Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
File:                     0426ee1e-c925-39bb-b48e-4ca686717e3d.roa (raw, json)
Hash identifier:          1m+OgmjglaeNWyyoQkpdg5nXEG10GXGlxSp3+35+7Qs=
Subject key identifier:   09:7F:67:45:16:68:9E:A6:75:70:45:BB:75:EB:37:DE:A8:74:AF:67
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E9A7FBEAE17A7959860147600
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     62651
IP address blocks:        216.131.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:be:ae:17:a7:95:98:60:14:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=4d7d35dc-59ce-43d0-be5f-87e7b89e4a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:ac:ae:65:da:19:06:74:ef:a1:6f:e8:c5:
                    ce:70:92:fa:76:d3:a5:d4:b2:9b:ec:a2:cb:ce:d3:
                    d0:79:ec:c7:b9:8b:e5:61:e5:5a:42:12:8d:09:20:
                    4a:99:96:2e:dd:84:82:e1:36:1f:cc:95:05:5d:ce:
                    0f:db:06:57:9f:65:dc:c2:20:0b:61:4c:6f:52:bd:
                    b8:77:ff:5b:2e:3e:3f:05:b1:0b:63:e6:fd:5a:5a:
                    b6:96:df:d4:30:7d:96:04:47:2a:c0:c4:aa:53:0b:
                    02:5b:a3:ea:98:30:4f:29:59:3e:a5:46:00:89:f4:
                    63:16:01:32:d6:13:df:62:99:b0:ce:d8:61:f2:7f:
                    7f:54:7c:e4:77:79:d0:86:0f:04:63:0d:8c:f5:90:
                    48:ec:d2:ce:5c:9c:aa:02:eb:ed:29:24:c8:b9:0a:
                    01:23:d7:e7:7d:af:ed:59:d8:57:e7:f4:b4:d0:0a:
                    91:39:11:e1:2f:cd:31:a2:67:fa:62:81:89:de:93:
                    1e:d5:7f:55:97:4e:28:e4:05:05:57:9d:ee:24:95:
                    29:ec:b6:07:57:fb:08:00:ec:1d:8a:ee:b6:f0:b4:
                    52:b3:cf:5e:a1:06:89:40:ec:6a:cf:f4:ef:91:ff:
                    e1:c3:86:7f:1e:bf:ac:a4:64:1f:e3:ea:4f:2e:4e:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:67:45:16:68:9E:A6:75:70:45:BB:75:EB:37:DE:A8:74:AF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:11:cb:dc:de:86:44:5a:23:57:5c:e8:8f:05:ba:f4:26:
         0e:3b:0f:f8:83:14:f4:e3:4c:c8:d2:64:b0:78:ff:97:93:5f:
         11:c9:8d:15:1a:ff:5c:e9:ae:f4:3a:3c:be:c5:3e:8d:00:41:
         5c:1a:a1:ee:6a:6e:ef:ab:f0:c6:23:5f:68:55:75:5b:f9:81:
         be:8b:a1:7b:08:6a:53:9d:75:3f:c6:c5:be:51:2f:5b:b0:a3:
         8a:51:72:bd:59:48:6a:ab:46:8b:0a:74:e0:86:0b:c8:84:c0:
         bb:d8:a4:dd:eb:09:98:ba:52:59:25:17:e8:54:59:3a:6f:2f:
         39:0a:9f:dc:4d:6b:c4:1c:c1:65:ec:f4:ab:be:8d:16:83:b7:
         84:ff:05:52:c1:2f:8d:b4:77:1c:5d:35:e1:b5:e0:7e:5f:4b:
         ff:40:a5:35:70:6d:5d:7c:c3:c3:75:64:35:c3:06:46:4c:0d:
         e6:04:f7:17:cc:47:a5:fb:43:92:52:c0:54:85:3f:77:98:f0:
         34:92:87:ff:b1:b8:53:d0:75:5b:09:0f:aa:f5:05:9f:85:51:
         50:e9:ec:c9:29:d5:29:4e:ea:3a:c4:ae:71:bb:de:29:5f:3d:
         66:4d:17:75:a9:81:e0:37:da:c4:b2:3e:dd:8f:11:67:67:43:
         19:c8:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:45 2026 by rpki-client