Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/518f742c-3690-35e0-9bf7-3899759f6759.roa
File:                     518f742c-3690-35e0-9bf7-3899759f6759.roa (raw, json)
Hash identifier:          RVBb304nsCZw6ZVNE+F8snaWoWsmAk7T0CiLAJDvYzo=
Subject key identifier:   1E:63:2C:DD:5B:4E:6B:D0:49:D6:2C:4E:7E:A4:87:16:94:8D:F6:81
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB13FE7588598378440600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/518f742c-3690-35e0-9bf7-3899759f6759.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        70.28.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:13:fe:75:88:59:83:78:44:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=c25c455b-8124-4af8-910d-477e3fa672a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:42:52:cf:d5:95:5d:58:76:15:70:62:f2:
                    ec:1e:5e:52:e6:e8:2e:42:ca:fc:e0:f5:ee:3e:e9:
                    a2:3c:48:91:b5:e1:bc:b6:58:bc:2d:60:99:0c:c7:
                    48:eb:db:a2:d1:a5:83:5f:51:70:91:86:8f:8b:fd:
                    93:3a:45:be:f0:c9:11:db:57:d3:a3:6b:da:c1:c3:
                    87:d7:de:00:fd:79:74:eb:bc:f7:70:2c:89:19:7c:
                    46:a8:4e:1e:73:43:87:ef:72:7f:14:3c:b6:91:6e:
                    92:38:7a:95:29:15:64:38:a0:02:96:05:42:16:fe:
                    a9:69:e8:7a:01:34:f0:29:bb:33:e2:ba:d1:48:ca:
                    08:16:9f:10:54:b5:9d:bf:23:2f:07:86:8e:7c:86:
                    71:84:10:8e:0c:7c:95:9a:4b:9e:5e:a4:06:aa:44:
                    78:9b:25:b3:33:46:58:60:ef:af:86:1e:6e:ff:e2:
                    b3:2a:7f:9d:87:1b:ee:8d:7f:d6:9d:f7:3b:71:f7:
                    0b:69:6c:a8:a8:4d:af:19:38:9c:89:c1:01:89:b4:
                    aa:8c:02:f8:7d:2a:e9:20:0d:2c:8c:fe:e1:20:ae:
                    4e:6d:c4:2f:ea:87:7a:58:1d:e9:07:d9:01:0b:01:
                    59:c1:af:05:8c:19:03:e5:a9:05:59:7d:69:99:ab:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:2C:DD:5B:4E:6B:D0:49:D6:2C:4E:7E:A4:87:16:94:8D:F6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/518f742c-3690-35e0-9bf7-3899759f6759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:d8:3b:87:63:c5:54:7b:53:f3:cb:45:16:66:44:d3:33:
         7a:77:15:72:0c:b7:f2:d1:ef:bd:58:57:d0:f6:11:58:0f:71:
         fd:ad:b5:19:b0:6d:3c:8b:e4:6f:17:c8:80:ba:5a:a3:ca:e5:
         7a:4a:c0:fc:40:d5:f7:cb:ed:ff:39:05:0a:9a:64:de:d4:5a:
         70:2a:bb:d2:f0:ba:32:a9:5b:81:6c:05:04:e7:46:66:94:ec:
         cf:8c:3c:86:42:2b:08:98:bd:69:f8:3a:c8:53:be:29:9e:5c:
         cb:cf:ec:38:d5:e1:0c:61:e5:82:a2:d4:f5:63:be:96:07:2a:
         da:82:61:46:73:6f:55:43:43:e0:2e:50:a6:c2:eb:45:fd:fc:
         5e:c0:0a:de:13:77:89:0d:51:ee:da:13:ca:f6:7c:ef:fe:a3:
         f0:16:6e:d9:93:4b:18:0a:5e:63:84:b3:56:d3:55:9c:ba:94:
         2b:a3:0c:a8:7a:9e:df:9a:c6:d2:4e:23:71:6c:78:69:6c:ee:
         4b:f0:74:4f:1d:ae:29:e4:91:8c:0c:0f:c1:26:5d:96:2d:f7:
         45:43:c8:a2:d1:34:62:4a:0b:35:32:d3:9f:bf:33:54:b3:eb:
         6e:94:a3:af:a7:fe:01:7f:ac:49:21:5a:0f:2a:4e:45:70:ed:
         93:f6:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:49 2026 by rpki-client