Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
File:                     59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (raw, json)
Hash identifier:          MFz+GONzAU/3Eabmr9ldHa0ZmpT5fLaVpjP39xCFgG0=
Subject key identifier:   B6:5D:51:6F:32:3E:8B:DE:17:3F:84:23:52:2E:9E:22:68:71:B5:6E
Certificate issuer:       /CN=223a4b84-939d-437b-85a8-9ff465d0541e
Certificate serial:       010D0C9F4328584E6574B085DE82F392A9E43C80
Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     8075
IP address blocks:        69.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:b0:85:de:82:f3:92:a9:e4:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=fc0cd3d6-7917-44e7-970d-4f4a70b67f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e3:22:a9:68:10:92:e2:66:30:6a:6a:a6:d6:
                    e7:66:79:11:cc:ab:2c:96:e1:1b:06:b8:59:9e:16:
                    8a:8f:51:a5:a5:23:1c:4f:67:88:76:24:d4:e3:83:
                    b7:37:de:1b:c2:f4:ce:37:98:be:c5:2e:fe:11:53:
                    ef:07:3c:dd:88:c3:1d:1b:eb:5b:93:4f:02:8d:45:
                    90:aa:78:64:6b:86:06:1d:d6:31:b5:dc:16:ff:c4:
                    56:7d:af:9a:75:9c:b5:a5:8e:45:c6:37:29:d1:f1:
                    4a:f2:58:3c:2c:ba:01:9d:13:45:6e:fa:a9:e1:11:
                    28:c4:1c:89:35:fe:18:b5:97:ce:15:d8:c7:f8:09:
                    f1:36:94:d2:c3:d8:eb:53:e2:29:81:02:76:47:2e:
                    c5:af:15:81:2a:4a:ee:0e:2e:7a:55:3f:90:a5:bd:
                    82:f8:71:60:f8:78:62:a9:4e:15:14:42:8a:e6:0c:
                    89:8f:42:4d:d5:e5:40:b0:b8:3f:77:ee:5b:0b:03:
                    fa:59:d3:4a:b5:ac:39:99:db:3a:a4:1c:86:92:d7:
                    33:ff:57:d0:a2:59:38:02:1d:de:81:13:9d:c1:46:
                    88:78:81:60:84:20:00:0a:a9:af:6c:18:d3:16:7f:
                    c1:c2:cb:bc:29:33:5a:8c:fc:56:8c:4a:47:ad:6d:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:51:6F:32:3E:8B:DE:17:3F:84:23:52:2E:9E:22:68:71:B5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl

            X509v3 Authority Key Identifier:
                keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:41:68:7a:02:af:52:21:0b:37:91:e9:97:b7:33:a2:ef:e3:
         5c:01:59:a4:9d:29:ad:22:db:f2:5c:6b:b4:8a:c5:a3:b8:7c:
         26:6d:d7:9e:32:3c:dd:91:94:76:e3:38:1f:c6:d4:95:e9:da:
         4d:c6:72:25:87:ee:3a:6a:ab:60:f4:cc:41:92:1f:ee:dd:e0:
         21:37:12:e8:99:f7:f9:05:79:83:74:da:04:1c:ef:64:f4:8d:
         ab:4b:d8:e4:25:f6:5c:88:fb:1b:6b:15:27:01:22:20:c9:68:
         2d:2d:3e:4d:e6:30:5f:c6:87:ce:ec:34:c7:d9:30:9e:45:04:
         c2:a4:9f:91:85:e7:1f:0c:bd:78:a1:bc:9e:c2:89:d8:8c:a1:
         f9:f4:b5:1e:bd:30:69:ff:6e:33:1e:1c:fd:0a:c1:c6:1b:bc:
         ac:b3:58:35:9c:8a:8e:bb:96:ea:a1:e6:b0:69:d9:df:29:d0:
         f2:18:a6:59:c1:dd:68:15:08:3f:f0:7c:e2:7c:e5:41:ae:21:
         a7:5c:e1:3c:bb:7b:e3:85:be:fc:b8:51:c8:f9:ea:50:35:3d:
         54:d0:fe:8d:cb:e8:7f:a1:63:2b:ac:4e:78:8d:6a:d1:eb:77:
         c8:1f:22:1e:86:0b:68:5c:61:c1:62:32:77:22:10:7c:4f:20:
         9f:16:df:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ldLCF3oLzkqnkPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIzYTRiODQtOTM5ZC00MzdiLTg1YTgtOWZmNDY1ZDA1
NDFlMB4XDTI2MDcwNTA5MDAxM1oXDTI2MTAwMzA5MDAxM1owLzEtMCsGA1UEAxMk
ZmMwY2QzZDYtNzkxNy00NGU3LTk3MGQtNGY0YTcwYjY3ZjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eMiqWgQkuJmMGpqptbnZnkRzKssluEbBrhZ
nhaKj1GlpSMcT2eIdiTU44O3N94bwvTON5i+xS7+EVPvBzzdiMMdG+tbk08CjUWQ
qnhka4YGHdYxtdwW/8RWfa+adZy1pY5Fxjcp0fFK8lg8LLoBnRNFbvqp4REoxByJ
Nf4YtZfOFdjH+AnxNpTSw9jrU+IpgQJ2Ry7FrxWBKkruDi56VT+Qpb2C+HFg+Hhi
qU4VFEKK5gyJj0JN1eVAsLg/d+5bCwP6WdNKtaw5mds6pByGktcz/1fQolk4Ah3e
gROdwUaIeIFghCAACqmvbBjTFn/Bwsu8KTNajPxWjEpHrW1dwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZdUW8yPoveFz+EI1IuniJocbVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNh
NGI4NC05MzlkLTQzN2ItODVhOC05ZmY0NjVkMDU0MWUvNTllOWU0ZDUtZjk2YS0z
ODUyLTkxM2ItZjk3ODEzZmZlZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjIzYTRiODQtOTM5ZC00MzdiLTg1
YTgtOWZmNDY1ZDA1NDFlLzIyM2E0Yjg0LTkzOWQtNDM3Yi04NWE4LTlmZjQ2NWQw
NTQxZS5jcmwwHwYDVR0jBBgwFoAUty2YvxMnHjhhqY5/W/c+SXA3684wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNhNGI4NC05MzlkLTQzN2ItODVhOC05ZmY0
NjVkMDU0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUhHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVBaHoCr1IhCzeR6Ze3M6Lv41wBWaSdKa0i2/Jca7SKxaO4fCZt154y
PN2RlHbjOB/G1JXp2k3GciWH7jpqq2D0zEGSH+7d4CE3EuiZ9/kFeYN02gQc72T0
jatL2OQl9lyI+xtrFScBIiDJaC0tPk3mMF/Gh87sNMfZMJ5FBMKkn5GF5x8MvXih
vJ7CidiMofn0tR69MGn/bjMeHP0KwcYbvKyzWDWcio67luqh5rBp2d8p0PIYplnB
3WgVCD/wfOJ85UGuIadc4Ty7e+OFvvy4Ucj56lA1PVTQ/o3L6H+hYyusTniNatHr
d8gfIh6GC2hcYcFiMnciEHxPIJ8W3+A=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:54:09 2026 by rpki-client