Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/6fb84449-b056-39ee-a011-1ce50bc84454.roa
File:                     6fb84449-b056-39ee-a011-1ce50bc84454.roa (raw, json)
Hash identifier:          1PphKYWNMgfr20bIRyt0GKPZu9JmQSIcaD85aDS520I=
Subject key identifier:   C5:48:DB:BE:2E:93:3E:D7:ED:D2:84:77:5D:4C:6B:E4:89:8B:52:34
Certificate issuer:       /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Certificate serial:       010D0C9F4328584EA7959515D50AEBDF449B6780
Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/6fb84449-b056-39ee-a011-1ce50bc84454.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63001
IP address blocks:        72.59.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:95:15:d5:0a:eb:df:44:9b:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7e70ee1a-2535-4001-826a-11ccebdb2ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:b6:30:00:9d:95:a0:44:d9:82:a1:49:1e:
                    9f:bc:38:2c:57:4d:8d:82:b8:67:2f:78:0f:b5:cd:
                    5d:70:6b:2b:ed:d4:7b:a6:ea:c2:d4:b6:68:41:56:
                    fd:1d:87:47:0a:88:94:d1:b4:8a:4d:3e:5b:78:72:
                    57:dc:71:af:55:84:e4:9a:b5:ec:37:28:d2:cb:ea:
                    8b:bc:55:f5:32:bb:48:de:6b:86:83:d8:9c:1d:30:
                    17:90:0d:a0:8b:b1:a3:fc:d6:57:de:02:58:53:87:
                    20:eb:70:00:09:c7:c5:7c:70:94:b7:44:2b:bf:e6:
                    95:58:1b:d3:ce:c2:28:19:d6:b8:ae:c6:80:14:ed:
                    86:f5:32:6b:ef:be:60:cd:6e:3c:99:73:1d:c1:0d:
                    39:92:80:bb:a7:c3:c3:b8:e1:b4:74:20:a6:21:28:
                    0a:c7:12:1d:47:14:7d:1a:34:6e:d3:7c:6c:a7:e5:
                    ad:39:72:d8:24:4d:fa:c1:e0:bf:e8:d5:56:4e:d7:
                    8c:8b:ea:01:40:75:50:d8:92:05:77:85:02:d4:7b:
                    c7:a0:dc:20:91:26:42:d1:47:13:ca:34:f3:39:c8:
                    f1:c4:3f:64:68:44:f0:60:6e:f8:52:7b:62:d0:0d:
                    1d:a8:6c:83:73:b6:1b:a8:0a:92:b6:45:b5:cb:2c:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:DB:BE:2E:93:3E:D7:ED:D2:84:77:5D:4C:6B:E4:89:8B:52:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/6fb84449-b056-39ee-a011-1ce50bc84454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.59.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:00:4d:74:76:d0:2b:d1:cc:09:65:d0:d7:f2:51:d1:86:43:
         79:0b:0d:29:06:d4:ff:dd:12:96:5f:0c:7f:4e:3e:42:0a:98:
         40:68:39:31:8c:f8:26:fc:6c:3c:2c:bf:47:d9:8d:8a:2b:0c:
         b0:21:1d:70:63:a3:13:fc:10:4d:25:c0:f2:ba:79:12:b8:76:
         08:89:68:ae:9b:19:ae:70:a8:cd:8d:8b:aa:4a:b1:9f:2f:52:
         09:c2:af:43:02:d0:3a:89:fd:fb:52:a2:be:64:90:3a:15:03:
         76:21:01:99:7a:6b:1f:b1:b8:bc:07:13:60:ba:f8:48:18:fc:
         38:ae:86:01:86:fc:b3:3a:fc:b4:49:26:5f:69:bc:f8:83:d4:
         7e:75:0f:b2:93:cc:5e:02:16:e7:31:fd:90:d5:cd:ca:16:12:
         40:fe:b7:4d:bb:52:46:96:16:b2:71:99:be:08:e2:63:1b:26:
         26:95:fa:08:d1:1d:93:1f:1f:b1:1a:f1:2c:5a:43:e7:f8:c9:
         df:11:f4:97:56:38:7e:f6:c6:5a:7a:58:98:f2:fc:72:d6:af:
         12:8e:30:2e:5a:e6:da:59:76:04:d5:a7:86:82:b1:c2:9a:6e:
         12:5c:60:d6:dd:bb:dd:ec:9f:06:8c:34:5c:eb:ca:f5:12:fc:
         4a:56:b4:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlZUV1Qrr30SbZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk
NzczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2U3MGVlMWEtMjUzNS00MDAxLTgyNmEtMTFjY2ViZGIyYWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0i2MACdlaBE2YKhSR6fvDgsV02NgrhnL3gP
tc1dcGsr7dR7purC1LZoQVb9HYdHCoiU0bSKTT5beHJX3HGvVYTkmrXsNyjSy+qL
vFX1MrtI3muGg9icHTAXkA2gi7Gj/NZX3gJYU4cg63AACcfFfHCUt0Qrv+aVWBvT
zsIoGda4rsaAFO2G9TJr775gzW48mXMdwQ05koC7p8PDuOG0dCCmISgKxxIdRxR9
GjRu03xsp+WtOXLYJE36weC/6NVWTteMi+oBQHVQ2JIFd4UC1HvHoNwgkSZC0UcT
yjTzOcjxxD9kaETwYG74Unti0A0dqGyDc7YbqAqStkW1yyyxOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVI274ukz7X7dKEd11Ma+SJi1I0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm
OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvNmZiODQ0NDktYjA1Ni0z
OWVlLWEwMTEtMWNlNTBiYzg0NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw
Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm
ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm
NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDvkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEATXR20CvRzAll0NfyUdGGQ3kLDSkG1P/dEpZfDH9OPkIKmEBoOTGM
+Cb8bDwsv0fZjYorDLAhHXBjoxP8EE0lwPK6eRK4dgiJaK6bGa5wqM2Ni6pKsZ8v
UgnCr0MC0DqJ/ftSor5kkDoVA3YhAZl6ax+xuLwHE2C6+EgY/DiuhgGG/LM6/LRJ
Jl9pvPiD1H51D7KTzF4CFucx/ZDVzcoWEkD+t027UkaWFrJxmb4I4mMbJiaV+gjR
HZMfH7Ea8SxaQ+f4yd8R9JdWOH72xlp6WJjy/HLWrxKOMC5a5tpZdgTVp4aCscKa
bhJcYNbdu93snwaMNFzryvUS/EpWtLo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:00 2026 by rpki-client