Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e35be3d8-6c91-3842-8363-1c07cc95b8ef.roa
File:                     e35be3d8-6c91-3842-8363-1c07cc95b8ef.roa (raw, json)
Hash identifier:          b/PgyqwsLkyY69kzSSJq30GIBZd/2sAKkYizDjVLdbM=
Subject key identifier:   75:10:A1:1E:F0:EA:2A:80:B3:02:38:24:7F:E8:BB:EE:FF:AE:8D:F0
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584EA5AA75862F417D85CEC58956
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e35be3d8-6c91-3842-8363-1c07cc95b8ef.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     16524
IP address blocks:        72.11.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:75:86:2f:41:7d:85:ce:c5:89:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=e6a86850-ecf6-42a3-b443-8d45e6147e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:2d:d7:07:c8:4b:a2:e0:15:ec:0f:75:ad:
                    6e:87:33:78:03:df:4f:74:ba:02:b4:df:6c:c7:a4:
                    ac:02:4e:58:da:4d:5a:68:29:bd:9a:2d:a9:69:8d:
                    c7:26:08:e3:a8:80:90:6b:ac:87:43:23:ae:78:11:
                    b1:9b:a6:52:ef:e4:98:8d:f1:7d:1f:4d:d3:47:69:
                    f3:f1:be:25:5a:c0:23:88:fb:c5:d3:07:04:f9:5f:
                    f9:59:90:1c:ba:99:36:ee:25:c6:07:5d:cd:d5:dd:
                    ce:c7:6c:48:44:95:f6:8b:31:dc:68:ec:94:27:9e:
                    7a:64:7d:3c:71:c2:c6:87:71:97:a6:78:00:8f:21:
                    2d:b1:2c:26:3a:25:ea:4d:4d:84:ca:df:25:f2:7a:
                    0d:85:25:6e:90:4e:1a:13:e6:2d:b4:e9:40:4a:49:
                    9e:01:79:7b:8a:aa:eb:e3:72:bc:57:58:d8:d9:39:
                    2f:4b:9e:91:85:ce:dd:37:cd:ce:62:30:19:f4:ae:
                    1b:79:be:cf:eb:fa:75:db:f2:21:ce:d5:bf:af:d2:
                    ae:78:1a:e5:28:bb:bb:b7:64:01:27:c1:b6:ed:7c:
                    9f:63:4d:e6:cc:d5:14:79:49:5b:58:b4:a5:2a:9f:
                    55:de:cd:c4:c6:cf:ca:26:77:4b:25:d0:b2:d1:c5:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:10:A1:1E:F0:EA:2A:80:B3:02:38:24:7F:E8:BB:EE:FF:AE:8D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e35be3d8-6c91-3842-8363-1c07cc95b8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c8:42:36:35:91:8b:ca:ff:c3:67:33:0e:64:50:8a:49:a7:
         64:eb:61:79:8c:37:d5:bc:02:49:ed:90:f1:18:b1:5b:ce:85:
         9c:f9:83:c0:61:b4:17:64:24:52:f7:f1:18:74:75:11:23:da:
         43:8b:64:15:fa:05:c7:d6:1f:4e:2e:75:5f:e5:6f:50:b5:9b:
         f1:e4:71:ea:7d:e2:ec:3e:18:fd:97:39:47:4e:55:86:df:8c:
         26:b4:2b:6f:9d:8e:92:18:bb:22:73:e3:1f:47:0c:74:45:6d:
         40:b3:d0:8e:67:4e:04:c1:a5:11:50:46:4b:77:30:ea:d0:5c:
         39:28:61:64:22:0c:9f:6b:ed:06:a0:22:e0:e0:6f:73:56:6d:
         5d:61:54:63:a6:19:65:d0:3d:f2:3e:2f:19:27:38:22:13:ad:
         86:d6:51:1d:83:aa:6c:a2:da:c0:52:02:7e:74:c1:c4:71:6c:
         33:d2:17:5c:ed:35:d6:95:0b:82:12:33:3d:48:cb:77:4e:62:
         76:1d:1c:d3:b9:75:73:e4:78:0a:6b:00:d2:5a:b0:41:d5:c6:
         b9:eb:2b:33:9b:60:3b:55:29:7e:6b:f5:3b:79:ea:79:09:8f:
         a2:b6:b7:dc:3a:6f:a9:9a:49:c3:ca:5c:85:2b:a4:c9:bb:c9:
         52:6b:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:40 2026 by rpki-client