Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa
File:                     ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa (raw, json)
Hash identifier:          2ChK89Pg/OEO7Ekskirus2y2THvOLP6cUV/TD6ya0UA=
Subject key identifier:   F2:4D:D6:0F:03:40:A6:57:C4:63:58:9A:36:98:BC:96:CD:FC:49:96
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584DFA708542EEEB9E9E01E35EC0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     8987
IP address blocks:        170.72.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:85:42:ee:eb:9e:9e:01:e3:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=d7103378-39ea-4bae-a50d-a65b6705c89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:aa:5c:d8:37:cf:95:77:93:b5:69:a7:de:
                    97:d9:5c:93:71:5c:26:f2:fc:a8:ab:71:87:68:91:
                    1f:79:57:8e:c5:45:c4:4b:a0:57:47:06:24:9d:c3:
                    43:af:b1:e0:2b:b3:c4:dd:19:03:90:d1:f7:e2:61:
                    a1:93:36:29:3f:fe:f4:25:29:2b:85:a0:e4:1c:ba:
                    2d:91:1f:eb:e9:b5:de:29:73:de:ad:fe:71:63:b7:
                    37:4f:6d:56:79:58:75:3e:88:7f:9f:32:fa:18:88:
                    7b:a9:02:04:b1:63:b1:40:11:43:78:72:75:56:e9:
                    c9:f7:4e:c0:3e:94:8c:bf:aa:0f:5c:4b:82:b2:24:
                    95:6b:06:c7:fa:76:85:d3:a8:ab:cf:91:51:f9:16:
                    5c:2c:95:f4:ec:95:1f:6b:69:ad:b9:39:b0:6a:7c:
                    a7:42:ff:b5:73:39:75:d1:19:64:6d:86:2f:3e:d9:
                    18:99:30:20:e4:f4:af:df:99:a2:10:40:58:9d:9e:
                    2e:47:11:e3:e5:af:36:5c:66:40:16:db:e0:6c:d4:
                    4a:9b:b9:fa:58:7c:b6:5a:15:7d:41:ae:69:e7:e4:
                    01:f8:1b:ac:d8:1c:3e:b9:82:dc:27:fa:70:c2:15:
                    fe:58:63:bb:83:24:a8:0c:ce:78:31:81:a6:a0:52:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4D:D6:0F:03:40:A6:57:C4:63:58:9A:36:98:BC:96:CD:FC:49:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:31:00:76:05:05:33:1e:e4:ee:61:ed:a9:f3:61:8a:cb:2a:
         21:bb:7c:5c:58:d1:11:bf:25:70:c8:07:8f:5e:7a:4d:e5:13:
         2e:11:f6:a9:83:80:43:e4:ad:14:5b:06:56:1f:3a:11:c2:49:
         10:cb:88:dc:1d:b1:69:31:ef:a2:02:4e:4f:d7:6c:eb:a2:d2:
         26:33:d9:42:40:81:74:b4:e6:b0:e6:d2:cb:8a:5b:b3:10:10:
         bb:9e:0a:12:52:e8:98:c7:93:af:1c:27:61:6a:cf:88:36:ea:
         53:d3:d3:c7:ed:2e:f6:09:c6:8d:4a:02:63:eb:17:07:a6:14:
         ed:b2:fd:b0:30:64:82:bc:0a:e0:29:28:d3:14:41:41:11:21:
         d6:06:e2:00:86:e3:56:6b:cc:be:04:73:c0:73:39:64:30:21:
         93:c1:72:0d:fa:aa:45:1f:83:d4:1b:08:d4:a9:23:b3:42:be:
         55:40:5f:8b:d9:27:ae:b0:a6:11:89:d8:e8:8e:82:0b:f4:4d:
         d5:37:2e:99:4a:f3:90:e6:64:e8:0d:c5:2a:33:70:1a:5a:5d:
         0d:91:9f:3c:49:7e:65:b4:bf:d7:0e:b8:d4:dd:54:d8:2e:e5:
         10:71:e9:12:5e:8c:91:a0:d3:73:b3:d4:a7:dc:d9:6a:dc:aa:
         d1:02:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:21 2026 by rpki-client