Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
File:                     7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json)
Hash identifier:          YZBvbUk2ELx90+/G7YQkIkAmFNkcNEl2lvtAZQMroVg=
Subject key identifier:   64:5D:99:62:48:53:0D:F9:4B:4B:55:5F:17:D5:65:70:ED:9C:C4:0F
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584EA798E3ACFA190ADE0CDC1200
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11090
IP address blocks:        72.35.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e3:ac:fa:19:0a:de:0c:dc:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=00ffc957-454f-4070-9474-ebb693f88c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:76:2a:e4:38:dd:18:4b:1c:ff:e0:0b:62:
                    00:e5:d8:26:d3:a8:58:e4:6c:03:80:e9:75:7f:1e:
                    d1:01:09:78:f9:61:cf:52:21:89:34:61:53:48:93:
                    6e:ee:44:fc:56:de:cb:51:3b:2f:cc:9d:c7:c7:d3:
                    5c:d1:a1:19:4a:0a:c5:55:a9:fb:86:47:b4:88:a2:
                    e3:78:33:fd:e8:53:47:af:ff:78:7a:4e:e2:ac:b2:
                    73:50:a3:35:49:1d:1b:2a:e0:c7:09:fa:61:ef:04:
                    65:8c:95:ad:09:d1:1b:55:40:4b:e8:f0:b4:36:6f:
                    d1:09:ab:fd:bf:60:84:7e:25:5d:f3:fe:d9:b5:24:
                    2b:e9:5c:3b:39:9d:7d:44:d0:2a:74:2f:6a:62:86:
                    46:b2:83:13:24:a1:2c:78:d2:a5:39:4d:06:8f:88:
                    ac:45:7c:cb:9e:ba:e1:61:8f:f5:85:b4:77:d7:9e:
                    15:7d:d1:b5:1c:66:5c:7d:52:66:9c:1e:1b:9d:14:
                    14:40:ef:4b:dd:4b:34:94:2c:c0:e0:ce:dd:14:39:
                    d5:aa:e4:30:0b:e0:c7:0a:06:7d:77:fe:9b:b5:13:
                    83:97:02:ab:39:f0:68:09:04:16:fd:9e:bb:6a:d3:
                    82:1c:1b:ab:8d:34:e2:66:3e:14:d6:58:3d:7a:f9:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5D:99:62:48:53:0D:F9:4B:4B:55:5F:17:D5:65:70:ED:9C:C4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:01:a7:3e:49:67:7d:4c:ee:3e:d3:33:c0:7c:e8:7f:70:8f:
         44:f6:7c:99:b0:28:23:8b:9b:d5:d1:f4:b0:25:22:82:9a:53:
         70:44:90:d3:b5:8a:ee:ee:fe:4a:5a:82:40:f2:f9:90:2a:17:
         03:92:63:2b:ce:67:6c:a3:fa:bd:0c:6b:71:21:34:4d:48:72:
         d2:6f:44:d6:15:a8:28:de:82:22:b1:49:0e:f2:b5:20:a9:94:
         e7:45:40:6c:51:f6:18:11:be:4d:df:cb:48:5f:a0:bf:98:28:
         5b:75:55:df:f5:1d:7d:b9:1d:d2:12:84:d5:36:53:4e:c2:14:
         18:f8:9d:53:47:e5:f2:88:df:45:a8:58:cd:80:08:ba:b2:b4:
         91:3c:b5:21:02:4f:a3:08:ab:cb:76:e2:21:a4:e6:53:b1:10:
         91:4c:46:85:61:12:69:41:c3:fc:c2:97:20:33:ad:af:2e:68:
         25:6a:75:8f:83:40:7c:13:79:c7:bb:b7:2b:6b:f9:8f:e7:3e:
         41:f3:b7:d3:19:a3:60:f4:16:10:ee:ac:de:23:d3:05:21:4d:
         48:e1:b6:bd:fd:78:e5:64:5f:af:00:c4:15:d9:ef:12:7d:93:
         d3:d7:79:c8:76:5a:79:6c:8c:0e:03:c8:22:d6:7c:07:e4:4d:
         fa:d0:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:17 2026 by rpki-client