Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/341cc19d-39e8-3f31-874b-36f0544f2ca8.roa
File:                     341cc19d-39e8-3f31-874b-36f0544f2ca8.roa (raw, json)
Hash identifier:          W5VpOsZvqQ43GSGnK4UNJVoqwmCLzd98K1WKfzQPuBw=
Subject key identifier:   55:6F:5D:7F:67:B8:44:AB:B8:E1:0E:95:71:10:45:2E:A3:8B:AF:44
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F15CD07B7E01B5C76D03888C0
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/341cc19d-39e8-3f31-874b-36f0544f2ca8.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6327
IP address blocks:        50.72.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:07:b7:e0:1b:5c:76:d0:38:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=7c5ec979-916d-42b2-995f-76106844a346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:7c:12:20:8e:0c:ac:82:bf:69:82:b0:67:
                    c8:5e:1a:db:87:bd:25:5a:63:18:3c:f4:3f:98:94:
                    39:c5:e0:1a:01:c0:c6:b6:83:9d:be:f9:e0:83:10:
                    f8:35:00:a6:f4:43:17:ff:7a:51:a7:72:45:32:2f:
                    7f:04:dc:47:55:2e:94:da:6f:b8:df:88:7f:f2:0a:
                    88:03:da:81:c6:b6:2f:ce:fa:46:cd:7a:9d:cb:9f:
                    cb:77:64:02:93:95:a2:89:93:a2:48:e9:2e:a8:f0:
                    f3:7a:18:e8:5b:39:c7:0f:5b:7b:a0:f1:14:4f:13:
                    7f:c4:f6:6e:ff:07:49:b6:b2:d5:16:22:19:2f:f3:
                    b5:b4:88:9c:be:55:db:26:3d:44:b1:f8:0b:fe:a1:
                    2d:17:4e:6c:af:fb:e6:95:ef:0a:f5:d6:f2:03:21:
                    bf:01:6a:bf:91:e8:4d:6a:08:d2:d6:c3:69:7f:cf:
                    f9:a5:fe:57:a9:90:0b:a0:79:6c:d5:6b:74:6d:ab:
                    b9:9c:d7:7b:d5:e0:f8:a9:3e:d8:1a:10:93:02:62:
                    f1:41:7e:4e:08:eb:1f:36:2c:eb:19:4b:51:5e:e5:
                    a3:46:c1:b2:29:39:e3:22:b0:f5:93:7d:8b:9b:97:
                    6e:03:a9:2e:6f:cd:05:81:0a:d8:b4:ca:3f:70:78:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:5D:7F:67:B8:44:AB:B8:E1:0E:95:71:10:45:2E:A3:8B:AF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/341cc19d-39e8-3f31-874b-36f0544f2ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:b8:a9:23:3f:46:46:28:75:bb:fa:36:e8:58:7e:f2:54:
         f8:79:15:7f:48:1b:d9:e9:53:11:8c:59:69:45:72:ac:18:e8:
         4b:44:aa:57:f5:f3:10:52:46:8b:e3:ab:20:7e:d2:38:35:13:
         0d:b3:dc:a6:51:fa:fd:9d:1e:49:67:cb:b2:9a:47:fa:4f:f4:
         05:b6:59:a0:45:f4:62:d1:a5:6d:62:d6:d3:b1:c7:ba:5c:dd:
         e9:b9:11:db:62:56:e1:9f:87:dc:02:3a:bb:26:d3:c6:6a:ac:
         15:4c:65:5a:31:b2:d4:5b:c3:98:8e:41:0e:bf:4c:a8:7f:aa:
         48:82:72:d1:10:09:cf:4c:71:28:09:3f:9a:f2:aa:1c:78:16:
         bb:c8:a7:b7:d4:22:9e:b9:d5:02:52:8c:ed:e6:90:61:f7:ce:
         f9:30:f7:42:83:17:47:09:03:7e:fe:78:a4:5d:e8:17:af:dc:
         83:ad:77:91:1b:69:96:51:ec:d9:24:ab:06:ba:97:fa:48:6a:
         84:e7:7f:8e:b1:36:db:dd:c8:e2:f6:2d:65:b9:d5:70:fa:22:
         5f:b4:cb:83:dc:34:92:ad:ee:36:c9:28:2f:fa:e9:87:7e:03:
         a8:c0:64:42:a8:0a:a7:8a:64:b1:49:5e:67:3f:e5:56:af:1f:
         18:53:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:37:19 2026 by rpki-client