Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa
File:                     39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa (raw, json)
Hash identifier:          FbxGmYGeV1GKnTRqQamPVaIZ4RvxWrbZAL6rVK0omE0=
Subject key identifier:   2A:87:3E:A0:CD:3E:25:EE:99:52:22:82:B8:B4:D7:3F:6B:88:33:1B
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584D65152B34A20AC32F9E919100
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     395425
IP address blocks:        72.42.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2b:34:a2:0a:c3:2f:9e:91:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=0c8eb8ad-7f3f-4634-bc46-3f7248e410c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:f7:ec:4a:e9:d1:bf:f9:47:17:35:1a:a2:
                    25:c0:b0:e2:bd:c7:da:30:f3:55:f6:e4:8f:80:43:
                    1b:19:15:61:4d:22:b2:4b:7e:ca:6a:bf:cb:79:f9:
                    0d:bf:c4:6b:e2:53:b0:0b:ea:ed:60:09:1b:b7:dc:
                    8b:b0:8a:ee:07:6f:69:e3:24:c9:98:71:40:e2:57:
                    04:57:3f:2d:ec:1c:67:04:d5:89:d5:a2:78:0e:58:
                    49:2a:e7:a9:f1:00:4b:02:24:c3:c9:d2:3a:f5:5b:
                    c8:e5:9b:c8:27:52:a8:9b:09:c6:09:ea:47:ac:cc:
                    3d:4d:c2:2b:e6:bc:19:87:ae:41:5c:61:e1:ad:34:
                    58:65:1a:63:75:fa:c2:1a:ab:e5:3a:0a:18:a5:ef:
                    ce:33:50:b0:7d:a4:8d:ed:8d:80:3a:be:e4:04:72:
                    39:15:01:b6:47:c3:56:48:d7:4a:9c:0f:e5:89:66:
                    88:8c:5c:7f:04:e0:a6:4d:7b:c8:85:3b:63:b9:d3:
                    78:f8:4b:cc:1e:35:cb:13:d2:3f:53:18:80:8b:d4:
                    ff:e0:a8:7f:3f:e5:4c:c8:95:a3:98:dc:1c:6f:4c:
                    32:fd:3e:1c:57:4b:08:6c:33:3a:aa:e4:cf:55:81:
                    c9:8f:3c:8b:ad:6a:cd:5f:2c:2a:27:21:29:64:f5:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:87:3E:A0:CD:3E:25:EE:99:52:22:82:B8:B4:D7:3F:6B:88:33:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:52:89:9c:ba:cc:89:b7:5d:7c:b1:65:5e:ab:74:ed:b4:0e:
         06:73:58:e8:f9:e7:23:c6:37:2a:19:1d:90:8f:11:5f:c2:9b:
         87:1d:98:2e:95:ca:a1:e3:98:83:b1:eb:88:5a:aa:0b:ce:8a:
         ea:52:a7:62:d6:49:97:a1:0a:c1:ed:7a:d5:c7:de:92:5b:a5:
         c6:9d:55:7b:34:b8:9d:10:ee:f2:c6:2b:f2:3d:75:e6:0e:ab:
         04:5f:0b:55:56:a7:cc:10:f3:e7:61:2e:4f:2c:de:46:d8:3e:
         5d:df:83:8c:0f:ed:12:1e:16:d2:25:1c:8f:6b:18:f0:af:f2:
         63:fb:01:f1:24:cc:6c:9f:8f:19:0d:dd:46:2b:5c:7f:9b:65:
         04:23:30:00:31:1a:17:ad:47:39:7d:d9:15:43:01:5a:d0:7c:
         98:5a:4f:07:ff:54:9a:cc:1e:df:e7:a1:95:48:e2:ee:cc:fc:
         9a:3e:af:ee:53:7d:66:73:e5:ba:5e:ad:f3:de:e2:51:e5:ed:
         56:6a:b3:79:42:a9:0a:16:3e:9b:fb:c9:29:e2:ed:73:0e:7d:
         04:d2:a3:e2:c1:84:4a:23:8e:26:54:51:f7:1b:6e:67:f6:b8:
         3e:15:8b:3f:f0:9e:ca:7c:59:01:6d:df:e2:02:dc:e3:5e:3d:
         e1:65:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:42 2026 by rpki-client