Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02d586b5-a307-3695-b039-82f62d804556.roa
File:                     02d586b5-a307-3695-b039-82f62d804556.roa (raw, json)
Hash identifier:          TJdrqVtpruDMdrP4/4kjP+LkXFjN8ONUGCjy5DlDWSo=
Subject key identifier:   93:59:DA:08:74:AF:83:55:81:29:C1:CE:47:10:55:42:6B:EF:ED:B1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FADCCFD8F2D5E4AD54540
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02d586b5-a307-3695-b039-82f62d804556.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        72.14.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ad:cc:fd:8f:2d:5e:4a:d5:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=cc173b34-da5f-4e45-8b26-c258e3bbac3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:74:d4:ff:4f:f6:1e:e1:b8:1b:63:d7:c7:
                    ee:b7:0e:86:d8:04:d4:5a:06:ca:bc:9e:e2:b1:69:
                    51:84:ec:21:31:1c:54:d8:65:d5:a4:1c:21:48:6b:
                    b5:75:38:e4:df:db:31:87:8a:cb:32:1f:3d:d2:f4:
                    20:f7:66:9c:07:a5:97:f9:e5:5f:e6:94:dc:76:4f:
                    bd:db:1c:2a:b7:7d:df:d2:bb:3e:fd:1e:52:c7:94:
                    1f:f0:61:8e:bb:14:27:ae:40:e6:b2:7e:45:eb:b2:
                    1e:64:62:c2:b9:0e:50:69:46:63:70:a1:f9:c4:f2:
                    76:0f:e8:db:1b:f6:44:76:6b:31:8e:ad:91:80:6a:
                    6a:2e:58:e5:e9:af:5e:e6:3c:13:ef:e8:ed:c0:e2:
                    47:02:2d:ab:db:fc:26:a4:94:8c:74:de:dc:fb:3f:
                    eb:32:e8:29:13:2e:04:36:54:9c:70:b4:82:2a:d5:
                    b5:ff:3c:9f:73:29:9e:30:b1:40:69:c4:dd:00:d5:
                    05:14:18:59:36:24:a6:f5:df:85:fc:19:a6:64:b1:
                    01:cd:1f:92:5b:84:cd:ae:37:2a:59:01:3f:28:6d:
                    67:bc:28:5f:bf:ef:25:34:c0:06:0f:83:58:d2:bf:
                    b8:9e:63:57:ad:80:d9:9b:24:0a:f6:9a:cf:43:56:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:DA:08:74:AF:83:55:81:29:C1:CE:47:10:55:42:6B:EF:ED:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02d586b5-a307-3695-b039-82f62d804556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:44:4c:ba:96:62:9d:a3:fa:29:81:d9:df:8d:98:10:06:
         a1:44:02:d0:b3:d3:a5:01:1c:14:31:b0:7c:a5:3c:5f:6d:58:
         02:9c:73:74:d5:4e:6f:cb:ad:24:59:40:21:6f:f9:80:2f:b6:
         b5:6c:6f:52:d5:95:89:e6:df:f4:a1:f3:5a:f7:69:4f:aa:d4:
         85:80:fe:bc:37:99:77:de:09:4f:58:37:53:7a:1b:24:06:ad:
         21:a2:49:14:f8:69:8e:75:2f:51:5e:f8:95:6a:72:d5:da:38:
         f1:d1:95:0f:7e:30:ff:c5:20:8f:f1:2d:bb:f0:d9:e5:44:34:
         a3:6f:98:c6:9b:5a:d0:cd:00:fd:8a:ac:fb:c9:4b:6c:3e:52:
         f2:63:43:49:65:a8:35:0c:0a:73:0b:b2:0a:63:17:4a:a4:b4:
         32:8f:7c:9e:40:8e:16:3c:f1:ed:88:a2:60:41:e2:6c:ee:3c:
         27:76:72:ce:57:31:77:35:d3:da:26:89:e9:3f:62:f2:6e:62:
         6b:d6:d2:7a:18:b4:99:ac:31:e2:e5:1c:91:5a:20:34:e2:db:
         c5:3b:d4:32:f4:79:ce:c0:e3:81:84:66:69:09:0f:dd:89:71:
         9f:d6:61:8b:b9:58:49:40:95:83:ff:47:e7:24:63:bc:b7:ff:
         d8:67:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:21 2026 by rpki-client