Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa
File:                     692f5272-0ac6-3e25-a216-1e24529614aa.roa (raw, json)
Hash identifier:          Ofrljl+JCKOTuxfemaDq4atFFcDcku5WD7U2XFT8b/c=
Subject key identifier:   C3:F1:C8:AE:2B:16:6F:F6:B6:57:BB:2B:5B:52:2C:1D:02:E3:A7:C2
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584E36017FC85304F8E683EAC570
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     58212
IP address blocks:        72.14.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:7f:c8:53:04:f8:e6:83:ea:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f0699850-b152-4d61-898a-5a09332b7ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:75:5b:26:d2:62:ae:31:2e:dc:09:93:aa:
                    c3:d4:26:91:95:0f:d0:31:dc:3a:09:22:93:c7:5d:
                    d2:9c:fb:29:68:a4:e3:b9:dc:69:d7:e1:05:11:60:
                    ed:f4:61:f3:bd:98:c2:1c:a5:d6:48:6a:14:80:6e:
                    34:bd:8a:d1:5d:91:73:56:9e:d5:fa:24:1c:42:fd:
                    93:13:db:9f:c9:bb:90:28:38:6c:88:31:48:c2:77:
                    e6:6b:ce:16:c1:1d:59:c7:7f:81:20:41:55:c2:f4:
                    84:5a:64:f4:e9:45:e2:ff:09:ea:3f:ed:9d:f5:f2:
                    fa:41:68:60:c1:77:9c:df:c0:c3:4c:98:e8:1f:90:
                    93:36:91:77:63:81:f6:56:d0:b6:27:55:f8:cb:5d:
                    86:74:15:c5:02:d7:3b:c0:42:40:ae:38:fb:f0:c9:
                    12:05:73:85:d5:ee:b2:bb:e6:ce:b8:af:aa:ae:8a:
                    00:f0:be:d0:6b:9d:8f:d4:22:70:ae:6a:0f:a3:05:
                    4e:55:de:31:c5:12:a8:30:f7:d7:55:c9:76:57:a4:
                    c6:c6:67:1d:a4:cc:52:55:de:85:e7:b0:ec:f8:6b:
                    82:b7:2d:fc:b4:be:4e:de:a6:aa:4f:a7:ba:d5:bf:
                    f5:e2:b1:0e:9d:69:04:a6:29:8a:e5:b0:c4:b2:5a:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:C8:AE:2B:16:6F:F6:B6:57:BB:2B:5B:52:2C:1D:02:E3:A7:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:5a:fe:37:b5:e2:87:3e:4e:7f:56:c8:0d:12:85:4e:86:
         2a:36:a7:d2:c1:8a:98:07:d8:4f:e9:84:ed:f0:12:70:1d:5e:
         5b:ae:55:3e:e1:a2:53:4b:c8:60:18:b1:63:e2:c5:b9:1d:af:
         60:50:aa:15:72:a6:17:be:7b:48:c9:41:ee:0a:72:10:cb:50:
         d3:cc:3e:f4:34:fa:43:e4:9a:9e:c1:c3:01:6e:eb:f4:e0:1f:
         44:71:dc:b2:0c:ca:09:91:19:70:a7:95:f4:67:a9:1e:00:f6:
         dd:e4:d1:06:1c:2c:3c:12:ca:34:9e:e9:f2:50:2e:fb:4c:5f:
         08:64:cc:43:57:47:93:00:b4:82:ad:e9:10:da:b0:ad:54:a4:
         5b:d9:31:9e:1c:dc:1c:b7:4f:e8:13:17:8b:8d:d8:96:31:1e:
         34:eb:84:03:a8:62:27:e4:a1:28:41:32:b8:39:11:89:6a:a8:
         2e:ff:92:16:9e:8f:88:52:c9:af:78:88:87:c0:b9:71:1e:60:
         1d:fc:90:3c:65:eb:1a:c9:57:3d:2c:36:41:5f:4b:72:82:0a:
         5d:b9:62:81:8a:8f:26:b2:c8:64:8b:7b:6f:ac:d6:23:97:5b:
         52:ff:63:26:05:db:c5:c5:18:d8:f7:03:19:1f:09:c9:d4:a0:
         58:f7:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:03:48 2026 by rpki-client