Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
File:                     7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa (raw, json)
Hash identifier:          DiuicSwo15jBFmfNyNX2rfO3edeIybZnZP3aJ9rORMU=
Subject key identifier:   FF:3B:B2:11:24:50:A8:DA:C8:15:C2:A0:45:2B:29:51:74:41:4F:34
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F4328584D7F9A8012FD083B350BE85600
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        72.18.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:80:12:fd:08:3b:35:0b:e8:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=cb8675ff-a6d1-4a81-a77e-427862008c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:b2:42:54:98:2e:d1:12:1f:a7:cc:5c:49:
                    1a:4e:d9:db:91:38:16:c9:99:b1:e0:b0:42:12:1d:
                    0e:7b:7c:39:20:ec:8c:92:7f:08:ea:f1:68:18:1d:
                    78:3f:1a:5e:af:c9:9a:3c:bd:ca:06:c6:a3:4e:1e:
                    78:55:80:57:ef:5e:80:06:38:eb:78:29:43:a8:ac:
                    26:31:5c:84:a5:47:e1:e0:06:9b:3b:26:94:7c:a2:
                    18:99:38:1a:d4:18:5c:b9:5a:5f:42:db:68:ff:1f:
                    e0:4e:8c:ab:03:80:e5:9f:c7:b6:83:b7:74:d5:45:
                    6d:c7:5f:e7:2f:d1:ff:e1:8f:46:30:e5:50:ce:0e:
                    6d:a9:a4:b5:c1:49:ef:50:15:e4:26:5f:9c:27:59:
                    10:49:a7:b0:84:6a:c2:9b:b3:e3:5d:ca:29:83:ba:
                    95:93:83:48:8c:c9:5e:08:e5:75:7c:fd:99:30:97:
                    51:05:bb:cd:e0:3f:89:fc:3d:dd:17:e4:94:3e:e4:
                    1f:18:03:99:44:a9:15:f8:e4:e9:8a:ef:b4:c6:73:
                    1d:8b:1d:72:ed:5f:f4:b1:91:1d:cf:9a:23:d3:c2:
                    76:41:69:f4:c7:78:be:97:b5:f9:dd:d5:5b:9e:f8:
                    b0:f5:14:93:12:48:b6:87:39:5b:12:eb:2e:db:59:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:B2:11:24:50:A8:DA:C8:15:C2:A0:45:2B:29:51:74:41:4F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:21:7b:4d:8f:73:ba:61:4e:e3:8d:59:59:40:85:66:58:32:
         69:96:ff:dd:16:07:84:a3:e2:5d:96:6c:11:70:94:d7:5d:22:
         fa:d9:3a:f5:d5:53:68:63:87:ef:a3:82:e4:58:a8:a1:fc:9a:
         0d:a4:66:64:64:31:46:a0:20:a3:69:78:a3:8c:8e:68:ed:3e:
         24:d8:3f:97:9e:2c:b6:a4:18:9e:c0:9b:59:a0:ca:55:2f:31:
         fc:d3:5b:80:23:db:3f:c2:7c:ab:8f:1c:20:d3:79:a8:0f:ff:
         64:cb:95:fd:41:1b:31:d3:73:b2:bd:a2:d3:40:83:55:57:b7:
         1d:c7:f3:83:4b:70:48:9b:87:30:cb:9b:a9:8d:06:3b:0d:8b:
         50:4e:43:f8:ef:11:1e:57:d9:81:59:3c:6e:28:3f:87:ed:04:
         bc:ee:07:d2:d7:a7:9a:4d:3d:ad:f9:d2:a3:6c:98:c2:bc:b2:
         d6:28:11:a8:23:e0:48:45:13:fc:3c:0a:d2:03:ba:94:33:ce:
         41:ee:60:00:0a:e7:2b:7f:61:a4:64:91:67:4e:57:a9:1a:20:
         6d:03:f6:62:9a:59:17:42:b9:0b:f4:68:d3:f7:4c:f9:7d:4a:
         61:8c:14:3e:17:45:0b:c9:3d:bb:00:50:f6:0d:19:58:82:8b:
         64:61:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:35 2026 by rpki-client