Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d2d9d30-3b41-3e5a-9cca-ae89874d33b4.roa
File:                     8d2d9d30-3b41-3e5a-9cca-ae89874d33b4.roa (raw, json)
Hash identifier:          mFGfG2HURhBTMNreOWtSRy9PZM0TP3DAUeA3pfKJBoI=
Subject key identifier:   AC:C4:E0:1C:B6:C4:E1:7C:2E:0D:48:A9:9F:43:AB:86:36:D5:3D:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D67DFBDB48684A4516BF6DA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d2d9d30-3b41-3e5a-9cca-ae89874d33b4.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     18717
IP address blocks:        72.246.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:bd:b4:86:84:a4:51:6b:f6:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=d9ce9cb8-e8d3-4709-956c-989a4ca47bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:16:ac:3e:c1:da:df:a8:f1:8a:6a:fc:dd:
                    85:13:32:8f:10:7c:c2:84:3d:23:0a:40:39:98:af:
                    dc:67:9d:48:24:03:d0:83:33:c3:65:d0:ae:26:a1:
                    9b:fb:ab:7c:ee:af:6e:84:30:88:46:37:d7:18:f6:
                    33:7b:ef:c0:0c:4a:4a:a4:a6:9b:9a:48:2d:ae:97:
                    5e:61:30:ed:00:e0:69:18:91:85:50:3f:49:0d:1a:
                    01:0a:7e:43:ff:4b:64:70:71:cd:e5:4d:12:eb:88:
                    d0:dc:97:bb:fa:6d:2b:92:dd:83:df:0b:67:ee:f7:
                    c3:c3:9d:dd:4c:fc:45:c4:80:68:6b:97:4f:8b:92:
                    98:19:c5:a1:fd:2e:5b:9d:15:c5:28:9f:90:f6:29:
                    11:03:a0:3a:7e:a1:a6:08:b8:db:7d:7e:a5:95:4f:
                    09:fb:b3:88:91:b9:a6:73:30:7c:82:84:bb:71:6e:
                    20:37:9c:ac:47:d8:77:6b:e5:34:6e:f3:6b:b3:77:
                    fa:46:61:a4:fc:d5:69:f3:78:6e:d3:49:8f:f5:a3:
                    05:5d:86:44:39:eb:cc:a6:06:c4:f7:ad:62:20:c1:
                    93:66:28:05:3c:f2:ac:b0:39:bf:35:73:34:c8:07:
                    a1:c4:26:87:92:b9:b7:01:54:08:42:59:b3:13:73:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:E0:1C:B6:C4:E1:7C:2E:0D:48:A9:9F:43:AB:86:36:D5:3D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d2d9d30-3b41-3e5a-9cca-ae89874d33b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:72:e2:15:77:dc:a0:99:d7:bb:78:5a:c2:31:db:6a:55:
         f6:8b:0d:a0:34:32:1b:44:7b:de:ad:11:25:80:47:89:05:f6:
         0b:20:ed:d4:8c:00:59:b8:33:dc:cb:e8:2e:ce:25:6b:c4:45:
         85:9f:de:be:29:b4:70:47:c5:b2:7a:32:d3:e7:e7:49:ff:59:
         49:97:b5:4f:9d:ac:b4:2d:39:35:49:a5:09:89:48:e3:80:43:
         cc:ce:f1:73:b7:23:8f:8b:74:cb:bc:4e:4a:15:cb:c7:34:57:
         6a:8f:7c:48:c0:a9:36:34:ef:58:33:89:ab:2a:36:52:2a:c4:
         d9:29:fa:e6:b8:52:9f:88:98:f8:1f:00:9e:95:eb:b8:4e:55:
         b6:ca:b8:78:7f:09:0f:55:50:8a:6b:0c:be:a4:94:9c:6a:a9:
         0a:ed:8a:b4:d2:aa:b8:19:24:98:35:8c:2b:a7:c8:8f:2e:0a:
         3b:37:9a:9c:9d:b4:9a:4c:8c:17:c8:21:d0:b3:36:00:90:b9:
         6c:5e:d1:55:a0:79:4a:38:5e:18:49:a1:91:54:36:51:9b:ca:
         7e:83:70:54:73:33:0f:15:12:fb:46:18:fa:cb:6a:9d:7a:c0:
         08:61:58:df:84:e6:25:bc:88:16:8b:e6:07:03:63:c0:2e:f2:
         af:72:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:06 2026 by rpki-client