Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/cad01766-c1cc-3213-b485-ac795e97741d.roa
File:                     cad01766-c1cc-3213-b485-ac795e97741d.roa (raw, json)
Hash identifier:          3MilQaV2dBnJNsL2CUJLcRF88+v5nThBoUsPjjjElqA=
Subject key identifier:   19:D3:A8:0F:82:06:CC:34:97:5B:AF:6C:DC:5E:94:E2:44:8D:5F:A9
Certificate issuer:       /CN=c5aae53f-608a-4f49-919c-d5976c7324b1
Certificate serial:       010D0C9F4328584E2F045FFEF19D9AB901EE6E80
Authority key identifier: 19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/cad01766-c1cc-3213-b485-ac795e97741d.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     54201
IP address blocks:        199.47.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:5f:fe:f1:9d:9a:b9:01:ee:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5aae53f-608a-4f49-919c-d5976c7324b1
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=1130519d-6fbc-490f-867c-9c94d6831a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ac:01:3b:a4:da:b8:50:ce:fa:66:47:d9:00:
                    0e:0d:d6:f6:1f:1c:cc:1e:6a:eb:e6:0b:c9:3f:91:
                    2b:09:d7:1a:c6:e9:54:68:dd:83:82:92:20:19:65:
                    7d:67:72:7c:23:a4:f6:78:1d:6c:c8:e3:f4:4f:95:
                    e0:db:53:50:6c:38:7e:ca:d2:46:8c:ce:b6:f8:b1:
                    e6:6a:d5:79:22:3c:31:d0:ae:f3:eb:ba:64:b8:f7:
                    5d:ac:3a:28:a9:28:ba:eb:76:34:c3:23:de:36:72:
                    f1:60:45:c4:c9:ef:fc:69:d9:30:d8:5d:d1:af:6c:
                    72:56:3e:6a:a7:62:fe:bb:c7:00:49:82:44:6b:71:
                    fb:3d:a2:3a:30:96:a3:de:12:af:01:a6:e7:64:dc:
                    6a:48:d6:cd:f4:b6:70:e5:57:8a:23:e1:f7:fe:2c:
                    8d:07:9c:9a:44:00:62:85:f9:24:b8:29:51:02:95:
                    b4:8d:63:03:16:37:f8:6a:25:cf:95:34:3c:1b:96:
                    cf:2a:8f:60:4b:d4:bf:86:5e:95:3c:00:2e:bf:42:
                    c6:b1:33:4d:9d:b1:0f:d2:88:97:2a:ba:f4:46:8f:
                    9c:1a:09:14:5b:df:8e:cf:e7:73:52:f8:a3:e5:9f:
                    d2:f8:bb:83:71:c8:f5:4f:fa:33:b7:90:a5:82:9f:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:A8:0F:82:06:CC:34:97:5B:AF:6C:DC:5E:94:E2:44:8D:5F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/cad01766-c1cc-3213-b485-ac795e97741d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl

            X509v3 Authority Key Identifier:
                keyid:19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:67:dd:07:2f:52:c8:ef:dc:ab:b3:2d:56:10:41:4e:3a:
         a2:f7:42:1e:5f:de:c6:43:b7:6f:a2:23:23:2b:75:b5:2b:77:
         83:30:b9:d1:e1:d7:da:fd:68:39:77:3f:92:04:c5:48:b4:e9:
         1d:d2:2a:0f:4f:d1:a4:83:28:5c:3b:27:d1:f8:bf:88:4f:4d:
         96:90:c2:92:bb:ab:61:a1:c2:8f:dd:49:66:db:a1:f0:44:e9:
         d4:f7:1f:b8:14:99:71:c1:6f:24:c2:50:d1:2e:73:62:f5:db:
         50:2c:80:02:ba:a2:e5:33:9b:c7:53:4f:3e:6c:37:2a:2f:53:
         e0:21:14:89:66:54:52:90:f6:67:99:f9:fa:13:b7:70:20:1d:
         b9:07:02:df:f6:bb:d0:9a:c8:75:34:cd:33:f8:a2:3c:fe:91:
         6a:55:09:03:1a:14:ce:91:6f:9c:5e:ac:18:92:73:e2:f6:b4:
         f7:a6:26:ee:9e:94:da:d5:63:18:5e:ec:df:03:84:96:9a:4a:
         14:ee:02:74:26:8d:e0:c4:a5:e9:a0:05:c6:30:a2:81:40:62:
         5b:f0:41:f4:84:fb:a5:68:c6:53:c6:b4:01:e5:a5:9b:55:84:
         78:49:34:3f:6b:67:b3:f2:33:4a:7f:af:67:c6:0e:2f:4a:bd:
         2c:5d:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:17 2026 by rpki-client