Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa
File:                     a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa (raw, json)
Hash identifier:          fndZuGGXr97ke2LS+FCN/z/VQXDgRJ0U9rgYLvDRdqs=
Subject key identifier:   D6:C8:41:66:1A:75:23:72:67:21:C1:EC:2D:1C:3C:BD:9F:46:52:1E
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584EA8A832F2AE898F9FAABA6C00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa
Signing time:             Wed 29 Jul 2026 10:43:13 +0000
ROA not before:           Wed 29 Jul 2026 10:43:13 +0000
ROA not after:            Tue 27 Oct 2026 10:43:13 +0000
asID:                     174
IP address blocks:        172.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:a8:32:f2:ae:89:8f:9f:aa:ba:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul 29 10:43:13 2026 GMT
            Not After : Oct 27 10:43:13 2026 GMT
        Subject: CN=58a6748f-4cf7-497e-b17d-acde65ddd4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:37:0c:4c:bf:0f:f2:37:68:8c:e4:45:dc:
                    45:90:ec:7c:26:d6:c7:ca:68:3d:f6:87:22:b5:81:
                    42:88:18:f9:a7:c8:30:48:bb:50:5d:86:a0:df:9c:
                    d7:fa:43:d6:3c:6c:34:e2:37:d6:cc:22:13:12:b0:
                    a4:32:99:0d:c0:ec:f4:9b:3a:63:48:41:10:63:29:
                    1a:0e:3a:fd:c4:1e:7a:24:1d:08:57:b9:c4:77:63:
                    b3:5b:92:0d:4f:98:2f:16:bd:59:bb:b6:eb:88:9b:
                    ed:c7:98:2a:95:c3:78:40:32:57:82:30:80:3f:6a:
                    19:1f:86:33:0f:7c:ad:cd:e0:ea:5b:7f:6c:fc:b9:
                    60:e8:8b:83:a4:25:8c:ce:dc:98:79:0b:cc:24:6e:
                    f4:ad:39:2c:06:de:e9:ff:37:42:77:33:47:ec:d0:
                    52:cb:0d:c4:15:38:bc:f5:b0:25:ea:7c:1c:71:63:
                    de:b0:9c:1e:c8:e5:eb:8d:01:a4:9c:09:49:86:1b:
                    27:f3:3d:7b:1b:c5:2e:0d:87:e4:c2:d7:cd:a1:85:
                    45:bf:a1:b7:57:54:ff:9f:64:ef:ba:bf:4f:7f:c1:
                    f5:6f:0c:b3:f9:ae:c9:51:15:3d:cd:5d:c9:e0:30:
                    62:b4:62:6a:e2:a6:a0:93:7f:ab:4d:c9:08:25:67:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:41:66:1A:75:23:72:67:21:C1:EC:2D:1C:3C:BD:9F:46:52:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:08:62:3b:16:a1:99:7c:0b:02:a4:26:dc:d1:40:be:03:
         53:90:36:8f:45:69:0c:63:de:3d:6a:65:60:7a:f6:35:36:91:
         bb:98:c4:d2:ee:f7:31:7f:45:d6:6f:8f:08:37:6a:ac:3d:52:
         d5:c9:13:ea:a8:29:8b:38:d5:12:53:be:fd:74:38:8d:27:60:
         af:bb:16:90:9f:26:0e:8d:11:90:a7:1b:9e:ce:b4:33:3d:a2:
         43:81:15:c8:b3:19:3b:8c:c1:a4:d0:43:4d:76:58:18:11:3c:
         2d:39:36:e8:25:da:c7:93:03:c8:b5:72:2c:16:d3:67:da:67:
         a4:3c:05:94:97:2c:51:b8:95:87:95:f1:07:89:66:8f:17:dd:
         e8:d6:e2:14:cc:cc:91:db:a4:e7:12:23:2c:35:91:cf:aa:18:
         ce:8f:b1:54:df:22:e8:6b:df:8f:30:7b:97:b0:6b:e6:3e:80:
         00:92:92:6d:0f:26:77:37:21:40:fb:41:14:a0:8b:d2:66:64:
         1c:4d:d4:37:2a:c7:75:55:b7:bf:16:26:3e:98:a4:c3:62:ad:
         22:66:ae:c2:27:c8:cb:e9:33:8b:4c:2f:7f:55:4c:65:62:57:
         6f:c7:37:2d:e0:2c:af:5a:16:bc:34:e7:f9:cc:18:bb:ab:ac:
         6a:83:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:56:12 2026 by rpki-client