Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa
File:                     10fd6d49-c41d-308c-b462-641fc6080542.roa (raw, json)
Hash identifier:          2cqvxU8xWuHbZQBwkxcVXqqupqQ8a3cBG7NYHSlxHpU=
Subject key identifier:   22:63:3F:A0:28:0B:C3:63:2A:01:48:B4:EA:3B:09:33:C6:B2:3D:59
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584DC565C0D95B202EDFAD345340
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     16524
IP address blocks:        72.11.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c0:d9:5b:20:2e:df:ad:34:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=48ced25c-8ed5-4409-8702-9b84445972af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:85:08:01:12:5d:16:e5:58:f7:ae:fd:97:
                    80:9b:23:9f:c5:ac:bd:df:cf:5d:ba:bd:64:75:54:
                    d3:a6:70:6b:bd:ec:9a:93:4d:93:e3:63:6a:07:c7:
                    db:7c:ff:bf:68:42:44:a2:20:a3:38:7c:5f:ec:c5:
                    27:0b:a1:0f:fa:35:96:c3:32:6d:cf:ca:47:6e:46:
                    b1:d3:3c:f1:91:cb:7e:d1:f6:81:83:6d:98:0b:80:
                    5f:a6:ac:ee:81:16:9f:29:14:d8:4b:c6:c7:7b:c2:
                    cd:e6:1f:f1:5e:1f:55:86:0a:12:3f:6a:37:da:dd:
                    18:31:c0:a2:9d:a8:4e:a0:61:59:d0:b0:7d:6d:45:
                    b0:88:08:3d:ec:5d:4e:f6:95:70:84:0a:a9:4b:20:
                    24:08:85:dd:91:e5:6e:7a:3d:af:68:af:52:54:d2:
                    9a:ec:3a:11:f7:1d:ff:e1:fd:cd:e0:40:08:9f:d4:
                    e6:e7:ec:1b:f9:3f:2e:00:d2:f5:dd:ae:5c:a5:0b:
                    14:57:3a:80:a3:46:33:99:db:80:b8:53:12:cf:4d:
                    a9:c1:80:7d:f3:9b:8c:78:0f:22:a5:a3:d6:c9:a8:
                    cc:b2:f6:e7:ae:8d:0d:93:a1:76:10:47:f3:2b:0d:
                    1c:9d:08:02:54:29:0d:3e:33:31:fd:97:ef:d3:36:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:3F:A0:28:0B:C3:63:2A:01:48:B4:EA:3B:09:33:C6:B2:3D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:d8:87:d7:b9:bb:2e:63:f0:c9:01:1e:af:d9:33:0c:85:
         41:64:4f:cf:d3:cb:e8:2b:7b:a5:f9:c0:91:8f:34:e7:e8:5a:
         39:6e:48:1a:23:04:05:87:fb:2c:59:68:b8:74:dd:53:be:f1:
         7e:a2:34:c1:24:6d:2f:cf:d2:15:93:7c:a4:5c:4e:9a:86:47:
         55:da:8a:b9:2e:14:f1:55:51:56:8c:88:84:be:15:48:b8:8c:
         5c:db:77:08:e5:0c:19:e7:ae:36:99:bd:fa:0d:70:80:1e:33:
         f7:9a:5d:35:3c:7f:3e:38:35:c5:90:a1:89:8d:3a:6d:87:d5:
         36:8b:fa:c9:06:90:b2:90:a5:f7:92:2d:51:e5:4d:b8:a1:08:
         2a:26:b9:3e:54:ec:1a:7f:6a:16:81:3d:57:31:6e:da:e4:60:
         21:ec:44:df:2e:2b:36:ef:2a:fd:32:87:a8:83:ce:fa:08:d6:
         14:69:27:f3:ee:55:8b:9a:e6:c1:61:d1:89:e9:82:e4:b2:c0:
         f1:8e:5e:3d:cd:56:07:ee:80:0f:7d:8f:01:25:46:c2:e0:e4:
         56:c2:f8:82:ce:a0:c9:63:41:67:53:f8:e3:a6:ed:9b:b0:85:
         04:17:ac:52:ca:64:63:f2:a8:29:2f:b2:98:02:f1:90:9a:77:
         f6:df:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:09 2026 by rpki-client