Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d4e2e57c-9fc8-30ce-a0ae-c9c719ee727e.roa
File:                     d4e2e57c-9fc8-30ce-a0ae-c9c719ee727e.roa (raw, json)
Hash identifier:          91uywwPnfxAtf70EP5hiN1bWH5o7CA/WDz+KVu4AOFc=
Subject key identifier:   98:2E:95:74:56:95:5E:AB:BB:B2:86:8A:09:A3:ED:98:52:75:62:2E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E48249413CFE200362B7C5580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d4e2e57c-9fc8-30ce-a0ae-c9c719ee727e.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     19955
IP address blocks:        72.10.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:94:13:cf:e2:00:36:2b:7c:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=346c77b5-407e-46d0-ae76-fdfb90d853a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:ae:fb:be:66:36:2c:69:74:7d:62:b0:a9:
                    0d:07:4f:52:ac:5b:51:ba:b6:45:e8:f4:b8:c3:e4:
                    a6:42:ae:e8:2e:5f:77:e4:8f:ad:cd:dc:ee:15:a6:
                    1a:04:7e:5a:26:33:8a:4f:44:5a:05:10:6b:1c:fb:
                    ca:e0:20:01:b8:8c:01:a8:cd:e4:62:3c:5c:42:3d:
                    eb:75:db:31:52:6d:56:46:22:c2:3e:ea:fa:80:83:
                    a1:f6:61:b4:c1:37:63:35:00:44:88:a4:5d:a8:87:
                    0a:f5:32:b1:95:97:a6:a0:64:07:30:ab:eb:fa:5e:
                    7c:b3:32:4e:c9:bb:57:df:bf:50:b3:47:c1:c1:7c:
                    4b:04:d0:27:88:f7:75:5e:49:49:1c:b2:81:c2:17:
                    6e:1a:04:94:88:6c:23:d4:13:d3:e7:08:72:9d:c2:
                    89:c6:e8:3c:bd:9c:5f:35:3c:56:f8:8a:54:73:97:
                    fd:94:80:24:6b:48:84:50:a9:58:20:10:b5:49:02:
                    b0:74:1b:e9:4f:07:2d:38:7c:8f:5a:88:d1:a4:65:
                    13:75:02:ec:0b:c4:57:6c:96:37:76:05:45:68:47:
                    5e:65:6e:b6:d9:0c:b8:34:e0:c7:93:87:c3:f4:62:
                    ee:1f:74:57:f0:dd:a4:32:a1:92:10:2f:2e:a2:7d:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2E:95:74:56:95:5E:AB:BB:B2:86:8A:09:A3:ED:98:52:75:62:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d4e2e57c-9fc8-30ce-a0ae-c9c719ee727e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:fc:fc:8b:a3:92:21:c6:bb:38:07:8a:3b:f5:0d:92:62:
         40:b8:9d:fd:46:a6:4a:db:41:30:ce:49:33:2c:e6:a0:aa:83:
         d9:d2:52:67:ef:69:cf:7b:7f:77:8e:1e:d2:b0:59:23:76:52:
         52:64:51:ab:16:51:f5:0e:98:31:9f:80:f7:c3:13:d4:fe:a4:
         3f:57:1c:00:e1:9a:a2:68:a3:30:34:93:00:08:d8:e1:a3:ea:
         b4:2f:94:1d:06:9a:bb:fc:39:fb:71:c1:00:b3:28:6c:35:fd:
         1a:5e:42:4a:05:7b:56:96:fa:d8:6a:5e:37:99:27:87:f3:62:
         9c:d4:72:f0:60:f5:33:3a:44:af:68:41:01:73:2f:d4:75:b3:
         a9:b3:b1:b4:d8:71:a6:9a:ee:ba:43:9b:7a:08:b5:cf:c5:cb:
         c5:fe:89:8c:f8:56:15:1d:a7:e3:ed:5e:78:d4:48:17:04:68:
         ac:fb:41:db:81:35:dd:92:63:84:12:f6:34:9a:62:00:11:c7:
         1e:ab:d2:2d:06:87:d0:ce:f4:c0:8b:d3:e5:13:a1:8d:25:2d:
         66:4d:dc:e0:19:c5:f3:66:a5:a5:93:c1:5a:ae:03:d3:2c:cb:
         ec:52:79:fe:78:05:87:89:fd:78:52:70:5f:a1:09:90:36:ea:
         6b:2e:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:45 2026 by rpki-client