Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa
File:                     72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa (raw, json)
Hash identifier:          /mfr+WpbQMoMRohu/fYEwjzUpdZogciCzf6544TC94E=
Subject key identifier:   5D:A7:9B:73:2B:08:47:B9:FE:9B:AC:D8:81:02:D3:2F:4E:FC:81:50
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584E8C8A61485FDE55E0FEC45800
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     29789
IP address blocks:        2001:18b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:61:48:5f:de:55:e0:fe:c4:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=ca38bc7e-b5e5-4ac6-aa21-4b20834f240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:5d:3a:52:aa:91:87:0e:8f:09:46:85:b9:
                    8d:4e:21:7d:d9:4f:f2:42:0a:35:45:09:b8:24:3f:
                    17:6d:32:8e:88:56:ea:49:6c:02:1d:d2:60:f0:a4:
                    16:e7:d4:26:3d:c7:43:e1:5c:04:db:c6:ce:87:4f:
                    cf:c2:0b:e3:09:af:6b:bf:ed:ae:53:6f:10:bf:fd:
                    50:58:01:c6:1f:77:3a:57:e1:7f:71:0f:a4:ef:e1:
                    4b:e1:76:29:a2:80:2e:1b:be:e2:ec:c4:d5:05:7a:
                    13:6d:92:d3:9b:88:b2:c1:b2:c0:3d:86:c2:b4:57:
                    7e:13:42:a0:78:18:6d:2d:49:36:84:8d:7b:b2:ac:
                    33:f9:77:71:4d:ef:4e:cb:2d:fa:05:eb:db:ad:de:
                    10:d7:c5:f7:c3:47:db:84:a7:4e:a0:b2:d4:d2:20:
                    3a:63:5d:da:a9:13:db:63:33:de:b9:01:0c:27:f1:
                    94:77:22:7b:4b:05:b9:04:3a:e6:bd:14:17:a1:f0:
                    dd:fe:d5:7a:a3:18:34:8f:73:61:f9:52:1b:51:9a:
                    b5:c3:5c:51:c4:07:16:45:90:8b:a5:c7:aa:54:1b:
                    9e:b1:2e:60:c2:8e:76:9e:70:26:4a:56:6b:07:c5:
                    a5:a4:70:46:0f:b1:db:7a:59:e7:d9:08:ad:03:18:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A7:9B:73:2B:08:47:B9:FE:9B:AC:D8:81:02:D3:2F:4E:FC:81:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:18b8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:e2:c3:53:6c:5a:7e:67:d5:e1:0d:89:68:dc:f2:d5:50:
         c0:bb:fc:3b:ed:97:22:0f:23:c8:9f:23:6f:6e:5b:0f:97:21:
         31:cb:26:44:ba:44:74:e2:97:19:17:4f:c8:5a:c9:c6:cf:42:
         4d:08:87:8d:5e:df:15:30:cb:c1:9b:f1:f8:37:6c:f4:7f:88:
         7f:92:2d:82:6d:2a:ae:84:8d:85:92:82:ce:26:13:dd:3d:b4:
         58:93:3b:bb:38:03:fa:98:ad:76:c9:60:04:88:59:24:0a:84:
         c3:df:8a:75:17:e8:7c:0b:9d:d8:bd:60:65:b3:4e:ca:4e:bb:
         33:36:10:2f:26:1a:72:dc:d6:82:0e:1c:76:45:4c:81:ff:df:
         91:e1:77:e5:d6:50:34:cd:2e:a8:6a:a1:12:9e:93:bb:c3:35:
         0c:55:90:29:6a:9b:2e:03:1d:13:68:6e:6b:49:07:f5:cb:9c:
         d6:01:6f:57:a3:87:7f:6d:eb:18:12:6d:f3:88:87:96:a7:21:
         96:d3:39:25:84:a5:77:20:5c:8a:96:ea:4d:66:a8:62:02:4b:
         4e:25:36:eb:d6:be:f6:8e:91:23:bb:e3:0b:e2:94:bd:52:84:
         d7:3f:11:9f:82:dc:fd:86:13:16:b3:37:5e:6e:4b:38:0a:3f:
         b6:78:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:59 2026 by rpki-client