Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a8c9f994-02b6-3834-b860-c161f0dc51ab.roa
File:                     a8c9f994-02b6-3834-b860-c161f0dc51ab.roa (raw, json)
Hash identifier:          dojI4FZ58mwXtxuT0DoDu3Ew6DZwuIHBi3bmL7MBoH0=
Subject key identifier:   F4:E1:BD:CB:67:5F:F6:E3:C2:6D:DB:24:42:D2:46:2E:A2:13:58:5F
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584E94EA55275BD56FF751084C40
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a8c9f994-02b6-3834-b860-c161f0dc51ab.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     11983
IP address blocks:        71.18.43.0/24 maxlen: 24
                          2605:340:f097::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:55:27:5b:d5:6f:f7:51:08:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=60d40ca0-e993-48d5-8868-563eac26c3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:4b:30:41:5e:76:ee:80:b1:a0:63:47:57:
                    88:c9:82:03:5b:90:70:ee:da:71:f9:fe:96:36:af:
                    e7:df:c6:30:2a:4d:f3:0e:f9:60:53:80:e9:cc:6a:
                    16:5e:0b:16:ef:38:d0:ed:ff:5d:44:34:34:b6:32:
                    18:df:69:f1:58:d9:f5:db:27:2f:bf:64:b3:6b:b2:
                    15:74:c6:ea:1a:71:e1:94:94:9a:25:88:c4:f1:d6:
                    0f:c5:3c:30:2c:0f:8a:ca:4d:91:a3:12:bc:4b:3b:
                    b0:68:d3:0b:c9:28:30:92:54:ed:0c:bb:67:23:dd:
                    32:cc:55:15:08:96:d4:76:ad:4b:0f:65:43:a8:c3:
                    31:24:86:51:65:fc:b5:21:3a:be:be:80:9d:41:47:
                    6b:c8:a1:a5:b1:76:f3:aa:7e:20:56:3a:38:57:5b:
                    6b:7a:a0:d3:5e:0b:5f:de:22:b4:f9:9e:b2:0b:db:
                    5c:33:ec:07:28:a9:a0:7d:00:8e:60:7b:80:e0:26:
                    e1:8e:f3:fa:e2:27:b6:01:7d:b1:e7:66:96:f2:68:
                    4f:5a:91:e1:53:d5:51:aa:41:a5:d3:99:b9:61:7b:
                    77:17:d0:a6:dd:fa:ca:a9:0c:84:1c:a9:2d:2f:e0:
                    0f:60:27:c2:70:89:5e:d4:14:a3:5d:7e:29:de:cf:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:BD:CB:67:5F:F6:E3:C2:6D:DB:24:42:D2:46:2E:A2:13:58:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a8c9f994-02b6-3834-b860-c161f0dc51ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.43.0/24
                IPv6:
                  2605:340:f097::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:51:bd:82:1f:97:7a:6e:59:cb:9d:56:bb:ff:29:55:dd:
         ad:17:7c:62:1c:39:a9:22:85:5f:92:15:67:8a:16:b5:29:3f:
         b8:b1:bc:99:56:65:b3:88:f5:05:26:90:1d:5e:b6:26:c2:c7:
         f6:de:d7:4b:1a:29:37:b0:14:68:5f:6b:ff:40:2f:f8:f5:ba:
         b1:d8:bc:32:8d:e6:c5:4c:93:ec:ae:7d:02:3a:9c:a4:37:cd:
         1b:d2:83:07:7d:e7:17:62:d4:c6:ac:05:7b:ca:9f:1a:2e:6d:
         ed:a8:c8:23:fb:ea:33:ea:c9:18:23:4a:c8:e8:57:b5:a6:11:
         e2:58:69:ed:fe:4f:68:1f:6b:9a:96:9b:03:99:c1:39:74:8f:
         06:c9:3f:b1:f8:0a:ac:84:c9:57:1d:4d:9b:aa:02:73:42:7a:
         59:19:f3:68:fa:37:da:0e:80:2c:fa:f0:b9:cd:63:e6:d7:02:
         66:8d:f1:76:1c:59:8b:8d:d4:65:78:46:4e:f0:8a:f9:70:0d:
         f4:2c:56:88:6f:0f:10:dc:7f:25:93:24:35:73:4a:f2:0d:03:
         26:8e:84:71:f7:9c:29:db:a1:71:9b:dc:74:e9:d1:77:f6:30:
         37:d6:c2:89:4b:31:f1:57:74:5d:92:a1:42:f6:4c:42:bd:f2:
         72:e0:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:54 2026 by rpki-client