Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/dd7f54a2-e18b-3400-b749-3660e88a17bd.roa
File:                     dd7f54a2-e18b-3400-b749-3660e88a17bd.roa (raw, json)
Hash identifier:          LZm9pWTwELpxfXrW7afEJ+lvq6gnDA/g6C0BBwt4Ivk=
Subject key identifier:   E1:4D:A5:5E:01:CF:DE:13:CD:18:03:9D:5D:75:DB:C3:17:E9:5C:AC
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584E6B0A2A7DF951433B18F62200
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/dd7f54a2-e18b-3400-b749-3660e88a17bd.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     16524
IP address blocks:        72.11.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:2a:7d:f9:51:43:3b:18:f6:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=4679c073-a8c4-4e2b-9c68-040c0a1d1a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:42:68:31:08:fa:2a:fc:84:e3:1f:c4:39:
                    56:fe:dc:42:14:34:ad:b3:d1:dd:c1:7a:35:a5:b0:
                    7a:b4:2b:d0:c7:3d:73:df:57:3e:2d:41:4a:3d:06:
                    da:43:df:1f:c4:a1:7e:e7:c5:2a:43:c3:8e:52:4a:
                    30:04:9b:fc:68:ea:f3:07:5c:01:ba:14:37:e2:8a:
                    5d:5a:f5:24:ef:56:b6:53:ad:55:5c:ca:83:3f:7b:
                    f4:da:ba:ce:f9:55:b0:0e:9a:5d:29:31:83:ba:7c:
                    cd:d2:f0:2f:85:f2:ad:3a:c0:84:ba:7d:b3:f4:01:
                    28:63:68:fa:44:2f:f4:40:6a:24:c2:51:a3:e8:5c:
                    7b:3c:e6:69:d8:67:5a:f0:17:ca:9c:70:b0:6b:95:
                    68:dd:c4:0e:8b:65:31:64:87:58:96:19:77:b7:65:
                    42:a3:43:ec:f9:2a:85:08:17:13:2c:0f:5e:3d:9a:
                    95:51:f0:f1:42:38:8f:5a:ce:b8:71:9b:b1:c6:79:
                    26:f0:7d:23:00:e1:8a:8d:14:15:7c:08:18:57:a1:
                    e2:14:7b:43:f7:00:a7:03:e3:d9:d3:7d:2e:4b:d0:
                    69:6c:5a:fe:5c:58:70:4a:18:9d:2a:a5:a2:b8:dd:
                    dd:97:be:cc:e6:4b:09:ad:8b:66:a8:81:54:ce:5c:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4D:A5:5E:01:CF:DE:13:CD:18:03:9D:5D:75:DB:C3:17:E9:5C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/dd7f54a2-e18b-3400-b749-3660e88a17bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:82:1a:37:a5:95:41:f2:52:06:e1:63:e7:aa:8a:77:f6:
         a6:e3:56:54:d3:64:3d:ff:26:8f:26:44:35:a2:e9:a3:75:27:
         02:96:d0:55:76:ef:c4:25:fe:52:88:7a:c0:eb:2b:a3:f0:80:
         da:28:fc:6d:af:ba:e0:53:b7:bb:17:5f:3a:06:8a:f3:07:c8:
         7a:9a:a5:15:37:b6:94:e3:84:7f:7b:dd:39:d6:50:6b:e9:96:
         e4:ac:69:52:d7:c8:52:c6:98:a0:0c:97:4e:0b:3b:87:31:09:
         77:75:75:65:80:68:e5:a5:af:a4:01:e1:59:58:7f:d5:4d:60:
         f7:9f:40:3c:73:20:20:37:82:b5:e7:c9:36:1a:88:a4:db:bd:
         89:aa:0b:66:61:cc:78:1c:f5:87:40:a5:c3:43:de:08:28:9f:
         1b:b9:57:c1:b9:b9:75:c3:14:f0:59:cf:f9:21:2a:69:26:62:
         9f:3e:46:29:3e:0a:46:84:08:6d:3c:60:3b:79:a8:a8:cf:f0:
         1e:11:52:a3:c2:e0:9d:be:de:48:b0:2a:76:48:b8:5c:2a:fd:
         be:a4:2c:67:a2:e9:5b:2e:38:38:2f:a9:07:16:63:a3:dd:a7:
         b4:96:cd:a2:8e:8c:f7:6c:b4:b7:98:7f:7f:8a:a7:28:09:ce:
         e4:dc:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:44 2026 by rpki-client