Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
File:                     15de4dc8-a657-3baf-8d71-7563142b8734.roa (raw, json)
Hash identifier:          zfOmjWDWKPCTAlqE7mW9g1ypyKzRB91EUya/LoWKoLU=
Subject key identifier:   B6:41:E5:55:BC:7F:24:10:04:BB:8D:F6:B1:78:F1:28:0A:DD:1A:B5
Certificate issuer:       /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
Certificate serial:       010D0C9F4328584E210EF65788047CA6F06B2700
Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     11708
IP address blocks:        72.22.208.0/20 maxlen: 32
                          75.98.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f6:57:88:04:7c:a6:f0:6b:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=74b084c4-76ac-4f6d-be40-f3755c79a420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:ad:5f:7a:90:e0:30:40:61:7c:5d:09:97:
                    a2:66:42:24:fc:5c:08:24:e7:15:8c:e7:b7:52:23:
                    36:92:86:6f:10:1a:49:ec:f6:43:61:92:76:31:65:
                    f5:cf:7c:64:50:aa:19:c8:67:b3:cb:2b:b4:4b:e7:
                    ff:e1:0c:d4:8a:e1:d3:a8:c6:a2:3f:99:2e:7f:1f:
                    f5:3f:30:47:a6:50:a7:f2:78:aa:7d:5f:e4:24:22:
                    8a:5b:e2:dd:b8:36:09:ec:4f:d5:97:f8:c4:21:df:
                    e2:a4:4a:46:85:e8:3e:77:42:90:98:8a:03:d8:3c:
                    73:9d:64:45:ab:14:6e:27:1a:00:8f:07:ff:b7:6a:
                    35:90:00:c2:20:68:89:87:30:da:8e:0c:f9:2b:f1:
                    f4:a7:7c:7e:c9:9a:41:d4:39:79:e7:2f:1d:01:0b:
                    6f:52:58:5f:ea:68:50:7d:6c:51:ed:4b:93:da:cf:
                    08:09:08:49:3a:cc:0c:db:57:41:e0:e9:75:d4:6f:
                    86:92:06:08:75:88:51:2d:8d:9f:de:1a:c6:cb:2b:
                    8b:cc:c1:be:91:ef:3e:04:ce:79:d5:52:ab:60:79:
                    51:68:86:33:b6:72:2e:ef:17:b4:3e:81:fb:cd:cd:
                    67:44:40:e1:a1:53:ea:ac:f6:de:76:12:da:ff:4a:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:41:E5:55:BC:7F:24:10:04:BB:8D:F6:B1:78:F1:28:0A:DD:1A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl

            X509v3 Authority Key Identifier:
                keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.208.0/20
                  75.98.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:8b:2f:77:6e:3a:00:a1:ba:d7:22:a4:46:d0:63:6e:7b:
         c5:29:a9:6a:5e:98:61:64:3b:b1:27:40:80:38:df:80:4c:29:
         d1:05:4f:6e:73:af:0d:9b:dd:2c:ba:6c:9a:a0:e2:44:0d:0b:
         d5:c9:2f:01:81:a3:00:81:7f:6a:6e:5c:90:de:55:e9:c8:f5:
         b6:d3:38:d9:e2:b6:7e:89:b4:f1:4a:90:11:92:16:ce:e0:bb:
         82:13:b9:5a:2a:2f:ce:06:50:b7:d2:f9:8b:3b:28:90:ab:38:
         05:59:cc:94:9b:2d:a1:38:aa:31:dc:e4:38:34:31:56:c5:00:
         02:02:1d:1d:c7:b9:be:39:34:72:b6:56:3f:5f:9d:17:03:50:
         42:b5:18:08:78:48:bc:8f:38:f6:4c:2a:43:14:4e:9b:34:50:
         bd:22:d0:73:9e:e2:f7:a5:76:0a:7a:1b:dd:ba:66:3d:6b:8b:
         2d:3a:65:1f:64:0f:7a:ac:09:7f:6b:eb:1c:e6:1f:3c:46:da:
         84:d6:02:d3:17:df:9b:94:2a:69:99:8a:f9:35:1d:69:59:4c:
         dc:35:2c:79:4d:1a:19:e7:4b:ca:dd:cf:f8:84:40:67:b9:3c:
         71:84:15:2c:cb:dc:db:d2:e0:e8:49:c9:8a:f8:54:51:ee:45:
         6b:e9:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:25 2026 by rpki-client