Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa
File:                     44ba4ade-2c64-3fe6-a21e-385033d36313.roa (raw, json)
Hash identifier:          Fprr7xJSRxbXG1lgo2HoGRx7ywNSTKdI/vyob9Siw3c=
Subject key identifier:   6C:78:69:EA:F2:DC:A7:8F:AC:74:43:D2:5C:EA:2C:5D:18:1E:CA:EE
Certificate issuer:       /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial:       010D0C9F4328584E0A6FF012FA22CD0C07C24E00
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     5650
IP address blocks:        72.18.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f0:12:fa:22:cd:0c:07:c2:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=8eeb4d75-bf5b-4f02-86b6-3f9a46c0c590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:83:27:4c:d8:69:16:6c:40:68:b3:d2:5c:
                    14:6a:f4:ed:46:bf:01:55:c9:6e:54:8b:20:ae:50:
                    0f:fb:b0:9b:5f:39:80:64:13:de:4e:6b:bb:46:2f:
                    fd:68:cb:af:13:ed:0f:fd:77:04:f2:63:ab:17:dc:
                    5b:29:e9:9e:4a:92:89:e9:c3:94:d7:bd:31:d5:b3:
                    a0:9c:d3:a1:4e:ae:f9:e1:6d:83:1c:d9:68:4e:5d:
                    5c:f5:f5:cc:a9:a6:b8:31:7e:3b:c8:85:65:13:c4:
                    3b:1e:4d:db:8d:f8:e0:01:f5:03:87:c8:b2:34:21:
                    35:bf:da:a2:67:4d:4a:44:0e:ea:ca:64:eb:ac:2a:
                    c6:9f:4d:1d:a6:c2:93:36:80:83:13:f3:92:30:d0:
                    71:ed:d4:6e:6c:3f:fa:69:86:3d:eb:73:f0:2e:18:
                    e6:2e:9f:5d:2f:70:b6:3c:b8:e9:56:af:7f:6e:d9:
                    9f:e8:37:8d:94:4c:3a:d8:2c:60:bd:d3:4a:06:04:
                    a6:57:05:43:4a:81:a2:ef:cb:ca:59:59:70:61:e5:
                    ad:c7:9a:b5:7a:62:d3:35:b6:97:61:ff:d8:c6:95:
                    d2:93:fa:ee:53:37:37:61:56:ff:54:0c:ba:98:64:
                    fd:42:3d:0d:43:8e:aa:46:25:d4:97:b0:58:73:15:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:69:EA:F2:DC:A7:8F:AC:74:43:D2:5C:EA:2C:5D:18:1E:CA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl

            X509v3 Authority Key Identifier:
                keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:7d:12:d5:bd:f2:9a:fd:5c:69:c2:52:63:10:84:dc:7c:
         5b:b3:d3:85:86:8e:09:33:1d:5e:be:10:f8:4e:39:49:80:aa:
         36:f1:a6:00:83:f6:71:8d:ab:81:e5:33:db:b7:39:3b:6d:6a:
         d2:14:d3:b4:df:20:a2:36:9b:50:39:70:fd:26:53:9e:59:25:
         c8:bb:9f:3f:55:6f:5a:69:f9:3c:c3:c6:a4:49:3d:ce:a2:07:
         44:f4:61:3e:f6:40:ae:fc:20:1b:85:7e:c2:d1:5d:9b:be:34:
         27:c8:96:a2:00:05:45:97:50:56:b7:aa:c8:7d:48:ad:f4:76:
         9c:a2:d2:df:7c:cd:0e:f1:d6:b7:34:30:e6:f1:a7:d7:57:05:
         ec:6d:bd:36:6e:ad:80:5b:8b:d7:a9:e2:eb:79:c4:bb:10:55:
         98:1b:60:81:0b:49:11:67:a5:92:fd:a1:2b:38:eb:51:29:ee:
         6c:77:86:43:24:bd:79:c2:97:d3:76:dd:f6:e7:cc:1d:68:08:
         95:e7:9b:ab:71:5a:7e:38:83:4f:2a:f5:d4:24:64:f4:67:c6:
         5f:3d:a6:56:55:71:67:d1:3f:8e:90:d3:c1:5c:c4:14:b2:32:
         cb:d3:f0:aa:be:6e:7b:45:34:12:23:1b:4c:b8:7e:90:4e:19:
         b7:eb:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:11 2026 by rpki-client