Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa
File:                     a0305856-6db8-33a4-8ea3-9bb02757669f.roa (raw, json)
Hash identifier:          1vwQef6K0O9vGEbfKGCkpC21VlMinvonroEowcAlEAs=
Subject key identifier:   93:DA:DE:60:A1:48:B7:B3:5E:D5:91:F5:B2:98:C5:18:86:82:BA:68
Certificate issuer:       /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Certificate serial:       010D0C9F4328584F4972D4AD3E6DA2FB45377040
Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398149
IP address blocks:        72.59.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d4:ad:3e:6d:a2:fb:45:37:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=38cf05aa-d796-45bf-abb8-eac69dbcc47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:e0:cd:7c:2c:39:03:d1:47:e2:62:4c:dd:
                    67:1e:30:f4:1c:77:85:66:47:37:6d:03:ab:08:df:
                    60:af:69:18:74:a7:67:d8:fe:d8:46:c0:c3:39:39:
                    58:32:65:cc:2e:79:31:e5:af:da:b2:d1:c1:f2:49:
                    fd:6c:d1:c5:c2:99:7e:9b:19:5a:f2:62:19:c2:b7:
                    76:3b:80:1d:80:21:68:5b:5e:69:83:34:d1:41:cf:
                    47:0a:fd:a0:1e:85:ac:fa:c3:98:e6:6f:ef:b9:ef:
                    fa:7e:d9:f6:06:32:2c:1e:70:28:77:a8:d9:1e:2d:
                    5c:f2:5e:4f:d7:ca:ff:3b:28:f2:28:3e:6c:d4:d9:
                    ea:e3:3b:5e:46:e9:ce:b6:a9:5e:8b:69:ac:95:51:
                    a4:ac:94:e6:3f:f2:cd:0c:d2:08:60:aa:c8:5c:48:
                    31:a9:50:19:25:59:25:70:c7:fd:80:fb:99:cf:da:
                    d2:39:fd:98:72:52:38:77:d8:61:7c:6b:31:e7:2b:
                    56:95:c9:da:ee:e0:29:31:26:a5:1b:3d:37:8d:5d:
                    6f:3e:41:8f:ae:bc:91:d0:67:fa:97:6b:3d:78:3d:
                    64:ec:83:b0:5e:27:e9:06:f7:86:f0:08:05:08:49:
                    dd:a1:e3:6c:85:5d:50:4e:ec:fe:85:87:e7:0e:b4:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:DE:60:A1:48:B7:B3:5E:D5:91:F5:B2:98:C5:18:86:82:BA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.59.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:98:d0:77:43:61:73:5e:5b:b4:93:50:3e:75:26:45:d5:a0:
         56:f6:82:f4:f4:09:a2:d6:45:34:dd:87:ab:d1:c5:c9:ba:2b:
         e3:91:11:67:65:ca:b8:02:a2:08:56:59:25:00:f6:42:30:11:
         75:fc:36:6b:4d:3c:af:20:66:c0:c7:c4:a7:ba:2b:80:ab:bb:
         b5:88:6f:97:ed:fe:f7:df:70:fb:66:e1:1d:9b:3b:95:ba:88:
         46:9b:86:27:1b:8f:5b:6e:4b:57:3b:19:7a:17:e4:d9:3e:21:
         42:4a:64:97:98:12:0f:04:c7:ce:b5:44:9d:43:9e:ca:22:35:
         29:65:63:67:13:a9:c9:5b:cf:71:b7:80:9a:10:ac:09:61:1c:
         8f:ac:bc:36:ca:b9:f1:df:6d:02:a7:4b:7a:c8:e6:f2:ed:35:
         f5:fb:ff:bc:56:f9:bd:e2:05:a1:06:ac:94:d1:9d:98:02:2f:
         e9:e7:21:a2:83:53:60:38:98:24:69:fa:67:1b:e8:a1:f9:6b:
         bc:e2:6b:af:2f:33:f7:dc:f5:55:d7:14:4c:7c:d7:82:eb:1c:
         a5:10:70:1a:72:e8:df:d2:30:ea:81:5f:ab:3c:bf:4a:b6:7f:
         66:b1:ff:6d:c9:f0:d2:c0:7c:90:42:59:28:0c:85:45:ad:7f:
         ba:40:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:36:23 2026 by rpki-client