Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
File:                     c571a411-c09a-39a2-bbcf-c326d00332b2.roa (raw, json)
Hash identifier:          Z9VWrIR2I+ur5EQoiliT6cWa19ZdyQ26vt+XQtuioLc=
Subject key identifier:   51:06:3C:6E:E1:7E:20:E3:78:2D:7D:93:BC:B0:E2:CE:EA:76:70:26
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584E6574AF17EE70DB1C086D2280
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     16532
IP address blocks:        72.10.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:af:17:ee:70:db:1c:08:6d:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=c227096b-5ecb-4db0-b597-ab337d77fb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:86:20:20:0c:3c:2e:50:db:9d:9e:e3:2f:c3:
                    e0:9e:1d:30:ef:d6:ca:f6:da:a0:ec:bc:f0:3c:ac:
                    49:7f:06:f2:e0:b4:28:3e:b2:52:07:44:d8:78:b4:
                    c8:01:27:cc:c4:0b:aa:92:35:3d:c4:e3:ee:22:4e:
                    1a:71:eb:2a:7d:6d:e1:ee:6c:7d:a1:5c:da:39:c4:
                    57:fd:22:50:17:fe:57:dd:05:15:c5:0f:a3:80:77:
                    d4:a5:67:44:00:df:ac:95:d4:43:f4:cd:a7:de:1f:
                    49:9f:11:16:92:77:0b:c9:f0:9d:b9:79:32:68:88:
                    8c:ee:71:45:a6:2d:7f:ba:3a:76:aa:bc:c9:41:09:
                    6e:4f:17:aa:96:75:6a:ed:27:0f:cf:af:01:26:1f:
                    e1:ab:c7:09:98:95:45:ab:1e:29:19:27:90:be:06:
                    c6:05:7d:8e:94:f6:67:50:22:eb:49:b7:b3:4c:8b:
                    90:cb:6a:da:78:39:d3:e0:70:cf:7c:9a:83:9c:e7:
                    12:10:df:7c:80:59:78:e7:a3:9e:d3:21:5f:35:ae:
                    12:68:08:a2:4e:48:a1:51:ed:a1:e8:71:a9:38:2c:
                    00:a2:ab:32:a5:5c:ee:ba:f1:f4:eb:8e:6b:f7:f6:
                    0a:4c:fd:36:9a:04:41:07:ca:87:68:41:2e:4f:cc:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:3C:6E:E1:7E:20:E3:78:2D:7D:93:BC:B0:E2:CE:EA:76:70:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:7c:77:e3:2b:f8:fb:c9:5c:9c:d3:8b:f3:7c:b6:79:c4:
         22:43:c7:95:94:3c:1b:dc:53:ce:d0:ea:82:2f:5c:91:93:e5:
         e6:c7:f4:e4:d6:65:03:61:c8:1f:b1:3d:a4:51:f5:de:c6:bc:
         26:ef:99:08:77:ab:8f:f1:dc:ac:d5:e6:3c:c6:2a:23:51:71:
         e6:46:0d:5c:6c:8a:4d:e2:db:dd:e3:58:4b:1a:e2:ed:27:db:
         b5:cc:fa:da:83:a4:99:52:fa:4f:7c:06:56:4c:a2:ac:1c:ff:
         c1:95:27:1d:cf:1b:ff:23:60:17:f2:58:7d:4a:4d:0b:15:69:
         98:7f:90:83:c9:ea:b5:96:b7:d0:b9:e4:ce:df:ef:de:e9:d1:
         0d:80:f9:86:f3:b4:b5:ed:56:e1:55:b7:25:4c:ed:59:50:5b:
         3e:2f:3b:68:35:0d:ba:79:89:6c:08:7a:e9:90:a0:90:74:3f:
         fa:7a:70:a4:db:2e:d5:fc:e3:06:85:05:ad:d4:e8:94:0d:e2:
         36:89:a1:6d:ee:9c:32:c0:86:25:40:2c:3f:43:fc:63:7d:10:
         55:d5:e6:99:e7:98:ba:51:88:15:a7:18:c2:10:e3:e1:e3:23:
         c0:de:ea:af:95:0a:9e:2e:6a:66:05:bb:44:1b:ed:27:dd:1b:
         3c:34:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:57:50 2026 by rpki-client