Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06eb8607-506e-350f-b042-5ec27e435e93.roa
File:                     06eb8607-506e-350f-b042-5ec27e435e93.roa (raw, json)
Hash identifier:          tQgKFYFO5dL447pcGY1tpTCj3rWfyXwjh8kgTeGW7yk=
Subject key identifier:   9C:03:39:D5:3D:F6:91:1D:6A:D5:C8:F1:E4:38:20:E4:7F:01:30:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6C0FD13D81E41F9DD1EF1600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06eb8607-506e-350f-b042-5ec27e435e93.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     35994
IP address blocks:        72.247.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d1:3d:81:e4:1f:9d:d1:ef:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=adddfadc-d953-415a-a5cb-c91c174e7488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:4e:3b:53:ad:84:64:a4:d4:6e:78:f9:3b:
                    6f:b8:17:8b:82:17:3c:4d:10:90:6c:8a:7a:26:2b:
                    f5:a3:69:1b:f2:5b:22:e3:6f:71:52:0c:a1:58:5e:
                    94:db:d3:a4:b2:93:e9:e7:e7:d5:5e:9d:5c:66:64:
                    91:21:c8:7e:03:b4:39:b7:92:cb:21:10:05:c7:b6:
                    c2:0b:7e:ca:f1:a0:ba:16:da:e3:78:d8:99:91:05:
                    eb:f9:0a:3a:86:2a:c8:b0:f4:a2:13:c4:f7:7f:6d:
                    82:de:55:53:18:90:42:cb:00:ad:46:cc:17:3f:a3:
                    2e:6e:17:eb:5c:38:5b:d2:5c:57:f2:4a:93:16:2d:
                    71:de:3a:61:b0:df:1d:24:69:ce:93:c0:98:45:55:
                    51:02:da:5a:88:07:d4:3f:1b:e6:c7:ad:e1:0e:f3:
                    23:f3:fb:4b:3d:07:58:19:d9:9d:3e:2d:65:75:77:
                    c4:23:75:ec:21:b6:ba:ed:89:d8:ed:5a:13:96:04:
                    77:50:ef:a4:44:cf:2f:b0:a0:cb:7d:bf:46:71:5c:
                    e7:75:44:36:5a:0c:f0:ec:8c:19:d9:14:16:2e:36:
                    f5:0b:9d:49:e9:9a:41:cd:26:3a:3b:f2:e3:35:ff:
                    21:9a:03:c4:05:f5:0e:0a:9c:e7:c0:c9:03:3b:9b:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:39:D5:3D:F6:91:1D:6A:D5:C8:F1:E4:38:20:E4:7F:01:30:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06eb8607-506e-350f-b042-5ec27e435e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.247.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:54:14:8f:da:70:37:76:35:23:f7:ea:9d:a7:43:3c:93:
         46:68:2c:e1:46:97:0f:46:e2:df:63:22:b0:82:54:68:6d:c1:
         de:60:61:c9:14:98:58:24:bd:25:89:c5:96:52:81:aa:f8:e7:
         56:e2:f0:d2:08:00:f9:6a:19:8c:01:01:20:14:ac:25:1b:96:
         26:77:3c:75:72:ed:4c:f3:5f:7a:65:09:c7:84:f0:77:f0:14:
         f9:a2:87:af:81:b1:3e:e4:ff:c4:fa:57:59:36:a5:5d:bd:cb:
         f8:b4:22:eb:67:fa:dc:72:73:aa:2f:34:a5:d9:28:1f:de:da:
         00:7b:4c:c0:37:4b:59:a1:6e:c2:35:0a:79:66:4f:43:61:01:
         25:3a:64:5d:66:b4:c5:27:bb:be:65:fb:52:fc:90:4a:5d:2a:
         dd:63:06:03:8e:09:39:08:36:31:00:4e:d0:a2:99:42:7e:01:
         a6:af:8f:ed:e1:5f:9f:9b:63:b8:27:eb:a3:e4:9c:26:a2:a5:
         61:38:2e:52:81:45:38:57:89:0e:7f:ce:0a:af:6f:3d:9c:3b:
         78:ab:c8:8b:59:4a:74:f1:ef:6c:14:c5:4f:86:52:79:ef:ac:
         83:be:a7:e9:53:a2:f0:79:aa:87:c3:4f:3d:d7:4b:ad:88:33:
         72:2c:95:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:08 2026 by rpki-client