Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
File:                     6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json)
Hash identifier:          0G1VLnTFwD4umRsfaxr/4MsVsp0n9XowiH42H+qbJ2w=
Subject key identifier:   D5:9E:30:65:A2:FA:6D:E2:96:25:0D:C4:1F:90:DB:4D:3F:AB:E3:34
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584E5BAF53D1FCC1F009640E38C0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     22765
IP address blocks:        72.20.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:53:d1:fc:c1:f0:09:64:0e:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=3261daf0-d70c-478a-ad99-379112c103ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:10:e9:e2:0e:74:bd:70:cd:b2:3a:a8:e5:
                    84:26:92:91:e1:23:37:18:4b:6b:66:03:a1:73:d0:
                    09:82:59:66:41:59:0e:95:46:1f:ca:78:6f:56:17:
                    52:59:44:6b:16:56:80:e3:2e:0b:26:13:f0:d2:9c:
                    7e:c9:ee:f9:79:1c:ba:9f:6d:d7:ca:f9:aa:38:fe:
                    42:ba:8d:6d:64:ee:ea:b4:5c:a7:3d:75:18:aa:4f:
                    0c:d4:88:3b:ae:40:db:0a:a8:ac:c9:82:97:7e:c1:
                    0a:03:60:42:4e:13:a3:b4:db:a2:76:55:71:bc:ff:
                    68:71:fa:81:11:df:2a:d5:9a:05:a7:b6:2a:6f:10:
                    2c:70:1f:d2:33:58:67:7f:30:f8:60:3a:4d:09:14:
                    09:ce:98:78:4b:ff:c5:d4:0b:9c:d9:ab:a7:24:e2:
                    87:83:e8:35:0f:63:65:e0:51:f4:71:b3:93:54:59:
                    9f:d6:2c:94:36:1c:90:65:ce:25:55:8e:ad:d5:f7:
                    96:65:09:e7:41:f8:f2:4b:ec:49:71:6b:67:26:e7:
                    00:32:c4:e3:45:5c:3c:19:76:d2:90:9b:4e:d1:46:
                    a3:bc:00:2a:1a:42:5c:a0:07:cb:5a:1e:71:0d:c7:
                    be:4a:ea:7d:69:97:c4:25:02:3f:35:4a:68:26:cd:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:30:65:A2:FA:6D:E2:96:25:0D:C4:1F:90:DB:4D:3F:AB:E3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:25:c7:7c:ae:14:43:76:57:ad:b0:0e:b8:a1:94:37:b9:3a:
         90:e8:93:7d:f9:6b:e7:c0:f8:3d:4a:cf:fc:b9:01:f9:87:fc:
         c4:39:17:7f:2b:b1:fd:76:f1:55:24:26:20:de:5c:1b:9e:99:
         a2:09:48:62:21:63:78:a3:26:da:0b:f1:b8:bf:70:03:2f:a2:
         10:3b:e3:43:51:d8:41:c6:b5:b8:09:e6:09:8b:7e:9a:a5:41:
         d6:f6:bd:e9:c2:d1:4c:94:e2:92:5c:a4:4c:7b:18:7d:55:a8:
         b6:18:11:a7:32:eb:52:ce:fb:6b:0a:1b:a6:e0:72:b2:c6:be:
         f9:ed:cd:54:7d:0e:c0:37:f8:de:64:07:c5:42:cd:40:b6:95:
         84:ec:cc:58:91:b3:3c:c9:e0:f6:04:34:87:73:bb:08:a4:fa:
         3e:14:5d:64:f6:5d:48:78:65:fc:ee:25:0e:cd:7f:f6:fa:1f:
         f7:1e:10:44:4d:3e:1c:0e:3e:7d:58:d3:3d:cc:84:1a:12:a5:
         41:fe:39:53:f4:df:03:44:be:b4:05:dd:20:30:bf:af:bb:1d:
         7a:6d:c8:c9:8e:b1:1b:06:28:61:eb:b0:49:03:f8:36:86:f9:
         42:2d:e0:51:7f:f2:29:35:b4:21:9d:71:f8:3d:67:87:6f:dd:
         b1:ac:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:58 2026 by rpki-client