Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
File:                     7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json)
Hash identifier:          UmYYQjB0wUa3UTBzPG8vPQjfNOPHNXLKNd7kde+D6pM=
Subject key identifier:   16:69:A8:ED:73:FD:BB:49:22:B7:A1:B1:C6:1B:CC:A4:85:22:BA:97
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584DFBD5EB44126EB071CE7CA500
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     11090
IP address blocks:        72.35.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:eb:44:12:6e:b0:71:ce:7c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=8152e41e-1c14-40bc-a363-0c389d55866b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:d7:d7:38:37:9b:15:e7:50:03:57:45:c2:
                    1b:e1:0d:56:ac:7d:2f:7d:27:15:ea:32:19:4e:a1:
                    30:98:6d:94:8b:6b:91:77:f5:8b:42:01:c7:56:30:
                    ee:0e:37:5e:da:b3:a1:43:f8:e4:c4:00:0f:2c:78:
                    bf:cb:e8:2c:78:2a:f2:36:b2:43:c1:f3:e1:e5:c1:
                    71:1a:78:7b:01:46:9c:9d:1b:7c:ec:d8:21:13:46:
                    69:d4:b9:d7:42:bd:4b:b7:ee:b5:8d:f7:c6:8d:32:
                    d1:9d:c4:2c:7d:a0:29:6e:87:1c:14:83:0d:28:91:
                    f8:61:e9:31:09:79:f5:e4:48:d1:a5:e6:d8:0c:31:
                    d4:36:5b:af:99:71:14:b1:8f:49:ff:b1:56:a0:de:
                    fa:32:2e:43:57:43:a1:99:ac:10:a0:ca:45:9d:d6:
                    69:09:e1:c8:f3:7e:5e:fc:3b:f2:ba:3c:c2:f2:f4:
                    3c:18:6e:5b:1d:33:4b:24:5f:10:75:b8:8f:97:e6:
                    04:7f:c3:b7:ee:ef:6e:d0:e1:d7:74:d2:b1:9f:6c:
                    9f:e2:50:93:b5:9f:49:60:8f:72:bf:20:ad:d0:81:
                    7b:5a:6e:0c:18:20:73:dd:c0:2e:0b:75:7a:9f:d6:
                    ca:e4:71:78:cf:6f:d3:93:6d:f1:0f:e0:0c:a8:58:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:69:A8:ED:73:FD:BB:49:22:B7:A1:B1:C6:1B:CC:A4:85:22:BA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:61:78:59:dc:88:e9:18:6b:de:4b:e1:e7:d4:00:12:c5:
         fd:b2:7b:40:1c:20:eb:3d:06:dd:50:37:19:a0:c7:46:29:9b:
         a1:04:29:26:f9:8c:a1:7b:5a:42:73:55:e7:d2:81:4b:9e:ca:
         3e:5d:5f:51:1d:7f:db:2c:32:c7:d1:1a:7e:94:5a:0f:db:82:
         3b:2e:93:bf:4f:74:1f:c8:72:2b:e3:76:d9:05:83:20:8f:67:
         9e:ee:54:bb:41:93:0f:85:b2:04:bb:5d:6a:f8:90:92:13:68:
         40:38:18:49:28:30:67:60:db:e2:ea:08:17:2a:9d:30:51:da:
         7a:13:a8:ad:78:ee:df:60:69:87:7c:92:a7:30:96:a2:f1:47:
         ac:08:94:3f:fa:0a:ce:22:7b:ea:98:c2:1e:75:0e:a8:d7:8f:
         a3:b9:fb:71:c3:38:41:60:ec:16:52:0c:24:97:48:ff:e1:f0:
         16:a5:b4:9a:5c:83:db:d5:f5:8f:c9:91:07:b7:b9:b3:95:32:
         74:3a:2a:03:03:39:0f:2a:c6:94:40:d4:10:70:02:a7:65:10:
         cf:c7:d9:28:0e:18:96:25:a9:ab:69:c1:0f:c4:49:2e:d9:ea:
         2c:60:02:5c:cd:65:9a:c4:3a:fc:4e:aa:79:c9:72:82:2f:49:
         71:dd:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:13 2026 by rpki-client