Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa
File:                     9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa (raw, json)
Hash identifier:          wgTyKEwbmdcWzLREIbA+Gp2rvgP2Snx6/xlu/Relqvw=
Subject key identifier:   39:99:41:CE:1E:E1:B5:E1:D5:62:B2:9C:B8:1B:8D:BD:65:91:3F:43
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584D65152B1C37907402F81AA500
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14618
IP address blocks:        72.42.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2b:1c:37:90:74:02:f8:1a:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=993ae1d5-6dae-4a67-835b-fec37d157fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:ff:9f:31:0f:a5:98:d6:21:66:04:cc:6d:
                    01:19:3b:43:8d:5d:b9:95:58:7a:d6:a9:67:29:03:
                    3a:11:f7:12:b0:c5:33:39:82:27:c1:85:ae:02:cd:
                    77:26:fc:74:d4:fd:50:8f:3d:42:88:c0:92:96:17:
                    bd:80:1c:08:e1:0c:76:f7:23:ca:8c:18:b4:e4:c1:
                    e3:38:d4:ed:18:45:11:cf:84:4b:9e:80:a7:cd:1a:
                    f7:34:39:81:0b:4b:e8:f5:ce:bf:c2:c7:16:af:d8:
                    7b:0a:52:d7:c6:96:74:d6:10:58:55:74:80:75:f5:
                    ce:d6:ca:e0:f3:b7:ae:e8:8c:cb:a4:6a:7c:1d:66:
                    b8:8c:fb:d2:1a:6e:1e:c0:82:bb:b8:9d:6f:bf:c3:
                    22:76:89:06:e8:fe:de:ac:1c:d9:1f:43:be:e4:14:
                    77:32:01:c0:ac:21:fe:eb:0f:02:91:0f:28:e3:d8:
                    1e:95:87:03:af:95:86:8f:6b:0a:53:07:c9:0d:11:
                    00:2f:99:81:09:0f:d0:cf:20:e0:9b:ad:61:61:dd:
                    2c:3e:61:a4:10:d2:16:0d:7d:a8:46:24:8e:31:68:
                    76:fc:e4:0d:f8:77:95:56:b6:67:60:ce:bd:eb:df:
                    a1:4c:04:2d:6c:73:cf:5f:75:a8:1e:45:61:1d:dc:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:99:41:CE:1E:E1:B5:E1:D5:62:B2:9C:B8:1B:8D:BD:65:91:3F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/9432e293-6f8b-3df1-9f75-80a6dbd7b23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:32:9e:01:7a:b9:34:ee:10:d1:4d:2a:2e:6e:0e:6c:e0:4a:
         cd:4b:f4:c0:48:0e:1a:27:02:4b:65:38:a4:f8:f8:e5:63:03:
         15:ef:8e:8b:16:06:c6:38:f7:c3:05:dc:f7:df:74:a2:c4:a4:
         79:14:29:15:d2:da:fb:46:67:6b:b4:66:f0:8c:98:24:a1:58:
         04:ee:b4:a2:f1:89:4c:67:42:ca:14:c6:60:6f:90:ba:dc:4c:
         4d:76:e8:61:d8:e8:62:20:82:90:90:e3:4e:05:8d:43:12:4c:
         c6:43:68:8b:aa:d3:ee:3a:b3:47:bd:05:53:37:3a:d2:b5:f9:
         b4:35:2e:3d:aa:1c:5f:60:0e:bf:91:db:72:9e:46:c5:04:e3:
         7d:04:b7:48:4a:d8:59:a0:d3:8d:01:a0:0c:de:1e:55:16:ec:
         65:31:b4:12:de:af:be:fc:01:a5:e4:29:4c:b6:dc:bd:0f:17:
         7b:a3:46:89:41:f6:89:c4:0c:b7:17:35:00:bb:9a:f1:67:85:
         18:d3:e6:ce:df:ea:3a:0e:4c:2b:85:3f:28:6d:da:2b:1e:f6:
         63:e8:fc:d8:c9:39:2a:e2:e7:d2:60:b7:e1:d4:9b:56:ae:cb:
         8a:83:02:bc:3e:8c:63:1c:ac:98:b7:d9:42:87:3b:4e:b4:d7:
         ee:ca:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:12 2026 by rpki-client