Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
File:                     59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (raw, json)
Hash identifier:          G0u6/st6SCoV/xRGJfXXMVPpBJfUue8IH6hufRx4Iyg=
Subject key identifier:   AD:3B:32:6B:81:4E:B3:B2:09:94:DD:21:81:61:D6:6C:9A:DD:9A:A4
Certificate issuer:       /CN=223a4b84-939d-437b-85a8-9ff465d0541e
Certificate serial:       010D0C9F4328584F07D779C68570801CF87F1B80
Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     8075
IP address blocks:        69.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:79:c6:85:70:80:1c:f8:7f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=6efe38fd-82ba-44db-91a7-6985a645bf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:79:98:7f:4d:ba:9c:16:51:c5:cb:25:78:
                    60:49:91:d3:1e:85:c9:0f:dc:ef:14:a8:94:0d:57:
                    07:09:3c:a6:b5:14:95:7b:31:0d:1d:fe:7a:e6:17:
                    c4:39:21:65:b5:83:03:00:1e:fd:8a:17:56:72:51:
                    36:92:46:06:c7:25:f5:3d:8b:ac:43:b6:24:d1:67:
                    3f:bf:24:f8:6e:8e:66:28:6e:89:6d:40:e3:d9:2a:
                    eb:35:a0:e2:72:36:0d:96:ca:11:52:2e:c8:e8:fb:
                    18:96:58:71:f3:dd:0e:b1:73:26:5e:82:a9:62:17:
                    ec:aa:e7:16:ad:ee:c7:dd:b8:31:37:b7:99:fd:e0:
                    16:95:47:f8:64:4c:70:be:7f:13:86:05:66:48:da:
                    91:b2:8a:fa:da:c3:fb:48:ac:45:d5:de:f1:61:22:
                    35:37:c7:99:1c:4c:87:05:86:3d:15:f8:7e:57:86:
                    a4:fa:e1:ad:4c:74:9b:7c:29:eb:06:45:81:43:e8:
                    98:38:18:78:3d:31:b9:a4:fa:37:17:40:bd:47:93:
                    bb:16:b2:10:07:5f:79:3b:2b:e2:63:a3:b9:40:9c:
                    17:46:d1:e4:98:ba:2f:7b:9d:c9:6e:a9:23:b1:ac:
                    b4:56:8a:27:d8:bf:5c:47:c8:66:ae:a8:fa:8f:aa:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:32:6B:81:4E:B3:B2:09:94:DD:21:81:61:D6:6C:9A:DD:9A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl

            X509v3 Authority Key Identifier:
                keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:dd:7b:4f:7a:23:45:af:e2:2a:0a:2b:7b:47:da:59:8e:
         23:65:25:89:c1:f1:80:bc:8e:8e:b1:40:0b:79:66:c0:bd:a0:
         08:1e:39:87:72:14:cb:b1:2b:74:e7:f0:01:2e:a7:c4:bb:ba:
         23:da:27:69:8c:0c:7b:b5:b1:8f:53:a8:22:d6:da:d3:a3:ad:
         8c:bf:d7:7e:0f:67:a4:36:30:10:26:3e:99:8e:92:5c:f0:33:
         9a:bc:05:55:03:ed:44:6d:d2:cf:d4:0b:2a:d7:5a:4d:c3:5f:
         25:72:27:c4:6d:ef:f2:31:7b:67:43:da:84:61:c5:84:fa:81:
         77:40:b9:4c:89:c6:8e:d6:3c:d9:da:c5:b0:4a:69:92:d9:0a:
         8e:e4:96:7f:a3:38:f4:ab:48:32:48:02:fb:5d:bb:09:ec:0a:
         c6:a1:11:02:97:c6:b6:ed:c3:9c:5e:18:62:9b:97:9a:1a:a7:
         55:ae:f6:ca:32:0c:32:e1:d0:4e:ac:7f:d9:11:64:e4:b3:08:
         15:96:d5:55:e6:e9:35:05:aa:15:3a:6c:1e:1b:28:c4:e6:af:
         74:74:d4:cb:1f:bb:f2:a6:ee:0f:88:6c:2c:8d:ba:65:c5:6c:
         b0:f3:5f:4f:e0:c4:f6:35:47:1b:3c:23:9b:6e:2e:dc:6c:ed:
         c7:92:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:22:45 2026 by rpki-client