Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa
File:                     7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa (raw, json)
Hash identifier:          RZrSuyWNfihm5gzRvk9QC3mVrszUpSnO1X4VjDqZpgo=
Subject key identifier:   61:02:86:41:B7:DA:9E:7E:2B:6B:E0:FC:1C:8F:A8:5B:01:E6:67:20
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584E070087CFDB6BDB3D8825E840
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     55286
IP address blocks:        72.57.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:87:cf:db:6b:db:3d:88:25:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=8c0285a0-df22-4e6a-a504-3e8984af70fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:42:ad:20:57:4b:7f:02:af:b4:96:f7:80:
                    13:23:53:48:07:8d:97:38:08:39:48:89:28:ba:dd:
                    48:1b:aa:d2:c8:80:cb:3b:93:21:b0:70:96:11:56:
                    fc:e5:e4:55:13:30:75:f7:5c:93:12:93:30:9e:13:
                    31:98:42:ba:be:a2:e4:43:58:25:ed:46:e1:31:63:
                    5a:0e:06:3f:e2:f1:4f:e4:7a:5f:af:12:53:50:08:
                    00:44:51:0a:ff:09:1c:a5:9a:68:fb:58:71:f0:0d:
                    b8:31:1f:5a:c8:99:16:83:2a:b4:ee:5f:ea:82:68:
                    9a:09:0a:aa:2c:5a:dc:28:0e:53:30:ff:c8:cd:d5:
                    4c:d3:39:48:0f:f8:a7:54:22:9f:21:bf:4f:29:11:
                    66:93:c5:2e:db:c0:c8:59:e4:b1:d7:7e:8a:09:54:
                    9d:8b:6a:b9:5f:23:91:ba:22:ac:aa:e2:b9:a5:b3:
                    23:62:21:96:59:7a:e5:e7:7f:3e:69:33:ad:68:30:
                    22:27:00:a2:cb:66:7f:2c:40:86:17:14:19:11:50:
                    85:97:73:ab:82:e0:05:d5:e3:e4:6f:72:3a:7a:9c:
                    b3:34:e5:74:d1:45:25:71:97:50:99:b0:c6:e7:5b:
                    4b:4c:b8:c7:04:ac:3b:9b:ec:26:2f:b8:54:c4:7b:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:02:86:41:B7:DA:9E:7E:2B:6B:E0:FC:1C:8F:A8:5B:01:E6:67:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.57.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:21:98:8b:b4:e3:b3:93:6c:95:11:5a:eb:55:f3:ed:87:41:
         3e:0b:06:fc:67:98:77:56:32:c9:2a:42:69:ee:7d:17:f3:07:
         23:52:eb:de:f2:d4:54:b9:56:3f:53:c5:8f:76:02:90:1d:b1:
         16:bc:23:a6:dd:20:8d:f6:a1:f6:5b:cf:aa:ff:f6:e5:ba:0c:
         47:90:f4:9f:3f:63:a8:30:8f:f4:85:e5:81:9d:79:d3:c9:04:
         c0:c9:43:70:07:4e:b6:b1:4b:8d:f6:10:5c:18:b2:68:59:ed:
         28:d0:42:44:ad:9c:ee:ce:67:c9:de:f6:ed:c3:bc:63:f2:6c:
         9b:3d:9e:11:ae:f1:d0:85:10:36:b8:fc:e5:05:5f:9d:5c:cb:
         e0:2c:6e:70:63:c9:e2:d9:16:b9:1c:47:55:d1:90:57:93:a4:
         62:ed:09:49:1f:b8:dd:ee:14:dc:75:26:25:5f:c1:29:fe:d0:
         1b:48:47:82:08:73:a2:0b:22:21:5e:d3:8d:7d:84:8f:9d:c9:
         35:32:3e:15:a4:fc:c4:17:e6:04:5d:ce:8e:84:4f:3f:ed:d3:
         f0:66:af:86:99:54:e6:15:f9:1c:fa:4b:81:bf:b9:0b:00:18:
         37:b2:3f:98:7c:8b:a5:3e:c6:dd:a8:11:0b:33:fa:51:73:1b:
         52:7a:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:32 2026 by rpki-client