Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
File:                     59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (raw, json)
Hash identifier:          2G5Dcs5yyGFpOgA3RYqLhffl5+Jg/d+huQXjXnhGBvM=
Subject key identifier:   76:17:20:0F:78:D4:78:1C:6C:51:7B:6B:34:38:85:C7:5D:D0:6E:F9
Certificate issuer:       /CN=223a4b84-939d-437b-85a8-9ff465d0541e
Certificate serial:       010D0C9F4328584D852FD533ADEB6B9FB0CD7300
Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
Signing time:             Thu 16 Apr 2026 01:00:23 +0000
ROA not before:           Thu 16 Apr 2026 01:00:23 +0000
ROA not after:            Wed 15 Jul 2026 01:00:23 +0000
asID:                     8075
IP address blocks:        69.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:2f:d5:33:ad:eb:6b:9f:b0:cd:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e
        Validity
            Not Before: Apr 16 01:00:23 2026 GMT
            Not After : Jul 15 01:00:23 2026 GMT
        Subject: CN=18e4e0dd-9b33-4081-99c5-72e1a872d64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:a0:f0:03:d8:a6:d8:c3:0a:29:59:a2:11:
                    12:49:15:9c:d7:a6:b1:a7:32:86:61:08:d5:e9:c4:
                    23:22:ba:b1:54:9b:4a:4c:e6:bd:ad:c0:2b:6a:80:
                    6e:1a:8c:0b:51:a3:68:51:73:87:ab:7e:58:b8:69:
                    bb:b0:91:81:6c:f1:08:bf:3e:79:81:d3:07:ff:73:
                    0f:67:6a:d6:29:89:15:b3:b7:74:8e:ee:33:45:3d:
                    4b:8a:01:d1:5e:89:27:ab:be:9f:82:dc:f1:8e:5a:
                    8d:20:40:89:3c:d2:ef:b8:52:ea:41:90:fe:a3:1c:
                    56:ea:9a:2a:f0:2c:fa:38:cb:79:a5:e0:bc:5f:54:
                    64:26:7e:93:fe:9b:16:88:01:64:a6:4e:56:05:51:
                    58:dc:fa:7d:0c:08:e4:42:16:ee:3c:4a:25:95:a9:
                    4c:6d:bd:cb:79:4d:0f:61:7a:1a:f0:51:88:f9:5e:
                    bb:69:22:b7:e4:74:a2:ee:e5:8c:7d:33:65:e0:53:
                    a4:8a:fb:eb:f9:3b:39:0d:ce:34:24:07:87:be:bc:
                    f1:f1:36:d7:a0:76:3e:f0:85:1c:ae:62:e1:90:72:
                    37:18:2f:fe:c4:e0:f0:4e:de:77:d4:18:0d:bf:f8:
                    60:36:3a:1f:8b:2c:d1:71:43:6b:57:47:0d:05:01:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:17:20:0F:78:D4:78:1C:6C:51:7B:6B:34:38:85:C7:5D:D0:6E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl

            X509v3 Authority Key Identifier:
                keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:48:85:2a:80:3a:74:c7:d9:59:a6:a7:bf:7d:14:9f:4a:9d:
         f8:4e:98:30:a5:08:a9:21:94:63:45:f3:e4:f8:70:c9:b6:f6:
         75:ca:3c:39:87:46:18:2f:cc:6e:ab:96:d3:ff:47:32:47:21:
         a6:f2:fb:16:68:c1:06:14:ed:44:ff:7c:13:bb:35:fd:7b:92:
         34:ea:e6:08:73:01:59:1d:ef:58:71:cf:c7:9f:d3:50:ca:a2:
         3c:29:cf:be:51:44:32:9a:09:a7:1b:96:18:12:9a:de:aa:67:
         c0:d2:51:8e:e7:63:a5:f3:ac:a8:d3:cb:c7:53:7f:f1:0e:fa:
         16:a3:5e:a7:2d:08:82:42:1f:53:62:bd:c0:27:d2:be:85:cd:
         8a:94:ca:a9:7d:db:34:e5:5f:35:8d:45:ef:11:ea:c1:22:aa:
         9c:30:04:02:0f:cb:42:ab:2b:e1:8b:97:5c:08:e3:16:bb:1f:
         ec:1d:b0:9e:04:8c:18:9d:7a:0e:fd:51:ee:38:c6:57:3d:2d:
         31:d0:fc:9b:8c:29:71:da:f6:55:b6:5d:70:93:ce:9f:2d:58:
         3a:7a:76:19:7c:02:e7:30:51:ed:37:e2:49:bd:36:ec:87:fe:
         81:cf:8d:34:7d:85:f6:bb:22:85:9f:65:b0:43:e6:07:a5:d8:
         af:4f:de:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2FL9Uzretrn7DNcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIzYTRiODQtOTM5ZC00MzdiLTg1YTgtOWZmNDY1ZDA1
NDFlMB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk
MThlNGUwZGQtOWIzMy00MDgxLTk5YzUtNzJlMWE4NzJkNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyKg8APYptjDCilZohESSRWc16axpzKGYQjV
6cQjIrqxVJtKTOa9rcAraoBuGowLUaNoUXOHq35YuGm7sJGBbPEIvz55gdMH/3MP
Z2rWKYkVs7d0ju4zRT1LigHRXoknq76fgtzxjlqNIECJPNLvuFLqQZD+oxxW6poq
8Cz6OMt5peC8X1RkJn6T/psWiAFkpk5WBVFY3Pp9DAjkQhbuPEollalMbb3LeU0P
YXoa8FGI+V67aSK35HSi7uWMfTNl4FOkivvr+Ts5Dc40JAeHvrzx8TbXoHY+8IUc
rmLhkHI3GC/+xODwTt531BgNv/hgNjofiyzRcUNrV0cNBQFFeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYXIA941HgcbFF7azQ4hcdd0G75MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNh
NGI4NC05MzlkLTQzN2ItODVhOC05ZmY0NjVkMDU0MWUvNTllOWU0ZDUtZjk2YS0z
ODUyLTkxM2ItZjk3ODEzZmZlZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjIzYTRiODQtOTM5ZC00MzdiLTg1
YTgtOWZmNDY1ZDA1NDFlLzIyM2E0Yjg0LTkzOWQtNDM3Yi04NWE4LTlmZjQ2NWQw
NTQxZS5jcmwwHwYDVR0jBBgwFoAUty2YvxMnHjhhqY5/W/c+SXA3684wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNhNGI4NC05MzlkLTQzN2ItODVhOC05ZmY0
NjVkMDU0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUhHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZIhSqAOnTH2Vmmp799FJ9KnfhOmDClCKkhlGNF8+T4cMm29nXKPDmH
RhgvzG6rltP/RzJHIaby+xZowQYU7UT/fBO7Nf17kjTq5ghzAVkd71hxz8ef01DK
ojwpz75RRDKaCacblhgSmt6qZ8DSUY7nY6XzrKjTy8dTf/EO+hajXqctCIJCH1Ni
vcAn0r6FzYqUyql92zTlXzWNRe8R6sEiqpwwBAIPy0KrK+GLl1wI4xa7H+wdsJ4E
jBideg79Ue44xlc9LTHQ/JuMKXHa9lW2XXCTzp8tWDp6dhl8AucwUe034km9NuyH
/oHPjTR9hfa7IoWfZbBD5gel2K9P3mY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:36 2026 by rpki-client