Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/1d1814bb-947e-3269-b131-3c3837548e30.roa
File:                     1d1814bb-947e-3269-b131-3c3837548e30.roa (raw, json)
Hash identifier:          giWII74LMh70NZdSy0d1EjE3Ec7W5RfTj6Q5e8xDgEo=
Subject key identifier:   6C:7E:7B:6B:F6:2F:04:CD:0B:29:AD:FF:92:BA:2F:28:D0:40:A5:4B
Certificate issuer:       /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Certificate serial:       010D0C9F4328584DF210B8952DA7FA155450D880
Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/1d1814bb-947e-3269-b131-3c3837548e30.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     19734
IP address blocks:        72.59.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:b8:95:2d:a7:fa:15:54:50:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=152be058-dc6f-4ff4-b217-2ec808aee896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:25:e3:3c:5c:10:61:f3:33:2e:b2:48:9f:
                    db:81:b6:86:ef:d0:3d:df:72:cc:c5:fd:cd:37:b7:
                    61:e6:96:9a:21:5f:47:17:7b:ad:b7:82:b1:ce:72:
                    0e:42:0b:77:06:c1:27:4f:92:2c:a5:0a:3b:c4:d2:
                    6f:45:1d:f4:64:f4:74:5b:ae:79:41:4c:a4:39:ac:
                    36:44:df:a8:9b:68:37:81:bb:90:4e:30:89:f2:c2:
                    ab:8d:16:2c:e3:1c:19:4c:d0:18:65:86:59:10:c0:
                    ab:8e:ea:87:e2:53:cf:71:53:1d:3b:bb:39:73:89:
                    82:58:1d:63:b6:46:c4:ab:21:21:6f:4f:c1:4d:a0:
                    7a:2b:4b:37:2d:cd:e7:58:73:19:42:db:69:10:f2:
                    ff:01:35:20:2e:d0:48:a7:a2:59:27:d5:00:f9:21:
                    86:42:40:a0:82:0c:d5:ff:9c:6d:c9:e6:2b:33:80:
                    df:d9:9f:9c:c1:09:93:98:92:79:fa:f1:69:7d:d4:
                    6d:08:d5:bd:a1:23:b3:19:78:b6:10:f3:92:be:66:
                    74:1d:9e:ed:56:18:fa:81:7a:a8:25:91:d5:08:e7:
                    08:43:2d:88:27:89:c2:a1:24:6b:13:1a:46:7b:2c:
                    5c:81:27:f9:0f:8d:d6:e7:1c:92:1b:47:3c:92:38:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7E:7B:6B:F6:2F:04:CD:0B:29:AD:FF:92:BA:2F:28:D0:40:A5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/1d1814bb-947e-3269-b131-3c3837548e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.59.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:b7:8c:7c:53:4d:13:df:be:f2:3e:4c:52:fe:10:f7:59:
         f6:3c:dc:a4:41:de:be:03:cd:fb:3a:35:a9:f2:78:04:65:b9:
         91:f2:a2:ad:9d:d3:12:a2:47:e1:e6:96:1d:4a:eb:ef:de:99:
         5d:c0:1b:a3:ff:09:19:f9:f8:1f:19:c5:63:a3:9d:4e:0e:1f:
         55:90:90:98:9f:52:36:06:0f:1f:3d:0c:5f:fa:9c:80:73:5b:
         cb:05:45:69:5c:41:53:05:2e:7f:6c:0b:43:47:ba:ba:fb:65:
         03:c8:e1:55:5f:f9:7b:29:20:89:52:47:eb:e3:ed:ef:67:ef:
         62:b3:d1:45:ca:46:74:0e:55:e8:3d:00:7c:59:f3:f0:e0:4d:
         2c:c3:1d:a0:8f:32:5a:f0:eb:48:dc:b7:0d:f3:e9:5f:5f:e9:
         3f:4b:fd:02:48:c2:8f:d8:05:b0:09:55:83:46:7e:11:ca:b4:
         5d:0c:db:c6:84:e3:37:b4:69:5e:b8:06:3f:9b:99:8c:fc:a1:
         85:62:06:ca:64:59:91:08:b1:36:67:0b:72:4f:e9:da:28:d2:
         2a:79:95:cd:d7:3b:ee:6e:9b:73:ab:5a:3e:f0:10:24:e2:b1:
         5f:32:70:1d:40:b2:a7:a6:59:86:65:9e:ba:66:bf:1f:e5:b9:
         6c:f6:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:15:23 2026 by rpki-client