Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
File:                     041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa (raw, json)
Hash identifier:          m2L25vfMU0HNyVkceMBqPSa7zEVwZrLfRKFzlZ8VNa0=
Subject key identifier:   AD:6A:04:BD:DF:75:50:36:5F:79:14:55:1C:B0:6C:56:D4:FA:A6:BF
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584E2D9F1704630A7DBCDED78800
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        192.184.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:17:04:63:0a:7d:bc:de:d7:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=c1782eae-b7b1-4525-88ea-6b54eb460ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:55:9c:9b:e1:f3:a6:8e:ed:7a:37:37:10:
                    01:6a:91:49:a4:d2:68:91:33:64:c5:e6:c4:62:4c:
                    5c:9b:be:5c:e5:01:b3:16:95:8b:99:de:4f:46:3f:
                    4c:7f:54:99:79:2d:a9:dc:25:d4:4c:e6:be:d1:61:
                    e9:fc:05:5f:bf:7b:9b:04:ad:98:63:be:90:12:30:
                    8e:87:00:87:86:83:b1:82:b6:c2:4a:f4:95:0b:d5:
                    15:13:42:4c:34:38:7b:65:30:dc:d1:bd:30:c2:69:
                    df:72:71:59:53:3e:b7:e5:42:6e:5f:64:88:c1:64:
                    9f:09:41:1e:56:b9:30:54:02:47:ee:b8:11:aa:1e:
                    fd:f5:c4:43:01:9e:ed:05:61:1d:06:0e:a1:a5:a9:
                    7d:8c:f6:2a:f8:00:90:27:6e:dd:fe:40:9b:37:97:
                    80:ba:e4:ae:51:01:6e:dc:53:70:6f:4e:d5:7b:7d:
                    1d:80:75:f6:bb:15:61:19:fc:5b:7e:5f:f9:52:ae:
                    fe:6c:5d:b8:34:0d:94:d1:cd:f3:81:a1:54:2b:88:
                    d4:2a:96:92:85:92:cf:16:1a:fc:0e:fd:82:66:27:
                    93:3e:c8:aa:36:cf:0e:2d:2e:00:ea:6e:e7:98:6a:
                    a2:70:bf:6b:8d:ec:f7:b3:16:69:2f:8d:68:7b:41:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:04:BD:DF:75:50:36:5F:79:14:55:1C:B0:6C:56:D4:FA:A6:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:90:86:91:ee:5c:15:10:ee:99:24:9e:fc:5f:0b:29:f3:82:
         a0:b6:0b:6e:28:12:c6:28:68:fe:7b:5e:00:53:b2:07:07:20:
         98:0f:60:60:19:33:7d:55:bd:2b:ac:34:e7:74:b0:0d:df:6a:
         fd:68:e0:47:4d:80:de:ca:f7:52:54:db:2e:7d:05:45:dc:bf:
         f2:e8:aa:4b:89:1a:63:b9:1a:6e:46:52:3f:ba:51:7d:c5:16:
         a4:ad:d3:ab:0a:ea:a6:fc:ec:b9:fb:32:d7:5b:a5:f9:d6:62:
         f1:29:66:03:6e:dc:63:68:d2:a4:3f:b8:50:c0:2a:c3:eb:4f:
         d3:34:3d:8a:5a:dd:26:e7:56:5f:25:11:e2:ad:03:2a:7b:04:
         ae:e4:2f:48:6e:a5:41:21:13:52:9d:94:19:11:ad:d7:1e:88:
         fb:d5:8e:17:9a:6e:07:ea:09:a1:51:a9:0e:6a:73:a5:fe:f0:
         17:4c:fd:2a:0b:20:78:68:4e:0f:d7:63:44:38:f5:21:89:f0:
         f2:9f:e7:58:e9:2d:0f:ba:90:32:38:3a:1f:e4:67:ff:57:06:
         1d:67:ea:3d:ac:62:82:a1:85:a8:2c:e0:d0:c0:ec:15:62:05:
         e0:65:89:7d:ad:2c:72:9d:32:18:45:74:c9:2c:66:6d:ba:b3:
         d3:d9:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:50 2026 by rpki-client