Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
File:                     708d4650-7568-32d1-982e-33a33edcf9b1.roa (raw, json)
Hash identifier:          vvELLP6eVXOUygL+PSJQmQ8x6yV2TlsMXL/MteIuiRg=
Subject key identifier:   C1:00:E8:51:75:EF:C1:85:52:E8:D1:C0:50:25:65:CA:E5:BF:9C:76
Certificate issuer:       /CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
Certificate serial:       010D0C9F4328584E614561F01B205ECABCC45B00
Authority key identifier: D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     27552
IP address blocks:        69.72.24.0/22 maxlen: 22
                          198.203.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:61:f0:1b:20:5e:ca:bc:c4:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=825816c6-af79-477e-9fc5-676f145d903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6d:46:81:db:25:57:75:ef:82:dc:39:89:bc:
                    b2:dc:50:22:6f:12:3c:6a:00:2d:bf:10:cb:bd:a8:
                    bc:c6:64:95:b6:d5:c8:b7:79:c3:17:61:6c:1b:28:
                    41:a6:28:29:86:8f:79:3e:94:d5:4d:55:96:e6:4d:
                    ef:2d:ef:53:e2:df:21:3d:24:06:2d:0d:67:37:26:
                    29:50:ec:8c:14:64:70:45:85:f4:80:9f:ed:d9:fc:
                    04:b6:81:c0:75:a4:74:f4:fa:72:bb:7f:f7:44:a7:
                    f6:61:9c:b2:6e:1b:4e:6c:39:80:57:03:79:b8:3b:
                    ff:d3:31:7a:9a:47:4b:4e:1a:c6:dc:44:23:0f:01:
                    43:30:80:14:52:28:b8:49:20:36:d8:d8:78:a0:6d:
                    90:68:5e:19:ac:53:22:4b:12:de:6e:25:a3:51:f1:
                    4c:65:47:80:57:e4:7e:d2:20:9a:08:20:b2:b4:c7:
                    d1:70:78:74:18:65:c9:01:ca:cc:3a:b2:36:4a:90:
                    b3:3c:64:1c:09:1f:77:26:3a:1a:47:05:eb:ae:74:
                    7b:17:5b:f4:8c:48:e2:8f:46:70:02:cd:c6:c1:8f:
                    66:49:77:9c:30:de:57:b5:02:4d:c7:76:51:07:47:
                    fe:ae:dc:38:91:95:7a:82:85:b3:09:fc:41:f6:a0:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:00:E8:51:75:EF:C1:85:52:E8:D1:C0:50:25:65:CA:E5:BF:9C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.24.0/22
                  198.203.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:e0:7e:7f:34:d7:a4:9f:95:83:7a:b8:7d:0d:4f:4c:1c:
         8c:03:83:4a:b4:43:70:fc:df:8f:42:d9:49:4a:32:d5:2d:18:
         22:cb:67:0d:b6:27:71:6b:25:a8:ab:12:3e:00:7b:98:5f:fb:
         bd:79:6f:c2:70:ff:d0:59:d0:22:6c:05:92:ac:b6:28:0e:11:
         4b:3e:1e:a7:fb:62:bf:b9:a9:3f:3d:c2:48:bd:3f:cd:ff:4b:
         66:14:34:58:8d:4a:a7:da:b7:de:e5:88:e7:26:43:bc:6f:07:
         68:71:49:14:7c:31:81:a0:cf:f9:f1:32:ea:8c:1e:d1:67:ae:
         d0:7c:74:b5:43:c3:77:70:a2:e0:ac:77:e5:b3:dd:ce:2f:2f:
         b0:8b:dc:f3:b7:e5:e2:5e:1f:bb:cb:b0:30:64:ae:67:96:db:
         1c:71:96:ec:06:a4:f0:65:9c:33:ee:9e:22:6f:93:9c:53:fd:
         00:18:22:91:be:fb:b8:98:bb:18:41:8d:56:6f:3d:6e:bd:ec:
         4c:38:7d:86:bc:82:93:8f:45:f0:19:db:f9:13:0c:52:28:86:
         f6:1e:ad:9a:0a:4a:bd:16:f5:f7:5f:8e:32:52:e2:b7:b5:aa:
         e2:a8:e9:f0:22:42:c8:0e:a7:16:29:e2:fe:cb:83:8c:0b:0e:
         07:ed:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:32 2026 by rpki-client