Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
File:                     7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa (raw, json)
Hash identifier:          8N4OdYMWL9xfoAUpQwPBKy0qKJK9CoS8Ozo14rS21TM=
Subject key identifier:   16:F5:04:18:9C:21:D9:B5:D4:85:4E:CB:E4:A9:79:C8:CA:03:D6:89
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F4328584E5FDF561ECE14DF77D4F6F000
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     8987
IP address blocks:        72.18.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:56:1e:ce:14:df:77:d4:f6:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=5a5f8cbf-5d3d-4a01-87ef-058308b17595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8c:7b:9b:70:f3:9f:ae:02:76:5c:21:14:c9:
                    b5:71:31:9c:e6:58:a9:80:47:30:9d:a9:b9:cf:a2:
                    4b:fe:72:29:fb:7d:3e:ac:7d:d5:cd:17:2c:d3:cd:
                    3b:89:24:ca:6f:7e:e2:5a:17:14:e3:8b:d8:9d:07:
                    f7:56:5e:b6:77:65:37:c2:89:de:28:3f:0a:b6:05:
                    55:9c:35:ca:ca:9d:bd:ed:aa:86:80:76:39:41:40:
                    bc:c9:30:2a:53:dd:c6:5f:8d:ea:f7:1e:88:1b:86:
                    44:89:4b:11:d6:5c:0c:91:8f:e2:93:37:8c:29:b1:
                    46:d8:30:60:6d:2b:64:de:eb:3c:12:5e:59:c2:b0:
                    15:f4:3d:e8:c7:22:0a:df:03:c4:19:25:76:32:51:
                    b2:6a:1c:13:ca:33:83:94:f5:b2:28:fb:2b:8d:19:
                    bc:80:28:10:a5:ba:4a:47:05:0c:a3:ba:ca:07:5c:
                    d1:bc:58:3c:6f:b5:7e:18:56:82:54:fe:97:ba:36:
                    ab:7f:e9:fc:1c:3c:8b:43:d3:59:fe:c5:7b:87:46:
                    33:89:05:97:08:ec:91:7b:c0:1d:30:67:de:3d:c3:
                    0d:97:be:99:23:0e:03:ea:89:0c:56:a8:7b:0a:70:
                    61:4e:4f:07:1b:03:e0:fa:38:c8:5d:35:14:60:c4:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:04:18:9C:21:D9:B5:D4:85:4E:CB:E4:A9:79:C8:CA:03:D6:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:5c:57:8c:5d:d4:26:e1:8c:ef:42:b7:7d:28:ee:28:39:
         42:2a:89:5f:9d:32:f9:fd:0a:06:f1:95:0f:1b:52:6e:66:56:
         13:25:cb:99:8f:d6:74:c0:7e:84:fa:95:23:25:54:e6:2b:7e:
         39:68:30:29:9f:df:09:c9:72:5c:29:06:ce:a6:79:01:b2:19:
         41:6a:d4:fb:d3:da:66:27:c6:7b:3f:b6:0e:c3:55:4c:50:86:
         22:87:b7:2c:a2:a3:99:d4:c5:70:24:77:1a:5c:d7:5e:e2:5e:
         4e:35:8d:2a:0e:22:b1:0a:13:9c:00:98:f8:2d:35:3f:44:f0:
         56:6c:c8:cc:86:5e:04:34:49:0b:e4:32:ea:d4:a4:93:49:26:
         ce:88:41:65:3b:62:d9:99:c0:26:4a:b6:00:39:30:da:a3:67:
         0e:ae:a1:6b:77:71:18:8f:fd:ad:e1:47:15:05:24:16:f9:5e:
         3a:45:d0:3e:df:76:e1:70:30:a3:1a:28:ab:95:20:bf:4e:fd:
         7c:8e:4e:8b:03:2e:d1:d8:6a:dc:85:46:d9:12:c4:40:a9:c8:
         77:de:71:04:cd:b6:a0:c5:7b:88:03:a5:2c:ec:70:ab:f2:d6:
         cd:69:84:43:a9:44:2b:56:07:af:95:69:3f:92:0f:55:60:3e:
         e7:52:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:27:16 2026 by rpki-client