Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa
File:                     72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa (raw, json)
Hash identifier:          omrM+7o1ztyjivWJLXxQ720srbO4xe5T8PBZmxnGX2Q=
Subject key identifier:   F1:7A:A4:BD:1A:CD:7E:87:B0:A2:A9:F4:3C:C6:2A:D4:EE:75:77:0D
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584DBD05815D030365C6BC5CF1D0
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     11808
IP address blocks:        129.101.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:81:5d:03:03:65:c6:bc:5c:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=cfd7000c-d1a4-4c32-8d80-716385e009bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:01:d8:24:64:95:40:1c:fe:79:10:6c:07:b2:
                    97:9d:66:b5:6f:93:cc:73:f8:38:4e:93:00:2c:cf:
                    0e:fc:9e:60:ef:60:28:5c:29:7f:15:c4:29:1e:67:
                    5b:b7:42:b1:1c:74:b4:48:0e:81:43:93:85:9d:4b:
                    09:92:44:a0:f6:72:60:b6:60:40:0b:e3:1b:29:80:
                    5d:b5:a8:a9:be:2d:d2:51:85:2a:cb:db:7a:ff:9a:
                    86:b0:a4:9a:a3:c9:26:46:97:20:9d:f5:02:c4:35:
                    c8:f2:f6:05:39:fd:50:70:74:44:c1:d2:fb:6a:e0:
                    95:7f:f3:16:2c:b6:0b:55:5a:58:8e:59:85:bf:0c:
                    c1:6c:d8:2a:79:26:84:17:78:91:49:55:9f:e4:a2:
                    34:96:cd:e7:9d:cb:0e:9c:3e:fe:d2:57:50:1c:8b:
                    28:95:63:f8:63:a2:12:2a:b7:f1:3a:c3:cc:79:25:
                    02:98:49:f9:e1:94:46:b6:7b:a8:bc:e2:3e:d1:95:
                    65:01:fc:5f:d0:9b:a4:be:b1:24:b2:46:6f:66:9a:
                    96:46:2e:09:6f:6a:03:5d:15:22:ac:cf:22:19:fe:
                    c6:0c:21:32:dc:ef:1f:11:ab:ea:b8:bf:9e:45:61:
                    5f:68:1c:9b:3e:46:42:5a:de:81:a6:d3:f2:41:fd:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7A:A4:BD:1A:CD:7E:87:B0:A2:A9:F4:3C:C6:2A:D4:EE:75:77:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/72fd6fe7-195f-3a63-9f5e-afd9bb330772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:b6:28:70:56:0a:7c:35:7d:54:14:2c:30:6e:f7:76:05:
         84:7e:89:df:a9:3b:a9:df:d9:9d:b6:ed:16:14:ee:97:84:34:
         1f:cc:e0:8c:72:4e:db:bb:93:50:1f:78:19:20:06:4a:0e:05:
         2d:47:19:46:1c:fc:2f:a2:fc:0b:c5:c5:02:15:1c:a8:89:fc:
         23:60:9c:ec:9c:a5:4c:06:af:a8:04:8b:79:60:c4:4f:6d:8e:
         37:af:35:4f:f8:d8:bb:59:8f:06:31:60:02:b2:d0:71:c7:75:
         17:06:b7:51:d0:00:c8:41:30:e0:dc:44:a6:79:e9:5f:e8:57:
         e0:eb:20:6a:e5:71:db:15:4f:6e:3a:ff:24:b6:51:d0:31:91:
         77:27:bd:a7:5b:c9:fa:f2:46:31:ff:55:1b:2a:f8:65:40:f0:
         8b:52:16:3c:ae:c0:fe:22:df:ae:b0:90:12:56:fb:c1:9a:a0:
         ce:12:e5:e4:11:4f:b4:81:a9:21:a1:85:ca:10:76:80:e0:5d:
         e3:bb:ab:d7:a9:27:1d:f8:40:a1:03:76:c8:20:c3:fb:0c:94:
         9e:f0:27:05:1c:0e:4f:76:be:74:47:5b:be:0a:b1:37:04:5c:
         a7:79:bc:12:a3:a1:66:c2:8f:1c:6c:95:7a:29:f6:38:15:71:
         81:0d:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:52 2026 by rpki-client