Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/edb5656f-7715-3a12-ba88-c91695fdb1b1.roa
File:                     edb5656f-7715-3a12-ba88-c91695fdb1b1.roa (raw, json)
Hash identifier:          uLL5zNSBRCZ1fZ9oiUnjex7pB0p2znuMUwwcQ4KaRxA=
Subject key identifier:   5C:33:AF:FB:80:7C:D2:C0:14:46:C6:5B:96:45:7B:08:82:F0:CC:BC
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584E6B44A2A1B3CA330A2C994480
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/edb5656f-7715-3a12-ba88-c91695fdb1b1.roa
Signing time:             Tue 07 Jul 2026 10:58:18 +0000
ROA not before:           Tue 07 Jul 2026 10:58:18 +0000
ROA not after:            Mon 05 Oct 2026 10:58:18 +0000
asID:                     402236
IP address blocks:        172.111.58.0/24 maxlen: 24
                          172.111.59.0/24 maxlen: 24
                          209.142.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:44:a2:a1:b3:ca:33:0a:2c:99:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul  7 10:58:18 2026 GMT
            Not After : Oct  5 10:58:18 2026 GMT
        Subject: CN=4ca1bc09-3a12-4bb5-a4c2-fbf18e6935c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:35:6c:75:fc:9d:c5:b7:31:f0:0d:9f:13:
                    65:dd:70:57:3a:42:7b:c8:77:ea:ba:bd:45:4b:60:
                    84:af:e9:3f:23:8b:c7:ab:02:00:64:f8:10:6b:f9:
                    c0:08:28:cb:f7:2b:57:3d:92:65:5e:59:38:e8:17:
                    96:3e:59:77:88:f8:1a:38:39:81:5c:bd:35:33:04:
                    a9:32:23:0a:b6:13:27:c1:63:9a:fd:fa:b2:5f:08:
                    54:20:29:39:85:56:74:0a:4c:0a:5c:c9:d4:ae:75:
                    95:52:21:8b:31:7c:3f:51:23:51:a2:69:87:9c:4c:
                    8f:85:1e:8b:01:0d:d4:3c:64:9b:a4:97:48:c7:ed:
                    48:96:b0:99:1e:78:a3:4d:5d:ff:9f:6e:ab:45:ba:
                    2a:f4:a0:4b:8b:cb:4b:42:3d:4f:a9:c3:5b:0d:93:
                    1c:ed:e1:de:89:5b:da:9b:78:16:e5:12:e9:8a:fc:
                    d8:3e:5e:c9:d8:6d:03:b1:41:6a:2f:c3:fd:86:95:
                    d7:67:f5:d4:eb:19:7b:c9:5f:7c:bb:56:54:d6:b0:
                    af:4f:88:14:c2:e6:94:0c:28:68:04:b6:95:06:a1:
                    a7:cf:e7:bb:e3:ae:0f:b2:9b:ce:b5:62:7c:7d:16:
                    e1:b4:48:c4:a8:05:89:ea:f5:92:39:e7:6a:02:63:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:AF:FB:80:7C:D2:C0:14:46:C6:5B:96:45:7B:08:82:F0:CC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/edb5656f-7715-3a12-ba88-c91695fdb1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/23
                  209.142.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:15:46:4f:f5:19:18:85:7f:cb:66:5e:99:a5:84:d0:9b:bc:
         08:d7:92:83:9f:e8:6f:27:93:5a:89:df:1b:69:2c:1c:a2:75:
         68:05:69:72:0c:0d:e8:3b:9c:4d:c0:f5:30:a9:cc:dc:e1:2b:
         81:4f:1c:07:8b:9c:67:f3:20:e1:68:9d:53:1f:76:6f:63:05:
         5e:db:75:6a:16:45:96:67:4c:15:54:d8:ca:e0:12:55:0c:65:
         e3:60:ef:52:7e:5c:b7:15:23:19:f0:4e:cd:ac:5d:df:d1:a6:
         0d:0f:39:98:ad:40:b3:f4:9a:c7:e1:fd:d4:47:47:24:f0:94:
         6d:0d:1e:7f:41:e3:36:56:32:48:4c:f7:bc:19:e8:b8:6f:ce:
         4f:20:2b:19:8f:cc:d8:b7:28:11:41:10:ff:f1:1b:a6:4e:46:
         55:91:49:26:5a:ac:02:01:8d:30:a3:98:07:91:4d:39:78:a9:
         1e:0b:84:9d:4f:3f:be:6c:52:2a:c1:24:cf:1d:30:e1:bf:df:
         b9:8a:e8:7a:0b:89:83:b5:cf:c5:53:39:a0:64:2a:99:f1:20:
         a9:68:d8:87:3f:29:60:4d:7b:14:84:d0:bd:47:b9:3f:f5:67:
         1c:16:7e:f9:8b:e1:1c:7d:43:61:2f:28:2d:88:b8:52:49:f2:
         76:28:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:43 2026 by rpki-client