Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/37222472-cf79-3fd0-8500-a35f8d0f77e7.roa
File:                     37222472-cf79-3fd0-8500-a35f8d0f77e7.roa (raw, json)
Hash identifier:          odEv0Ll2DypGaPSszfqaYfN4nY7xhTLWS0M9ZpndPfs=
Subject key identifier:   94:B0:D7:6B:F3:92:E0:2D:C0:C7:CD:B9:AB:C7:40:B5:94:D5:66:06
Certificate issuer:       /CN=cda72809-682a-4951-9ff4-248386ec2d4b
Certificate serial:       010D0C9F4328584E82C4DC89EDAE6A82B83DF040
Authority key identifier: 3D:E4:60:D2:33:1F:F3:81:94:09:E7:2E:5C:59:69:94:DB:DA:8B:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/37222472-cf79-3fd0-8500-a35f8d0f77e7.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        216.115.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:dc:89:ed:ae:6a:82:b8:3d:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda72809-682a-4951-9ff4-248386ec2d4b
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=b1b76be1-efe6-42fa-91ed-838e2f023f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:ae:a9:07:db:53:6a:ae:cc:a7:fd:ad:02:
                    2d:5e:d5:30:42:5f:6e:99:54:76:53:c5:9d:c9:a8:
                    3a:a0:d9:dc:aa:74:5a:ea:bf:94:9c:49:62:5c:28:
                    47:72:b7:c7:89:03:ba:0b:d9:56:21:68:ee:10:58:
                    e8:b7:00:38:8f:1d:35:7d:9c:5b:ad:ae:54:5e:12:
                    ec:2e:fb:d6:53:30:5b:38:4d:bb:bb:0a:18:3e:83:
                    f4:b8:5c:64:73:9d:36:1a:4d:41:3d:52:68:4f:11:
                    d0:ac:5d:78:9b:c3:e9:88:1e:74:c6:df:3f:1c:60:
                    fa:7b:ae:8e:91:c1:8b:a1:49:92:53:24:02:8b:a6:
                    ff:d9:82:4e:82:d9:ba:d8:ea:10:1e:78:dd:d8:54:
                    25:50:a9:cf:1a:dd:8c:fc:2d:bd:65:38:c1:31:12:
                    d0:be:c8:a8:37:6c:5a:ef:2e:bf:e3:37:29:2f:74:
                    f9:59:e9:cf:d8:f0:d4:26:2b:89:e9:fb:fa:6b:1e:
                    15:d4:58:6c:80:b9:eb:2f:74:c0:6e:7b:5c:72:a2:
                    64:17:05:12:5d:1a:55:5c:4b:67:0c:5b:ed:c5:36:
                    a8:a0:7c:f2:4b:63:b9:b4:bb:ee:6b:e8:82:4c:8f:
                    73:42:27:46:62:a8:f7:a6:03:78:70:03:fd:7e:2a:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B0:D7:6B:F3:92:E0:2D:C0:C7:CD:B9:AB:C7:40:B5:94:D5:66:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/37222472-cf79-3fd0-8500-a35f8d0f77e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:E4:60:D2:33:1F:F3:81:94:09:E7:2E:5C:59:69:94:DB:DA:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:43:d8:63:c7:42:03:e4:36:71:da:16:3c:07:99:8e:0c:38:
         01:f3:95:c1:c0:e5:65:59:90:76:db:ab:ae:f2:dc:97:ae:f3:
         a4:c0:0a:5e:e6:5a:ce:24:53:d1:42:48:df:06:04:6f:24:8a:
         dc:fd:bc:aa:ff:30:c3:32:96:e8:4a:29:f8:17:07:3c:26:1f:
         9a:a9:08:4c:31:23:c1:a2:78:68:6a:19:9a:34:34:81:fe:83:
         96:cb:4f:60:59:84:a1:32:87:5b:d7:0f:06:a5:24:72:25:cb:
         0d:e5:38:d0:e7:c5:40:a9:b6:f6:ae:4e:1a:1c:23:40:17:8f:
         18:d0:b8:5b:d5:47:37:54:ef:b5:e5:c0:1e:f7:98:c1:1b:0f:
         df:b4:bf:b4:cb:ae:fe:16:9e:91:a3:ca:ef:74:f0:7c:27:56:
         13:5e:84:57:04:d6:69:71:74:3f:ed:b0:d1:fd:bd:f1:85:73:
         7d:69:91:7c:f4:2e:5f:43:10:2c:84:00:17:eb:cd:30:7b:76:
         4e:f4:b2:b3:1d:b9:54:64:dd:67:49:32:65:bc:65:5b:fe:96:
         b6:9e:88:5c:2f:e1:9f:56:a0:8b:86:55:35:a5:ff:e7:94:d2:
         61:23:eb:1b:db:69:35:da:76:68:f1:53:ff:b1:62:1d:f1:01:
         ff:13:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:03 2026 by rpki-client