Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa
File:                     67ed9f3f-8163-30ed-adda-fa473db6d09a.roa (raw, json)
Hash identifier:          u4xI76TF4CLFsDCaazuWL7eFwGEAGu0h+m55bHrSbWY=
Subject key identifier:   B9:A9:C8:57:D9:25:1B:0A:6C:4F:D1:A9:4C:C2:61:CC:BD:00:68:8B
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584EA798DBEDF109A5E6DAA001A0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394437
IP address blocks:        72.20.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:db:ed:f1:09:a5:e6:da:a0:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b6807f88-dc6a-4f8c-9960-88183053dc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:31:55:a2:ff:88:a2:59:c5:9b:98:d1:ec:c6:
                    e4:a6:dc:80:91:8b:71:cf:85:22:0d:ae:3a:b8:ff:
                    0d:a4:31:8b:ee:5f:55:63:fd:02:92:85:97:83:ba:
                    56:19:40:30:2e:9b:f2:c5:6e:a1:06:90:76:3b:87:
                    d2:1f:88:2c:eb:13:38:92:23:a9:5a:63:d6:b0:60:
                    70:52:0f:d2:de:d0:da:c3:33:ab:22:d9:58:44:35:
                    7b:60:64:9e:0b:a9:bf:52:ca:2c:94:b7:eb:83:c4:
                    61:ac:17:5b:2e:fb:6c:07:2d:0d:91:a0:b1:9e:c2:
                    f7:d8:80:4a:5b:65:8a:a3:4b:f7:1f:27:f4:56:45:
                    1f:95:ab:a5:cf:3e:8a:03:99:78:a8:94:37:9e:d6:
                    bc:33:c9:61:13:a2:0d:8c:c6:e0:dc:92:39:ce:fb:
                    b1:93:8a:ca:ff:57:31:4e:d7:79:fe:59:7e:ae:8b:
                    e6:e8:d8:c5:dc:07:36:ab:9f:fe:aa:0d:f2:a6:86:
                    71:2e:aa:33:5e:54:c3:d3:65:16:48:de:c8:1f:40:
                    e9:7b:f2:8c:85:16:31:76:0f:b2:8e:0e:6b:40:73:
                    1d:c8:ad:4f:2c:95:fd:9f:5e:87:22:f8:30:cc:e8:
                    be:d3:9e:b6:81:71:89:72:77:4d:7a:d2:d3:e8:f9:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:C8:57:D9:25:1B:0A:6C:4F:D1:A9:4C:C2:61:CC:BD:00:68:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:78:cb:35:bc:2b:ad:c9:1e:2f:81:91:dc:1f:57:82:80:
         2e:b4:2e:7e:38:8d:fb:25:48:17:fd:69:f6:3f:cd:6f:5d:0c:
         62:cb:01:fb:f3:ec:4a:cc:06:a4:29:90:f2:34:67:80:c4:76:
         08:44:fd:6d:7f:72:42:05:f6:b0:36:4c:33:d2:a6:fa:a5:c2:
         57:14:68:c3:0b:20:2c:ee:ca:b6:03:53:97:67:d4:5b:c0:e1:
         b1:db:25:1d:b2:fc:eb:6a:cd:c7:35:33:a5:b4:80:1b:2e:de:
         aa:f9:3a:a9:4c:56:31:b9:13:28:d7:e7:cb:ed:3d:5a:6d:71:
         1a:12:c1:a5:8c:73:db:9e:95:7d:0c:68:8d:0d:df:c2:17:79:
         80:29:c0:77:21:ab:49:df:9e:f5:5c:24:6a:ec:80:07:27:d5:
         01:15:52:80:ec:5a:af:3e:37:7c:db:c3:0b:9b:60:95:7d:46:
         7b:1c:a2:8a:9b:e7:05:38:5d:61:19:78:3b:e7:44:28:8e:b7:
         61:f3:1d:c1:90:60:7e:e0:fd:16:2f:62:fc:5b:c9:e3:c5:a7:
         c7:c7:3e:35:93:d8:b9:c6:14:ae:9c:d7:9b:47:be:53:07:fe:
         52:96:2b:fd:96:76:a5:a2:68:ac:1f:41:68:1a:f0:af:26:f8:
         c7:13:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:56:08 2026 by rpki-client