Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/9cdb800c-a6ee-3dea-9237-16d6eb5ecfd7.roa
File:                     9cdb800c-a6ee-3dea-9237-16d6eb5ecfd7.roa (raw, json)
Hash identifier:          SoIreW9Q9suzSBhyk834ZeeuaZVE1034zGS4ze5s0LY=
Subject key identifier:   22:0E:3E:CC:0C:0B:37:8F:1C:93:7D:25:29:56:3A:CD:F6:71:FB:55
Certificate issuer:       /CN=65dc75a9-d89a-4a10-b35b-5f649226e613
Certificate serial:       010D0C9F4328584E9C3EC24CFB0146AA66A65D90
Authority key identifier: 66:F7:2D:F7:E3:07:39:AF:B3:E0:1B:0D:C8:28:6E:00:CB:1D:52:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/9cdb800c-a6ee-3dea-9237-16d6eb5ecfd7.roa
Signing time:             Sat 25 Jul 2026 00:01:04 +0000
ROA not before:           Sat 25 Jul 2026 00:01:04 +0000
ROA not after:            Fri 23 Oct 2026 00:01:04 +0000
asID:                     399138
IP address blocks:        169.128.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/65dc75a9-d89a-4a10-b35b-5f649226e613.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/65dc75a9-d89a-4a10-b35b-5f649226e613.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9c:3e:c2:4c:fb:01:46:aa:66:a6:5d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc75a9-d89a-4a10-b35b-5f649226e613
        Validity
            Not Before: Jul 25 00:01:04 2026 GMT
            Not After : Oct 23 00:01:04 2026 GMT
        Subject: CN=f8a0956d-6e0e-44e1-8493-497ec49f8398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:1c:0e:98:dd:29:45:ef:7a:3a:12:91:e7:
                    12:b1:9d:57:7b:9f:dc:89:0e:11:97:06:9e:ca:d0:
                    69:3b:e7:e3:fe:13:75:2b:2f:a5:5b:74:12:09:42:
                    bc:9b:14:10:68:dc:75:81:57:e7:a9:b5:9d:fc:a6:
                    23:d6:bb:3d:dd:26:97:ab:92:4c:3e:43:9a:a4:7d:
                    53:8c:3c:5a:40:95:8c:df:df:e9:6a:67:1d:cd:e6:
                    16:52:03:0d:82:49:03:50:5a:d3:9a:75:6c:e3:94:
                    34:6d:4d:c4:fb:53:b9:9a:f8:dd:43:e2:7f:4c:38:
                    a4:43:f4:36:a3:d6:ef:69:50:49:2b:c3:2f:16:37:
                    0d:19:03:51:92:63:a2:12:37:46:ec:db:af:86:76:
                    c6:23:af:9c:ab:d1:3b:c2:00:41:8b:ca:e8:3f:3c:
                    68:20:ea:6d:1c:0c:7f:f8:a1:93:7c:5b:38:f4:92:
                    45:e5:61:7a:d3:44:fe:10:00:ed:d2:47:22:0f:6c:
                    30:d0:8c:d7:e6:70:05:1e:bf:18:83:f4:04:a6:9c:
                    c5:35:1e:44:16:50:81:91:e7:d5:45:0a:0b:9d:52:
                    06:8a:23:ae:eb:d6:62:17:1f:3b:09:3e:24:9a:be:
                    1e:03:c0:14:18:4c:8f:96:d2:81:87:4c:71:81:5f:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0E:3E:CC:0C:0B:37:8F:1C:93:7D:25:29:56:3A:CD:F6:71:FB:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/9cdb800c-a6ee-3dea-9237-16d6eb5ecfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/65dc75a9-d89a-4a10-b35b-5f649226e613.crl

            X509v3 Authority Key Identifier:
                keyid:66:F7:2D:F7:E3:07:39:AF:B3:E0:1B:0D:C8:28:6E:00:CB:1D:52:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:00:68:2c:80:a8:23:18:35:cb:86:b1:45:a8:25:a7:38:
         3f:78:57:e4:18:67:b9:b0:60:48:a7:ec:84:73:08:36:ef:11:
         b4:30:d3:6b:1c:87:ea:e5:45:89:0d:76:ae:b3:ef:bb:b3:29:
         ea:26:64:09:64:7e:63:b0:5a:30:5d:c6:0f:23:ae:5f:e8:7b:
         5d:f7:ec:12:6e:1b:47:b4:2a:de:a0:88:1c:f6:56:08:28:67:
         e6:46:95:62:8a:68:62:7a:1d:6d:4b:2c:d1:17:70:0f:37:85:
         63:f4:e2:4b:9b:ca:66:de:8b:96:6b:ba:6d:75:40:55:42:83:
         50:63:ac:fd:1a:ca:1d:06:37:5b:d4:c5:35:13:a4:c5:36:a4:
         f6:82:a2:49:c1:c3:14:cc:f7:40:0d:6f:a5:b2:57:e5:61:06:
         f6:df:28:1d:33:d4:8e:85:3f:59:c4:30:4b:4c:88:d1:55:c8:
         ee:a6:33:08:89:04:e1:e4:15:a4:7b:47:b0:10:13:5f:aa:19:
         59:ff:a6:02:98:27:a2:04:95:1b:ff:b1:10:93:4e:75:dc:80:
         f4:94:21:55:d7:30:cf:d1:5b:59:61:48:38:08:bc:90:7c:40:
         93:63:54:60:a9:79:55:2d:50:8e:2d:c7:63:10:1f:eb:2f:1c:
         2b:96:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:01:15 2026 by rpki-client