Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa
File:                     452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa (raw, json)
Hash identifier:          pNwThpE4qYnC+50wL2r7pdRG/F398rK8lT2hZmXu6Q8=
Subject key identifier:   2B:26:12:81:99:BA:BC:0F:5A:70:71:8A:4C:25:BC:5B:7F:4A:4D:B3
Certificate issuer:       /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial:       010D0C9F4328584E0435EBC87B7BEE34EBF5E0C0
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     395494
IP address blocks:        72.19.28.0/24 maxlen: 24
                          72.19.29.0/24 maxlen: 24
                          72.19.30.0/24 maxlen: 24
                          72.19.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:eb:c8:7b:7b:ee:34:eb:f5:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=bd463054-d32b-4836-b2dc-a7f9ff07e751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:c7:9c:44:67:0d:d1:c3:9f:59:3f:36:48:
                    ea:c8:f9:08:5a:cd:9e:29:59:10:10:36:15:d2:53:
                    43:5e:28:d5:fb:31:8e:53:d0:ec:85:58:ff:10:f3:
                    c2:39:9e:5c:d2:64:75:ac:a0:e4:db:8d:a8:78:c5:
                    4a:2c:9e:af:35:c6:15:7e:6e:4c:c6:e5:a9:77:7b:
                    d0:1e:2a:be:71:48:98:89:14:39:38:b2:2f:30:57:
                    26:e1:4d:65:37:65:ac:64:3d:dc:a2:aa:6a:97:a9:
                    e1:60:92:8c:68:7d:cc:ac:61:ec:9c:e4:92:c0:d8:
                    61:d6:a5:a1:6f:36:7b:02:9b:31:e3:4e:51:6d:a1:
                    cd:48:90:bf:f1:b4:8b:5e:60:a4:2c:d3:a9:c6:57:
                    28:44:6e:0b:76:67:5e:94:d7:e3:6a:eb:d5:eb:b2:
                    23:79:9f:ed:03:7d:db:04:83:35:38:63:e6:ed:1a:
                    a5:0f:a2:b1:d0:c6:8d:8f:9a:d9:d7:ed:f9:78:cf:
                    32:d1:39:b7:d2:a2:8a:ff:dd:43:0e:bb:1f:6a:e1:
                    26:93:93:07:d6:50:9e:55:12:a9:87:d7:fc:3e:c0:
                    e5:b5:22:c0:fc:42:55:5e:eb:31:ec:22:e6:5f:66:
                    cf:a3:a0:86:75:4c:9f:df:3a:cc:9c:70:c7:b3:ee:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:12:81:99:BA:BC:0F:5A:70:71:8A:4C:25:BC:5B:7F:4A:4D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:55:b4:6d:3a:30:b9:74:c1:4e:2c:83:63:88:b4:1d:d3:2a:
         eb:84:86:62:d0:ec:98:f4:64:52:f4:48:7a:e2:c2:c9:d1:49:
         6a:a5:ea:52:dd:29:7f:29:41:b1:db:1b:7f:e1:c5:d1:d3:ba:
         23:cb:8d:9f:f1:b5:0c:65:03:89:85:11:79:c7:df:68:36:04:
         4e:55:d8:21:a6:2c:24:20:00:df:bf:da:c6:1c:a5:c5:e4:ae:
         19:db:5e:fc:18:d2:c5:19:0d:ce:a9:8c:65:cf:7e:09:1f:4b:
         8b:0a:98:f4:50:69:3b:a9:ee:54:2c:6d:58:31:bb:97:12:8b:
         f7:ee:2c:bf:d2:75:74:28:5b:26:27:a0:13:c4:bc:0a:cc:43:
         38:4d:78:d3:ef:48:ce:51:9c:63:b0:a0:39:b6:00:89:68:35:
         bf:54:a3:82:53:f4:27:6e:cc:db:61:d9:0a:00:a9:a3:12:5e:
         d4:1f:50:ba:63:27:45:63:98:4a:e6:1e:50:b2:91:9e:1e:36:
         dd:af:a2:16:2f:e9:9a:e3:0e:10:fa:34:70:b2:0f:36:cd:11:
         af:e6:1f:3d:23:f3:1a:b9:5e:15:b2:74:96:10:11:ee:fb:64:
         f1:e4:8c:e6:16:37:9d:1e:ff:af:0a:bf:7c:8c:5f:5d:f3:a2:
         17:8d:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:19 2026 by rpki-client