58:9a:39:
                    68:b9:ca:2f:dc:97:dd:39:9e:13:25:54:59:c0:1d:
                    60:c0:cb:cb:59:77:ae:64:d5:3f:8e:cc:0f:5f:e6:
                    30:33:45:b4:bf:07:22:9c:50:df:1c:04:8b:fe:26:
                    d2:9a:31:eb:1a:4a:d8:08:8b:17:1e:55:fe:f0:34:
                    e1:d0:71:00:81:3c:12:b5:98:36:99:52:e9:63:00:
                    13:88:61:3c:08:1b:7e:30:5b:da:e3:86:50:ca:e9:
                    cc:45:28:90:fc:74:a1:18:8e:4a:98:73:b5:dd:a6:
                    37:4e:0b:90:e2:1a:ae:18:b6:5c:0d:d0:b6:05:a8:
                    b7:2e:bf:bf:c7:42:a5:dd:69:c1:8b:d9:e4:be:3c:
                    78:08:57:48:e6:af:11:75:16:ed:07:4f:f2:5f:ed:
                    a0:0a:58:6e:f2:ad:7c:75:da:11:25:9c:52:27:d9:
                    8a:45:5d:b6:40:c3:84:eb:ce:b8:ba:da:54:44:60:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:46:07:A1:3F:CA:7C:C0:04:8E:5A:CA:75:A4:86:E1:EE:20:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:17:ce:ad:34:5e:06:37:0e:62:de:b2:8b:a6:46:22:5b:9e:
         f0:2d:2a:c1:99:0d:b2:d8:6f:85:2c:89:62:bb:4e:cb:49:96:
         e5:7d:51:dd:a0:86:f0:ff:68:0d:1f:25:d5:19:4d:80:69:05:
         45:c4:b0:48:a7:c2:cf:88:2a:f4:0e:e8:cb:56:20:73:85:7a:
         af:67:5f:94:d2:2d:ed:9d:1a:ff:7c:5b:e9:5a:9d:5c:d8:f6:
         9f:05:bb:ab:68:45:cb:ab:b1:96:a0:20:fd:bd:c4:ec:a6:90:
         56:de:0e:37:8b:0a:fe:61:7d:35:1a:5d:e3:ae:57:64:9b:cb:
         fa:35:0c:4d:e0:64:74:1b:f3:83:e5:a2:1a:a0:5e:ca:08:d2:
         5e:d0:19:f7:a7:8e:d8:25:c5:94:48:61:80:b5:b8:c5:55:99:
         71:23:b4:3d:29:97:a7:99:39:12:17:d1:e3:fc:c3:1c:6a:aa:
         97:f8:87:60:c2:3c:3b:f1:c8:16:39:46:47:d3:4b:79:74:4d:
         e4:47:db:eb:3c:32:b8:36:e8:4c:cb:98:9f:99:05:e9:33:1e:
         7b:5d:a5:e1:32:b7:08:b5:a3:8f:b0:6b:64:25:e8:b4:fd:fa:
         69:2c:af:cb:05:35:57:eb:bd:6e:7f:95:2f:68:7e:f0:5a:16:
         66:8b:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:45 2026 by rpki-client