Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4f2e775e-d6d1-3c10-8372-4145dc72bd07.roa
File:                     4f2e775e-d6d1-3c10-8372-4145dc72bd07.roa (raw, json)
Hash identifier:          8zP6DDVyuQrtDxTJPXfQw/7yX3WPxcpujpoea4ITvD8=
Subject key identifier:   CF:B1:F6:33:82:96:40:88:68:B1:44:22:90:9E:D5:3E:63:E1:3B:E0
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584D5024E833A3F306D0820FFF00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4f2e775e-d6d1-3c10-8372-4145dc72bd07.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     5650
IP address blocks:        172.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:e8:33:a3:f3:06:d0:82:0f:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=c57ca759-5c70-4a26-ace6-6fcdeff3cea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:de:d1:b4:13:40:89:0c:c5:8c:8b:9d:b2:
                    4a:60:d4:e1:1f:af:48:5d:92:f9:a4:0b:28:bf:59:
                    62:ae:a9:e4:b5:b9:d6:26:4b:4c:b7:45:ab:b9:09:
                    de:64:67:0c:5c:c1:3c:31:ec:8d:77:e7:bf:fa:42:
                    85:4a:3c:a7:94:73:8a:53:ab:a7:b0:58:51:7c:34:
                    7c:0a:43:2e:47:42:a0:14:ba:df:43:13:6a:71:ef:
                    37:61:c7:a8:d1:b5:bb:57:4a:72:3c:87:72:d7:69:
                    5c:14:ac:5d:e4:a8:e4:e7:1c:b6:82:8a:6c:25:75:
                    4a:51:7c:0a:98:8d:27:3c:40:cf:9c:0c:94:81:1c:
                    e8:02:e0:42:e3:6b:4e:cc:9b:c6:d5:96:ff:c1:f8:
                    f4:6d:bc:d8:bb:5b:84:63:ae:fa:72:ad:34:74:12:
                    55:2f:4b:1c:32:f5:5f:ea:60:7b:5d:27:3c:5d:c9:
                    41:29:bb:3d:e7:c8:74:b9:c9:0a:4b:39:48:f6:26:
                    6e:c9:0f:6e:2f:04:06:3b:73:06:a9:b7:8c:ed:e7:
                    b9:db:a6:45:36:a7:3a:f0:7e:bd:e1:8c:51:41:3f:
                    f6:e9:b7:aa:54:3d:60:2b:1d:f2:2c:7c:1a:25:ac:
                    fd:de:52:5a:60:d6:cc:2b:16:d8:89:4c:ae:36:e4:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:F6:33:82:96:40:88:68:B1:44:22:90:9E:D5:3E:63:E1:3B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4f2e775e-d6d1-3c10-8372-4145dc72bd07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:2d:c1:35:17:1a:00:d3:cc:11:cd:ea:7a:9c:df:17:c7:
         27:e9:3d:bf:f6:cc:f2:30:e1:cb:67:bb:a2:80:fe:41:04:98:
         26:82:30:75:17:ff:1a:44:c9:eb:f8:05:64:ca:8a:2b:e4:d9:
         fe:c9:12:fc:6a:ca:e9:83:a4:19:b8:d0:3e:cb:02:0c:22:5c:
         90:43:a4:9b:ef:aa:4d:f4:28:27:fa:38:da:5b:72:fd:61:52:
         e9:7a:52:d9:15:a2:d0:37:e3:25:4a:46:a0:3a:af:a7:07:7d:
         82:37:8b:10:22:df:32:ed:87:64:fe:95:76:c5:b8:a7:92:23:
         96:a7:11:6a:38:08:5b:d4:d3:7d:b2:d3:99:2a:c2:79:a4:37:
         c9:d0:3e:1a:1d:84:5c:cc:bf:22:ba:c6:da:13:2f:6f:62:18:
         2f:3b:b1:da:d9:5b:76:36:27:22:0b:4d:c8:25:c8:3c:c6:8c:
         5c:e7:35:51:5c:ae:9d:b2:df:23:bb:63:61:12:d5:d8:5e:48:
         17:88:36:ec:59:7d:ec:51:19:38:fc:cb:35:3b:61:11:0c:c6:
         d1:e3:f3:81:53:ed:74:1e:f8:9d:2c:52:56:10:1a:72:ff:78:
         cb:e7:8f:6b:b9:a4:68:f4:2b:ab:d8:e0:e0:b2:55:ed:ec:83:
         08:c0:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:32 2026 by rpki-client