Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
File:                     c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json)
Hash identifier:          MWnl9qSV+J4I0fxzU+NzDbFr2BJsN2D5m4Ls9SWtMv0=
Subject key identifier:   26:B6:FE:DB:59:82:33:44:3E:5E:46:62:DA:18:7B:33:E3:59:E8:E3
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F4328584E2AD45B54132809CD10D19F00
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5b:54:13:28:09:cd:10:d1:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=97afd848-6fd8-4bdc-af8b-49ea7b4d826f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:05:ea:6f:b1:d9:10:b7:18:33:7c:09:a7:
                    73:e1:27:ef:e3:bc:0a:0c:22:fc:63:b5:86:2e:e9:
                    27:29:3f:a7:db:58:64:e3:21:98:18:af:34:af:1d:
                    dc:88:1f:29:a5:98:8c:a3:1f:75:63:df:6d:54:e5:
                    8b:68:f2:fb:5b:73:aa:57:16:a9:46:ff:ba:06:7a:
                    06:df:7b:f6:fe:f0:76:12:09:20:0b:8e:4d:8b:ad:
                    fc:60:d1:33:a2:6c:2e:7d:59:76:19:23:0d:a5:b9:
                    5c:6e:15:d0:19:9b:61:1c:84:bc:00:63:aa:22:16:
                    67:20:c1:bf:6e:0f:c3:74:78:4a:66:79:c1:40:3d:
                    f7:86:1a:93:30:79:32:50:db:70:a7:4c:08:eb:15:
                    50:6d:d8:13:4b:a5:66:ec:99:87:32:a8:8d:68:2b:
                    f3:6a:15:41:d2:61:7f:55:af:fa:dc:5f:41:f9:66:
                    b0:61:e2:aa:76:d9:2f:bf:11:b3:88:96:e9:e5:40:
                    2e:24:82:64:fc:ff:b7:f3:18:81:a1:e0:22:ff:ab:
                    40:2b:87:1c:d5:b7:37:35:62:68:ce:b4:b9:27:c0:
                    8c:ee:9e:f6:f7:c7:4a:69:dd:5a:a5:ca:fc:9c:35:
                    bb:40:15:88:3d:bb:bc:4b:1e:48:f8:a2:75:8f:85:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:FE:DB:59:82:33:44:3E:5E:46:62:DA:18:7B:33:E3:59:E8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:1a:cd:63:1d:92:fc:e3:dd:18:a7:86:df:64:cb:9a:32:
         42:3f:1f:1f:7a:64:bf:b9:08:15:e2:2f:7a:d5:54:25:10:7e:
         4d:d1:90:e8:2b:78:ce:02:85:6e:8f:ba:26:65:0d:29:a5:84:
         d7:fa:5a:16:bc:d2:ab:6c:ee:66:2b:bb:3f:3b:ae:25:df:81:
         7c:96:5a:e7:ca:75:7b:e5:ab:66:73:57:66:a4:e7:4a:d7:49:
         4e:67:bc:df:8f:95:79:e1:cc:10:89:ae:0b:18:66:0f:23:43:
         42:d1:46:fd:b8:e5:ce:73:f2:50:f7:44:1b:6d:e2:ac:47:2f:
         d3:35:a4:76:b0:9a:4a:70:2e:4a:ad:bc:ed:64:80:de:c2:0c:
         01:e3:60:8d:c8:42:c6:60:d2:f2:fb:bf:cf:8b:5a:29:a7:75:
         2c:8f:91:94:93:03:70:6a:18:19:e6:56:da:45:dc:c4:be:19:
         f2:64:07:01:53:70:2d:cf:93:3d:e1:9d:ac:d1:c0:15:c7:38:
         60:85:cc:1e:d3:14:a1:a6:ad:5c:e6:64:db:ea:0d:99:ca:79:
         75:16:75:fe:69:6b:b2:f4:fd:15:51:a5:a0:77:90:e3:b2:20:
         ed:84:02:e4:16:9f:9c:70:d9:ea:20:d8:cd:ae:33:91:f9:2f:
         18:4f:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:21:36 2026 by rpki-client