Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/22b8b8b1-7149-3537-8527-77dd943cd7e4.roa
File:                     22b8b8b1-7149-3537-8527-77dd943cd7e4.roa (raw, json)
Hash identifier:          iBLROI9nYFruxjJgoIM2Ij712Vu+sF6kYFUP74v69Kw=
Subject key identifier:   BA:5D:6B:0B:98:C0:01:11:D1:67:D9:0A:76:E4:9A:5C:34:5D:35:C1
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584D75F7BB476E248568FB1D9940
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/22b8b8b1-7149-3537-8527-77dd943cd7e4.roa
Signing time:             Fri 10 Apr 2026 14:10:18 +0000
ROA not before:           Fri 10 Apr 2026 14:10:18 +0000
ROA not after:            Thu 09 Jul 2026 14:10:18 +0000
asID:                     1403
IP address blocks:        72.10.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:f7:bb:47:6e:24:85:68:fb:1d:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Apr 10 14:10:18 2026 GMT
            Not After : Jul  9 14:10:18 2026 GMT
        Subject: CN=6a1b0aed-9ff9-4744-b988-a2228aa58fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:96:e4:28:ce:2f:03:91:2f:b7:a1:78:b1:
                    0e:4d:a7:14:1b:54:ba:ee:ed:4f:3e:9f:13:73:0a:
                    88:4f:9d:68:d2:65:a3:e1:8b:43:4c:59:0f:7e:0f:
                    0d:9f:e7:f1:74:c4:5f:e1:62:e7:82:0e:d0:ed:84:
                    6d:f7:71:a3:87:ce:4e:34:d8:a7:df:f0:cb:4e:59:
                    f7:a2:76:90:a6:31:bb:5a:a8:26:af:b3:e7:e8:fe:
                    54:20:56:6b:15:78:eb:e8:1d:82:5f:f1:be:71:77:
                    57:99:39:e7:75:5a:f9:66:94:67:4e:70:d3:e9:b2:
                    d3:e7:b9:6e:de:30:71:60:a8:7a:19:e9:2d:ac:d8:
                    b1:25:e9:c4:31:8e:9d:64:c3:6e:67:d5:31:68:87:
                    a6:0b:7c:06:56:a7:e5:ba:ea:80:bb:61:e3:f7:ac:
                    c1:99:aa:ee:71:ae:58:ee:44:ec:ef:21:99:d9:94:
                    25:39:22:64:b4:4b:45:6e:7b:83:c3:37:78:cb:0e:
                    c0:ac:37:43:22:44:08:7b:9e:56:89:40:2f:c4:47:
                    19:0f:d5:21:21:73:dd:37:40:9a:f6:46:ac:d0:7c:
                    ed:f0:a2:ab:ca:8d:0b:3b:29:36:31:c4:4c:00:51:
                    ab:87:60:5f:3d:b3:02:f7:8d:37:95:82:8a:d6:6b:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:6B:0B:98:C0:01:11:D1:67:D9:0A:76:E4:9A:5C:34:5D:35:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/22b8b8b1-7149-3537-8527-77dd943cd7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:06:0a:b8:66:2b:d9:63:21:42:bb:9b:3c:3d:a8:27:96:c5:
         a4:51:d1:a5:a3:db:05:ff:d2:f5:fa:98:80:5b:7f:54:2f:c9:
         05:b3:97:53:84:fa:bb:56:51:a3:af:88:b4:92:41:ce:d0:e6:
         7d:21:2a:31:55:3e:59:00:8f:c7:94:ee:09:81:88:32:90:6a:
         17:fa:3e:69:64:8f:d3:55:53:7d:f1:39:1e:bf:41:aa:3b:91:
         7b:6a:6c:7b:df:e6:41:b6:18:b6:df:8d:3d:c1:a1:98:f4:83:
         65:90:d3:6a:3d:76:16:b1:c4:88:9a:3c:03:d4:46:67:e7:49:
         6b:47:f2:05:9a:10:49:e9:d7:54:31:7f:60:e6:c4:28:80:92:
         a8:7d:35:ad:4b:a9:a4:42:40:a2:3f:43:01:1c:31:07:c2:69:
         b8:c7:ca:6f:2e:a0:e2:ae:89:55:ab:11:72:a1:7c:78:38:0e:
         a9:8c:fa:28:28:22:fc:4b:0c:b2:33:22:d5:ba:8c:c7:81:dc:
         ff:8a:4f:c9:17:eb:77:ec:61:22:75:d8:d3:01:2b:4b:05:63:
         21:3b:76:e8:6d:51:0b:ec:fa:62:fc:09:72:0a:5a:f0:55:57:
         ce:2c:6a:34:eb:ed:2c:d3:c1:87:1e:84:6a:20:40:36:31:00:
         40:a5:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 10:22:43 2026 by rpki-client