Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/72539783-dbcc-33ad-95ec-ac79c4d80160.roa
File:                     72539783-dbcc-33ad-95ec-ac79c4d80160.roa (raw, json)
Hash identifier:          Ens7GFf3JsYYTdwKSE35CZfdGeEgGOXdCg87Ew30s6c=
Subject key identifier:   BF:66:43:66:99:3C:8B:BF:25:DF:E9:3F:E5:09:61:9E:56:5A:49:57
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DCAFB1E0F40514E4DC95BD380
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/72539783-dbcc-33ad-95ec-ac79c4d80160.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        70.32.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1e:0f:40:51:4e:4d:c9:5b:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=f31d65b6-d6fd-4755-a894-3ee92d2f1166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:c5:5b:7e:40:0c:b0:73:7b:26:93:2e:21:
                    4d:ae:a7:7d:e2:63:11:7f:1b:76:54:26:af:33:42:
                    ea:b4:d0:a7:fc:ad:5f:3e:80:1d:e3:39:43:3e:79:
                    85:53:6e:44:a4:99:05:17:32:c3:c0:3d:b9:07:10:
                    06:71:2e:df:48:03:15:b8:23:3c:4c:80:0b:0d:35:
                    c5:94:e7:cd:64:6d:b6:c8:91:c0:7b:1f:44:a3:b4:
                    79:b2:c7:01:20:5b:f2:a3:95:4c:29:2f:0c:23:10:
                    5b:38:9d:24:d9:cb:14:8e:80:a5:c2:17:ce:a5:fb:
                    ca:f1:17:bb:a9:e0:e8:bf:fc:cf:4d:d8:59:7f:cc:
                    32:be:4d:47:f8:cb:15:7f:ed:46:e2:41:b5:46:a5:
                    54:f5:9a:92:fd:a2:42:a1:f7:c6:2c:5f:4e:d3:3a:
                    b0:e8:c9:ab:d2:14:ab:27:8c:a8:74:89:56:c2:86:
                    7f:57:54:4b:57:f5:7e:c1:d0:fe:06:5c:e2:32:e1:
                    1e:97:99:07:23:6b:c3:08:59:9f:77:3d:c0:89:21:
                    7d:3d:67:8a:0a:f6:bc:03:32:cb:c2:a3:ae:fd:09:
                    00:11:6f:8d:16:c3:29:65:30:47:8e:0d:db:d4:eb:
                    b1:96:6c:97:0d:99:03:d4:83:7b:90:03:75:bb:44:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:66:43:66:99:3C:8B:BF:25:DF:E9:3F:E5:09:61:9E:56:5A:49:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/72539783-dbcc-33ad-95ec-ac79c4d80160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:e1:49:de:d0:0b:67:9e:5d:81:c0:a4:d2:31:02:e6:49:
         7c:f8:a1:f1:69:0c:b0:61:09:06:86:3a:59:96:32:c2:bf:44:
         6d:9f:93:c4:45:7d:e6:0b:2d:3a:b4:cc:c8:ac:b4:55:e2:e1:
         d5:f6:11:4d:ce:47:96:b0:c8:36:61:e8:a9:5c:f1:80:4b:3d:
         73:7c:74:ea:48:9d:68:3d:eb:b1:8a:fd:ba:a0:87:24:c0:21:
         c0:b3:ee:1b:f3:27:95:d0:bf:71:b8:fb:81:38:e0:73:88:d4:
         e3:e8:a8:02:d6:75:ff:e6:77:88:ff:72:8b:88:6a:4f:29:f9:
         2d:06:4e:89:d3:23:34:fa:85:87:a0:32:28:73:8a:4a:89:f9:
         41:20:69:d7:b7:be:12:dd:60:0a:da:f7:ec:8b:9f:1e:87:0d:
         24:25:b3:26:f3:96:20:3f:16:f8:47:7b:72:53:dc:44:c2:af:
         f5:1c:d8:89:e3:75:f0:a5:9a:56:22:f6:3d:bf:98:8c:60:66:
         34:85:e2:97:35:56:30:20:a5:3c:8b:24:dc:4b:76:be:6d:39:
         06:cc:f1:b7:92:8b:7e:98:11:14:8d:85:e6:89:24:c8:eb:74:
         f9:24:e5:ad:18:18:21:29:8a:e6:40:60:48:f2:82:92:3f:d5:
         b4:8b:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:33 2026 by rpki-client