Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa
File:                     44ba4ade-2c64-3fe6-a21e-385033d36313.roa (raw, json)
Hash identifier:          9eQX1gf5ujhKeSiDPtaP4kPkbjsbFJPS5ff04Nqaep8=
Subject key identifier:   8E:06:FC:76:E9:E6:D5:3B:C7:E1:48:B0:85:1F:71:BB:48:ED:49:0E
Certificate issuer:       /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial:       010D0C9F4328584EAD1C4BAB7BAFAD27D8101A00
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     5650
IP address blocks:        72.18.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:4b:ab:7b:af:ad:27:d8:10:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=b084fdc0-afdf-4e64-84a2-3878042392aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:05:be:3e:11:ff:77:57:74:ab:f1:53:f0:
                    6c:74:8e:69:36:6d:e5:0e:c4:e6:55:0a:d8:67:bc:
                    a2:04:81:ef:45:0c:90:73:ea:26:9f:e7:33:a2:f0:
                    41:6b:67:58:e1:7b:90:8c:ed:33:3c:ce:d0:a6:42:
                    c2:77:91:39:41:40:2c:c3:35:5d:0b:63:09:6d:8f:
                    26:dd:4e:fe:d7:56:4e:b3:a4:fa:32:f6:68:b1:aa:
                    8b:7c:71:74:c3:3a:27:ab:76:d1:33:13:54:d0:92:
                    69:46:71:37:21:6f:40:d0:2b:3f:67:a4:1b:d1:1c:
                    a0:23:62:72:e9:42:83:02:04:77:52:a2:39:cd:80:
                    9d:c8:6a:02:3d:82:7a:c3:51:1f:eb:ac:0e:61:57:
                    7a:bf:0e:d5:d4:b5:10:f6:38:d4:83:9c:37:c1:16:
                    9f:61:6c:aa:31:29:0e:69:a5:e6:54:5b:d5:b9:4b:
                    37:fb:84:a2:0e:7e:e3:a7:53:c1:df:8c:58:41:8a:
                    8e:e4:9d:93:4e:54:53:75:9a:55:b6:a9:e9:11:43:
                    c8:95:68:89:85:86:9b:53:e1:2d:ef:f3:f8:08:2d:
                    e9:0e:75:4d:37:25:90:17:a1:5a:e7:05:d3:ba:02:
                    c8:45:f0:eb:78:38:72:a1:d7:e4:07:68:5c:b1:45:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:06:FC:76:E9:E6:D5:3B:C7:E1:48:B0:85:1F:71:BB:48:ED:49:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl

            X509v3 Authority Key Identifier:
                keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:3f:f2:5e:66:dc:d2:0c:2f:4d:0b:93:70:ea:6e:96:3b:
         e7:62:48:09:62:19:ab:a4:4b:e5:0d:ff:bb:9b:ad:73:9d:d5:
         2a:6c:de:45:fc:49:2f:2b:9b:0f:24:e4:2b:dd:de:45:ed:b7:
         cb:58:5e:78:ad:b6:b7:a6:fa:7c:9b:c9:eb:71:f6:dc:2a:a0:
         b1:25:52:6f:c0:b8:02:ef:0f:9e:04:df:40:c7:a1:f1:68:29:
         15:f9:dc:46:04:6e:fa:da:67:79:da:38:d1:c6:be:a9:7f:4d:
         2f:c4:8e:b7:b7:52:73:37:5a:a1:39:81:04:85:b6:e2:9e:9a:
         de:2e:65:f5:38:3b:73:32:cf:86:ec:1b:4b:21:88:3a:1e:e9:
         87:1b:c5:f1:3d:9f:dd:9e:65:f9:9c:24:df:38:2d:f5:0c:57:
         7d:5f:59:61:e8:e7:a6:e6:8f:42:7f:05:12:49:85:32:80:ea:
         c9:28:80:7f:4b:78:b7:ef:c5:26:15:13:a6:61:90:e6:ff:cd:
         ee:69:55:16:9d:c9:9e:13:e0:16:2f:0a:3c:a6:3b:c7:01:d2:
         3a:fa:71:56:a8:53:b6:3c:55:61:af:12:a0:69:b1:25:49:ab:
         53:63:5c:f7:0d:0c:16:93:be:f6:be:83:88:b8:e9:2a:34:a4:
         b9:20:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:35 2026 by rpki-client