Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
File:                     8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa (raw, json)
Hash identifier:          CsCbpB+Tg7xEmsKyfIyVyv1YTPFMs/DvLtVLBJFjN1E=
Subject key identifier:   94:10:AF:B4:EA:ED:77:45:FD:60:08:E2:C7:F0:FE:71:7C:5A:E5:F6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447D5579D30C426B629C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        72.31.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7d:55:79:d3:0c:42:6b:62:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=15138508-d184-4627-a94b-d2d5680383be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:15:e8:44:6a:e5:8e:5e:19:33:cb:56:08:
                    ce:6e:b2:34:77:8a:7a:6c:12:86:e2:eb:f5:c3:d7:
                    94:69:a5:05:de:30:ae:5e:fe:80:f3:0b:52:fa:3f:
                    e9:4e:5c:69:8d:50:1c:03:f7:97:20:c2:0d:15:02:
                    4e:2e:c4:ce:6e:f2:ac:2f:12:51:92:9d:b6:02:77:
                    27:48:c8:90:66:39:af:97:f9:3f:a5:10:4b:c3:63:
                    d5:52:28:3e:81:86:ad:65:b9:1a:d1:05:4c:ff:8d:
                    fd:85:b4:96:ac:92:d5:e1:c5:97:14:e7:5c:e4:f7:
                    e3:0b:ed:0f:c4:fd:16:39:ea:86:fe:64:d3:3f:35:
                    09:e3:9b:4f:c9:b1:36:f6:dc:28:16:26:b4:1e:90:
                    58:15:3b:c4:55:02:65:39:cd:49:3a:27:91:b3:3a:
                    7a:28:f3:e1:d8:c7:20:79:11:7c:7b:89:ec:e9:a5:
                    ed:ec:28:cf:4a:61:75:43:33:e2:4d:c9:fc:83:48:
                    ba:0e:e2:a6:68:23:97:d4:79:01:ae:3c:db:d1:da:
                    61:1e:69:ab:fc:87:fa:41:42:1d:50:be:f4:84:2a:
                    09:c3:43:ef:90:a8:70:9d:87:03:ca:77:d2:48:34:
                    ed:52:6a:a0:0f:77:42:85:7e:6b:33:c7:de:46:b0:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:10:AF:B4:EA:ED:77:45:FD:60:08:E2:C7:F0:FE:71:7C:5A:E5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:b1:d5:3f:95:76:a3:9a:64:77:04:25:f3:be:2f:f7:1f:
         f1:4b:4e:14:98:2e:ba:f9:8e:16:0f:e6:6e:62:4a:0b:f3:a9:
         88:12:1d:73:10:d3:35:28:85:63:fe:1e:5a:17:7c:27:8f:4c:
         71:0f:fa:0c:0d:f1:97:ac:74:4e:81:29:7e:24:e7:fd:5c:af:
         5f:ea:fc:64:d6:14:bb:36:bf:62:d6:b9:47:ce:69:63:29:ea:
         df:7e:4d:b6:3d:7b:34:f0:95:00:b1:34:78:79:07:c9:92:81:
         c9:e1:da:06:e3:2a:96:c9:78:61:77:cc:3d:02:6e:d9:b8:a6:
         78:57:e1:3c:3b:0d:dd:67:d2:85:ed:a0:8f:2e:f3:56:10:2c:
         2f:35:9c:13:d7:7a:c8:e9:83:ff:15:e8:24:8a:96:fa:6a:49:
         e7:78:88:02:c9:be:cc:ff:bb:b8:55:97:85:b6:a3:4d:da:17:
         4f:fa:b2:92:94:87:74:d6:0e:08:90:3d:bc:0f:ff:7a:3f:eb:
         0a:5c:d5:5c:92:80:08:cb:02:99:48:fa:14:69:48:38:16:ed:
         d0:b9:38:a4:01:2d:24:c1:78:bf:80:66:e0:a7:dc:b6:15:f7:
         71:f4:c4:bb:f4:9e:6e:e2:96:63:c0:4a:09:27:ed:e1:e6:7d:
         07:41:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:25 2026 by rpki-client