Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/139a8f7e-6898-32a6-ab50-93498885f84f.roa
File:                     139a8f7e-6898-32a6-ab50-93498885f84f.roa (raw, json)
Hash identifier:          yg1WYY4254f8NVNwAQSdfxGwcODsGo5/wuu1LREEdbI=
Subject key identifier:   41:1E:7E:6E:17:25:CF:8F:F0:65:C9:A6:73:23:1A:1C:B9:AC:34:40
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F4328584BA39D09ABCC5CA76A6338C1C0
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/139a8f7e-6898-32a6-ab50-93498885f84f.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     36100
IP address blocks:        72.10.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:09:ab:cc:5c:a7:6a:63:38:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=ec3d8931-9975-4685-a81d-535ce6d8681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:8c:d6:04:72:f8:e0:ac:30:6d:92:72:4e:
                    54:b6:33:71:56:ca:6c:5e:05:a2:bd:64:88:17:b5:
                    c7:92:be:be:66:0a:c6:bd:45:86:6a:71:c2:f7:4c:
                    00:f7:c0:50:73:20:24:c9:dd:8a:af:bc:9d:07:06:
                    cb:5c:a6:58:b1:17:49:d1:18:f0:04:d3:17:8f:6e:
                    d5:4a:bd:aa:de:86:86:6a:4a:39:a9:43:3c:58:2f:
                    ae:39:28:77:82:80:8d:83:bc:f7:47:00:40:21:9f:
                    0e:18:3b:8b:80:38:96:0e:c0:83:b0:d1:75:cb:99:
                    96:ba:a7:c6:3e:e0:91:db:35:bd:d7:b7:0b:ce:75:
                    fa:fc:8d:d2:90:3b:55:0a:67:8c:00:ee:60:10:64:
                    1f:83:57:ab:d4:6b:a3:4f:68:53:50:af:19:94:cd:
                    bc:9e:3b:5c:29:e4:0e:f3:8a:a4:eb:fb:7e:dc:48:
                    11:4a:fb:ef:82:f9:e7:49:6b:60:72:60:c0:d5:db:
                    1f:ab:de:78:ed:01:d1:1e:31:f4:28:af:62:41:ed:
                    db:e0:1d:48:57:70:d6:38:48:2e:35:4c:e7:62:46:
                    61:3f:6d:81:5a:af:1a:25:87:a9:61:9b:d1:4c:b3:
                    46:36:69:2f:55:2a:e2:ea:50:81:0a:69:0f:20:da:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:7E:6E:17:25:CF:8F:F0:65:C9:A6:73:23:1A:1C:B9:AC:34:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/139a8f7e-6898-32a6-ab50-93498885f84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:02:2d:a1:9d:1a:ca:8d:50:cc:30:f6:13:a6:b8:eb:8a:ca:
         81:39:6c:0e:08:1b:0d:0d:15:4a:df:1d:d2:f9:83:74:3e:52:
         18:f6:a8:88:83:b7:40:cf:3f:33:92:84:aa:7a:1e:42:92:e4:
         11:90:1c:aa:37:13:76:fd:f4:38:48:3c:4e:b3:37:e1:b5:37:
         2e:65:55:66:72:0f:09:ee:fd:18:e0:77:5c:35:44:fb:67:fb:
         7c:db:65:1b:b8:c9:ae:f6:24:2a:fa:41:b3:13:b9:bc:f3:44:
         db:5e:cf:73:e6:c3:a4:55:69:0e:ab:0c:d4:02:5f:f6:5f:f3:
         36:c7:d8:b6:cd:b5:e9:fc:c1:5b:fb:c6:b6:be:a0:84:08:fe:
         bb:93:45:51:e4:50:6b:91:90:12:f1:5c:fd:34:0a:b6:b8:13:
         e9:4d:62:92:8a:78:29:f6:ae:fa:9d:2b:a9:0a:d1:0c:9f:27:
         60:25:16:4a:a5:8f:16:31:75:7d:68:86:42:10:ae:1f:d2:b3:
         bd:74:65:00:56:89:78:5d:24:e8:27:40:d6:b2:d6:fd:93:1f:
         89:71:ac:47:72:8a:8b:6e:14:85:d2:bc:e4:f8:96:0d:b8:e5:
         34:47:15:a0:60:6d:24:57:52:cf:2a:6d:82:f8:30:3d:bd:76:
         26:5b:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:23 2025 by rpki-client