Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
File:                     14801496-2113-3ff3-8286-6329eebc5a7f.roa (raw, json)
Hash identifier:          9YYqY8yLWrry5GIWbA3A27MeJOnCNa8/5Di9lRHmjpo=
Subject key identifier:   AF:2E:EC:3C:CB:EC:6B:81:3E:B4:C2:F6:15:AC:2E:49:3B:51:A8:47
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584D65152B0F3D98867620ADCE80
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        72.42.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2b:0f:3d:98:86:76:20:ad:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=d0dcf022-651c-487a-9451-96c267742f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:b3:36:c6:bf:1a:cb:28:1c:ac:48:fb:8e:
                    36:1f:82:48:dc:3b:d3:a5:44:f0:36:8d:d3:f3:fd:
                    5a:6b:09:dd:25:aa:41:4d:8b:0c:3f:9c:53:d6:4c:
                    bb:99:2c:e9:ce:e8:46:11:de:92:d1:d8:0d:48:19:
                    bd:10:99:06:17:ae:9e:a0:79:1d:b3:f7:c8:74:cf:
                    58:b9:5b:3a:1a:d4:08:33:81:28:f5:95:f4:1a:53:
                    2b:88:8e:e5:4f:49:6a:89:1d:ec:67:2d:1d:0a:5b:
                    8f:d6:0e:ac:11:fa:0c:4b:c3:c5:7b:ec:40:50:3e:
                    1e:7a:a9:0a:7b:74:e0:ac:ab:3e:cd:4e:a7:41:be:
                    05:46:26:76:90:be:74:35:23:ca:0d:c7:71:cb:07:
                    65:23:27:ab:07:8f:da:50:a8:84:5c:ad:e2:39:67:
                    c3:11:0c:be:21:89:74:73:12:ae:ef:95:50:ae:cf:
                    65:13:51:24:d3:41:43:08:be:b0:df:30:34:84:8c:
                    54:68:e1:fe:d3:c7:8d:7d:28:81:b4:33:2e:d3:51:
                    e1:c5:7c:64:59:98:aa:3f:51:25:19:27:62:b1:fe:
                    50:ea:a1:45:e4:07:c3:34:51:18:77:b0:51:65:b6:
                    97:2e:25:ed:7a:db:e4:ea:2e:07:6d:29:c2:e0:03:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2E:EC:3C:CB:EC:6B:81:3E:B4:C2:F6:15:AC:2E:49:3B:51:A8:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:7b:70:f2:a2:d9:08:64:b0:71:e0:c8:67:22:07:0b:44:
         80:05:ab:00:11:56:b4:a6:4f:ad:41:d5:6d:0c:03:dd:5d:33:
         a2:84:16:a6:60:ba:4f:3b:d1:58:c9:a7:19:06:1f:9d:86:ec:
         99:c2:9c:08:97:c2:1a:d8:78:0b:56:b3:48:1d:38:ce:92:aa:
         87:7b:7b:eb:12:8b:e6:89:03:42:1e:b3:f0:86:93:e5:87:02:
         f5:b1:a2:bc:21:36:a7:83:9b:c1:1b:c8:85:6c:6f:a5:97:cc:
         36:a7:0b:52:b7:04:6a:17:7d:8c:c4:7f:a5:8c:d6:c3:c0:bb:
         b3:37:19:40:41:86:75:d9:a0:a8:2e:7b:72:3e:9d:84:f6:41:
         67:5e:32:dd:85:e3:05:9c:a2:ae:ee:d2:d1:cb:38:af:c4:40:
         92:37:f7:3e:21:18:81:02:3a:ca:a8:fc:1a:ff:8f:3e:cf:bf:
         20:af:a1:fd:c8:0f:84:2a:74:3e:96:62:d9:c2:c7:ff:ac:e7:
         e0:65:d4:e4:d8:ec:7f:0a:a8:55:48:bf:4d:d8:ce:15:8e:57:
         13:f6:a2:07:70:4a:ac:70:89:f5:d7:00:55:84:77:eb:bd:0a:
         f0:78:b5:d7:01:2b:32:a2:b9:f6:f3:e1:86:d9:bc:54:d5:8a:
         e1:6c:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:22 2026 by rpki-client