Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa
File:                     c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa (raw, json)
Hash identifier:          RMuuBT3zA42SoxvERjiYXEM6ScnD8sETAdtjIUpylkY=
Subject key identifier:   73:8D:F2:56:CB:09:4D:35:CE:7C:E7:7B:AC:0C:D5:10:D0:CE:4F:F7
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA79C3F20417D56C372978A50
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11404
IP address blocks:        209.237.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:3f:20:41:7d:56:c3:72:97:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bc5ff56-c238-4f74-b021-ae63238838b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:10:8b:6c:bd:a5:00:90:11:d8:6f:82:0f:
                    ec:ee:57:ee:15:57:00:1c:95:c6:0e:9f:06:e0:70:
                    ea:93:bb:4b:64:51:14:76:16:58:06:73:37:3d:22:
                    8a:5b:bd:ed:15:dd:df:bd:6b:49:44:83:92:07:e9:
                    7c:16:42:99:60:31:c1:4f:e1:0f:7a:66:fb:dc:b1:
                    ab:b7:6f:22:59:c5:5d:ba:e8:c0:f0:7b:3e:b1:11:
                    3f:ec:f8:01:37:43:2a:90:26:74:99:10:a2:85:a8:
                    09:68:0b:76:73:64:9a:36:62:0e:9e:d2:13:2c:75:
                    3e:78:b9:27:4e:c4:f2:c2:11:f2:61:47:1a:d9:8d:
                    02:e4:d6:c3:26:ae:fe:64:65:bb:78:9e:0e:42:a3:
                    9d:9b:24:d7:08:c4:34:9c:e8:c6:f3:53:13:aa:46:
                    e2:8b:b4:95:bf:c1:c5:5a:b8:85:c0:b6:57:a5:a6:
                    2e:6b:8e:53:0a:5b:85:1c:4a:7c:5a:c5:5f:f6:10:
                    42:2e:9b:6a:bb:fc:38:0b:1a:15:c9:7c:12:2b:65:
                    a0:60:ae:e7:52:65:09:08:4d:f9:f8:b6:5a:78:a1:
                    8e:a0:f9:3f:f2:af:fb:55:3f:d4:9f:4a:9b:71:d1:
                    e5:ac:54:46:67:ea:d2:68:12:a7:e3:3b:96:1c:c6:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:F2:56:CB:09:4D:35:CE:7C:E7:7B:AC:0C:D5:10:D0:CE:4F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:09:5f:3a:f4:75:3e:2d:de:5a:37:51:fb:fd:44:a6:ec:d6:
         21:48:38:19:b3:d4:23:8f:10:aa:66:c2:38:1d:a7:f8:ce:20:
         3f:c1:be:08:91:34:65:ba:fc:db:3e:42:d7:8c:aa:0c:8e:67:
         73:d7:b9:46:4c:7f:d0:11:78:87:8d:3b:bc:9a:ab:30:68:c0:
         c1:5b:e2:78:4e:94:f4:81:c9:cd:a3:95:cf:fa:6a:c4:de:ad:
         ed:18:00:81:39:84:22:07:28:9f:e1:2f:b9:0d:8d:36:ea:e5:
         88:33:76:5d:e5:40:bf:63:78:95:64:6e:f1:ff:9f:17:4b:fb:
         08:ad:40:90:ce:f7:d7:28:28:7a:6c:ef:dd:5f:17:e7:c7:d4:
         ac:ea:91:00:8a:47:f6:59:f4:bc:37:db:2c:26:fd:05:b6:f7:
         0a:fd:62:5a:e2:ae:24:51:d7:b7:85:34:3f:d8:24:52:cc:08:
         47:e5:73:ff:32:f9:4e:be:be:79:17:1a:0b:aa:26:f9:91:5c:
         a2:61:b3:4d:68:b3:74:07:b4:ba:76:9a:e2:ed:fa:45:8d:55:
         7d:0f:ce:34:5d:73:aa:0f:07:a4:0a:af:3f:4b:46:11:fc:9a:
         4d:0c:d7:fd:74:24:b7:d1:4f:79:f2:ac:ec:02:df:29:ae:85:
         3a:fa:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:02 2026 by rpki-client