Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa
File:                     bb072b22-497b-31d1-8292-b571a807b727.roa (raw, json)
Hash identifier:          PgqubyQaTR99PC1kAT1HUDSvh+4+CJ610UgqtdWzu0E=
Subject key identifier:   5E:21:F9:4D:F9:39:E9:A4:00:D8:BA:4E:6F:8D:44:EE:7C:62:AB:F1
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584DBA3AE32A0233EA49242434A0
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     138699
IP address blocks:        71.18.255.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e3:2a:02:33:ea:49:24:24:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=ae4cd926-eb22-43c7-9892-dc7edc7fd62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:3e:af:53:3c:e5:27:d3:9a:57:e9:45:5d:
                    f2:1b:22:e0:62:11:e9:2a:3d:b9:e4:d0:7d:57:1d:
                    20:96:87:62:f5:de:cc:89:6b:a3:16:27:0e:6b:a6:
                    3c:df:6a:b9:3d:09:ec:ce:b6:b3:b0:45:d1:a7:de:
                    bf:0a:68:40:81:a0:05:b2:1a:22:2e:6b:e1:ef:f5:
                    13:d9:76:18:4c:5e:3a:be:2c:c1:83:43:97:2b:bc:
                    d5:4f:50:b8:b8:67:9e:a2:af:f5:dc:f9:e3:95:c7:
                    6b:24:dd:cb:73:2c:79:c7:b3:f5:88:f2:4a:48:6f:
                    e6:6b:6b:62:d3:2b:17:5c:3c:9d:9d:5d:69:c7:8f:
                    04:6f:cd:f3:ce:e6:5f:a9:cd:de:c9:88:5b:f6:1b:
                    26:45:d9:5c:7b:74:56:b3:20:96:c8:84:f7:b3:a8:
                    97:48:e0:b5:69:fc:62:de:e8:7c:55:29:7d:f5:04:
                    db:fa:ae:37:5e:d7:64:8b:36:4d:32:88:97:d3:f7:
                    5c:5a:e4:0a:29:91:0a:26:be:0f:f9:80:be:0f:6a:
                    ee:26:b1:80:a4:be:f2:68:3d:a3:5b:b6:27:39:66:
                    bf:4d:2d:ea:c3:f4:f2:22:be:f0:27:68:ce:fb:53:
                    7a:93:65:c4:a7:83:00:23:91:1a:d5:8e:19:08:5e:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:F9:4D:F9:39:E9:A4:00:D8:BA:4E:6F:8D:44:EE:7C:62:AB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:76:7a:04:37:4b:f1:60:97:44:7d:a4:99:9b:9a:18:c8:
         dd:62:9a:d0:d3:c7:f1:00:20:4d:e0:ac:2c:93:29:f8:9c:fe:
         26:ff:15:64:58:cf:16:97:f6:0a:76:8c:74:62:b5:bd:cc:0f:
         e9:74:e9:cd:b0:36:c2:7d:0a:7f:b8:d7:5b:b2:d3:e5:14:13:
         24:cc:33:d8:f0:5c:d0:c7:be:21:25:72:3b:61:c3:b1:5c:52:
         0a:53:64:45:29:77:51:a1:0c:d5:9d:92:78:89:4c:a8:c0:8b:
         85:97:fc:bd:9f:af:ef:65:fa:44:57:98:5e:06:c1:ba:1b:c1:
         c9:40:06:49:1b:d5:fe:fc:af:78:55:9c:cd:bc:45:c5:fe:52:
         87:59:01:f2:f3:dc:e0:1d:b3:8a:3a:3b:b8:80:c9:36:4b:b0:
         ef:38:32:71:fb:b3:3a:10:9f:3c:b4:ce:60:09:90:59:df:7e:
         46:4f:40:93:5c:76:ae:5a:ec:27:88:78:74:0e:47:78:83:7d:
         60:1e:5b:70:a3:44:6d:19:8b:a5:e1:75:a0:f2:ee:c7:78:89:
         5c:96:39:6e:2b:9a:e6:9b:51:e2:c6:13:aa:a7:95:86:05:68:
         02:b8:91:ff:8e:90:85:be:bf:5f:d8:95:30:ed:8c:3f:ae:1a:
         19:5f:1b:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuMqAjPqSSQkNKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm
MzQ1MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
YWU0Y2Q5MjYtZWIyMi00M2M3LTk4OTItZGM3ZWRjN2ZkNjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2g+r1M85SfTmlfpRV3yGyLgYhHpKj255NB9
Vx0glodi9d7MiWujFicOa6Y832q5PQnszrazsEXRp96/CmhAgaAFshoiLmvh7/UT
2XYYTF46vizBg0OXK7zVT1C4uGeeoq/13PnjlcdrJN3Lcyx5x7P1iPJKSG/ma2ti
0ysXXDydnV1px48Eb83zzuZfqc3eyYhb9hsmRdlce3RWsyCWyIT3s6iXSOC1afxi
3uh8VSl99QTb+q43XtdkizZNMoiX0/dcWuQKKZEKJr4P+YC+D2ruJrGApL7yaD2j
W7YnOWa/TS3qw/TyIr7wJ2jO+1N6k2XEp4MAI5Ea1Y4ZCF5AdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4h+U35OemkANi6Tm+NRO58YqvxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz
MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYmIwNzJiMjItNDk3Yi0z
MWQxLTgyOTItYjU3MWE4MDdiNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx
ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl
ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw
NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0RdnoEN0vxYJdEfaSZm5oYyN1imtDTx/EAIE3grCyTKfic/ib/FWRY
zxaX9gp2jHRitb3MD+l06c2wNsJ9Cn+411uy0+UUEyTMM9jwXNDHviElcjthw7Fc
UgpTZEUpd1GhDNWdkniJTKjAi4WX/L2fr+9l+kRXmF4GwbobwclABkkb1f78r3hV
nM28RcX+UodZAfLz3OAds4o6O7iAyTZLsO84MnH7szoQnzy0zmAJkFnffkZPQJNc
dq5a7CeIeHQOR3iDfWAeW3CjRG0Zi6XhdaDy7sd4iVyWOW4rmuabUeLGE6qnlYYF
aAK4kf+OkIW+v1/YlTDtjD+uGhlfG3E=
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:52 2026 by rpki-client