Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/1d1814bb-947e-3269-b131-3c3837548e30.roa
File:                     1d1814bb-947e-3269-b131-3c3837548e30.roa (raw, json)
Hash identifier:          Ik5O3F8UlH1oFgjJa1RQNoNg9pgnkmXmo3XMMowr4LM=
Subject key identifier:   C2:AD:AD:97:10:37:AD:9E:62:B7:A0:CD:F2:04:09:C4:3F:F5:F4:54
Certificate issuer:       /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Certificate serial:       010D0C9F4328584F4988C26F2482A51ED8988EF0
Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/1d1814bb-947e-3269-b131-3c3837548e30.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19734
IP address blocks:        72.59.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:c2:6f:24:82:a5:1e:d8:98:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab4586a8-15a8-4048-a05a-6db0813ad768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:b7:af:b9:5d:8e:02:ee:26:23:5a:a5:a6:
                    09:19:7b:7f:59:a2:cb:b4:72:3c:5d:b4:88:7e:7c:
                    47:0d:55:b5:65:48:e0:2c:e6:9e:a4:8e:ad:af:9f:
                    67:39:0f:6a:a5:35:0e:0e:1c:12:ee:c0:41:95:5c:
                    66:af:d0:69:6d:1c:79:11:2e:b4:4e:60:63:f0:44:
                    cb:61:72:ab:b0:a1:cf:af:b9:27:35:74:ef:23:7e:
                    53:20:22:a7:81:8b:9a:bd:b5:51:b9:dc:3a:7a:50:
                    42:46:38:b3:30:4c:70:26:83:57:35:90:a3:d6:72:
                    e2:9d:34:56:30:76:ff:0a:ba:67:aa:bf:f0:16:2e:
                    96:a9:00:5e:06:c4:ce:0c:12:3c:af:85:6b:8a:49:
                    5a:3a:44:12:50:33:a4:99:fe:0d:a4:ac:d0:98:41:
                    d8:1f:d8:55:ee:3e:ec:c8:10:9e:a3:e8:ce:81:57:
                    24:30:ca:b0:fa:da:e8:3f:2c:c6:ad:b4:3b:3e:e7:
                    9a:93:16:1c:71:2e:bb:34:2b:2f:53:1e:d0:b9:18:
                    87:9d:6f:15:ba:64:f0:d1:21:60:6c:2a:5b:87:d7:
                    c2:e9:cd:4d:37:69:27:25:bb:e8:ec:9f:e3:42:da:
                    96:11:40:fb:d9:26:9c:c9:a2:ad:95:15:98:98:85:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:AD:97:10:37:AD:9E:62:B7:A0:CD:F2:04:09:C4:3F:F5:F4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/1d1814bb-947e-3269-b131-3c3837548e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.59.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:98:2e:ec:71:70:06:4e:a1:87:6f:de:80:81:66:6f:89:2d:
         9c:ac:b4:2a:d1:49:00:ad:58:55:2a:30:75:c5:50:a9:91:00:
         4d:5b:8c:b9:eb:3d:db:59:fa:03:9a:61:68:3e:13:f7:90:9d:
         49:53:ff:e7:79:df:b7:83:9a:a2:c5:7e:e7:c5:67:50:6e:48:
         b4:19:d6:57:0c:ff:30:a6:4a:fd:33:24:5d:b8:b1:24:83:77:
         ea:9e:54:c2:e4:43:1a:c2:99:75:6b:c6:09:40:23:a9:f2:0c:
         8b:7f:29:3e:49:97:30:e3:cb:4a:b6:54:88:27:3e:a5:f8:54:
         eb:67:b5:e9:aa:36:55:74:02:ac:48:a6:16:e7:8b:6f:70:f4:
         00:8b:28:e9:30:b1:a4:9c:38:e9:c4:59:7c:92:88:bb:cd:4f:
         9f:dd:8c:ac:48:01:39:9b:41:4c:2f:39:6d:7e:df:01:ee:ef:
         33:2a:cd:f2:47:87:12:1a:59:1e:aa:c9:6b:1a:97:9b:81:df:
         b2:f9:9c:87:d8:30:e9:b9:fd:26:29:d7:90:4b:fc:d9:1a:f3:
         77:55:0c:c9:42:c5:e3:a4:cb:44:79:a4:84:96:a5:66:3f:6f:
         9d:d7:21:4b:7b:a3:80:b9:c6:87:34:5a:14:85:e8:f5:6a:58:
         1c:aa:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:39:37 2026 by rpki-client