Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
File:                     93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json)
Hash identifier:          0i7Tzoba/JPMn1TahfY1U4oDtvbn8Zft+PcdDl/VOkg=
Subject key identifier:   50:DC:01:56:E8:57:F5:DD:95:C1:06:2E:E9:C3:C3:A7:86:D2:3E:DC
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584EAD1C493DB15763CA9FCEC980
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     16433
IP address blocks:        72.22.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:49:3d:b1:57:63:ca:9f:ce:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=1fd1ea74-0d90-4ab4-93ae-57487779c742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:9c:89:ff:95:9a:3b:e9:66:c0:96:09:66:
                    5a:3b:f2:c2:07:64:17:f6:4b:7d:94:91:d9:d9:1f:
                    f5:92:88:4c:53:db:7d:e6:d1:10:83:86:31:85:9b:
                    ff:7f:88:29:f2:8f:81:cc:9e:de:a3:95:f7:9f:36:
                    8a:77:df:d2:2b:da:51:0d:5b:09:95:6c:3c:b1:c5:
                    2e:36:e6:4a:28:43:75:a2:10:d7:76:d2:62:07:ed:
                    58:ba:41:b3:85:f6:23:e7:a3:4c:89:21:66:7d:d5:
                    28:a2:72:dc:48:58:56:8a:a3:f3:a0:e7:a5:ca:fb:
                    97:92:ff:96:19:29:f6:10:18:9e:c5:73:d5:59:aa:
                    d7:c9:7b:8b:5a:59:40:27:ab:5e:39:2d:a9:4a:f1:
                    da:48:f8:a6:f9:f8:7c:7f:ae:19:23:5d:2b:7c:3d:
                    94:a0:e0:41:dd:dd:53:97:e0:90:ba:d9:2a:c5:c3:
                    33:e5:6e:4e:21:dc:76:48:5f:71:8f:24:f3:94:d5:
                    4f:d9:78:c7:d8:3e:02:c1:53:e2:ec:59:d3:8f:15:
                    1c:b7:ab:b6:2d:cf:77:89:d3:da:fc:9e:b6:2a:b4:
                    1a:d5:64:eb:45:cb:5c:ef:22:f6:e7:5d:3c:27:3c:
                    f5:d6:c7:e9:0d:1b:a3:0c:be:f9:50:c5:17:7f:5f:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:01:56:E8:57:F5:DD:95:C1:06:2E:E9:C3:C3:A7:86:D2:3E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:21:53:e9:aa:8d:3b:bd:7e:b5:51:13:6c:7e:72:be:a5:
         69:e0:46:0f:ba:8f:2b:3b:13:3b:fe:0f:c0:53:4e:9e:1d:43:
         8b:9a:36:06:aa:cf:2c:f4:7f:67:9c:cb:1c:01:7e:4f:3a:e3:
         2f:cc:cc:05:70:38:7e:b0:5a:88:6e:fc:60:d8:32:3a:46:e0:
         e9:3f:1b:83:8c:26:97:7a:2d:76:c0:84:13:ba:3d:0b:2d:4a:
         55:a0:91:cf:a1:6d:b2:bf:90:e5:3b:c3:c4:d9:bb:72:b5:ec:
         f2:d0:ca:9d:83:93:2a:64:8c:b8:2c:e6:d1:b6:5e:41:29:20:
         78:d5:4f:35:be:54:e3:dc:3c:1d:44:5b:78:a1:0f:3d:42:60:
         9d:79:a7:62:9f:03:bd:c9:1c:ec:a3:e3:57:9f:4c:90:f5:69:
         e4:47:ea:cf:95:45:9a:62:8f:3f:b6:e2:bd:4d:2c:41:f5:81:
         9d:5d:b4:df:61:e4:61:cc:68:ad:99:dd:32:98:68:c0:0a:ef:
         4d:af:a2:ed:ae:c9:43:2a:23:40:77:36:80:73:c2:1c:f0:32:
         36:00:7f:c1:2c:e4:c1:72:69:55:d8:1e:f2:e5:a4:c4:aa:9b:
         53:a5:de:a1:8c:40:a4:f0:d6:ca:c7:5b:31:89:13:ed:b9:14:
         5e:71:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:30 2026 by rpki-client