Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/28eb3182-6eff-3021-bdab-720e1ca5394c.roa
File:                     28eb3182-6eff-3021-bdab-720e1ca5394c.roa (raw, json)
Hash identifier:          92Rlg4C8zLVD175mapmHMyBOfIM9i2+oOf2Fu8jej5c=
Subject key identifier:   98:72:8F:AF:93:56:EE:84:BC:60:31:89:9B:D7:0D:22:6C:5D:F6:C4
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584DF4DB4E37E3C838CFF3EBEAA0
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/28eb3182-6eff-3021-bdab-720e1ca5394c.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     7725
IP address blocks:        72.162.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:4e:37:e3:c8:38:cf:f3:eb:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=1ab14a3c-244d-4f00-9059-9056b16a1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:83:16:c4:75:9b:f7:e9:83:b5:cb:6d:d2:
                    5a:f0:f9:bc:2a:c1:7a:3d:a2:80:d5:c7:8d:46:03:
                    4c:48:db:96:93:69:6b:f6:10:24:9f:30:7f:6f:79:
                    03:75:59:3c:e6:79:3b:87:bb:20:83:a6:aa:fb:27:
                    25:50:e6:e2:2a:9f:22:76:6d:f2:60:e8:cc:c5:ef:
                    6a:2c:08:fa:0f:f1:6f:98:1f:68:8a:d1:39:7b:1e:
                    fb:10:1d:69:1a:fe:9e:64:cb:9a:86:4c:af:60:ab:
                    00:ae:8f:9a:d1:af:be:de:fc:7a:63:06:ce:24:7f:
                    78:52:7b:f6:8e:3c:71:48:05:e7:82:5b:3f:83:73:
                    94:1f:e2:e2:aa:8c:bc:93:3a:9d:88:7d:d4:7f:be:
                    f0:67:81:f0:eb:27:97:ed:d1:f6:5a:88:fc:7f:9e:
                    98:03:e5:f0:84:0c:4b:a2:71:55:bd:54:6b:a8:86:
                    78:9c:01:31:2f:54:f9:a4:b7:a1:2d:42:18:9a:f9:
                    09:c3:f4:4e:b1:89:44:0f:a6:5a:5d:09:e0:99:6e:
                    5f:e3:a1:c6:83:22:b1:ea:66:f3:34:d9:fe:8f:50:
                    65:c1:8d:e0:d6:61:b0:c3:2a:18:7b:49:27:e7:d9:
                    87:d1:8e:9a:90:3f:a8:94:51:69:e2:ee:dc:21:f9:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:8F:AF:93:56:EE:84:BC:60:31:89:9B:D7:0D:22:6C:5D:F6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/28eb3182-6eff-3021-bdab-720e1ca5394c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:42:d0:0a:79:3f:5c:80:f4:f5:8e:c5:53:9f:38:6a:25:
         69:86:8a:a6:27:b3:e0:b6:21:de:d8:0a:fa:6b:6d:cd:dc:5d:
         e2:c3:aa:45:74:8e:cc:45:3e:71:56:7e:57:78:e5:b4:52:5f:
         6d:d4:0f:73:dc:b6:80:05:37:3f:3e:4e:d6:60:36:af:7a:08:
         30:ff:b3:35:74:15:4d:d6:44:60:cb:8e:ea:bc:18:77:0c:f9:
         ce:5b:7d:75:c4:e1:dd:41:90:8b:b1:7a:9e:78:c1:15:1d:83:
         d5:fd:06:86:3c:1e:54:84:3b:46:30:ff:00:3b:ce:7a:00:60:
         f6:ca:c7:9b:e7:cc:ca:f6:ba:28:ec:29:b5:f8:45:0d:b1:09:
         98:10:66:e7:15:e0:fe:46:3b:11:7b:b8:1b:00:fc:3f:32:c5:
         b9:8f:22:f9:9f:9d:8a:62:68:4c:af:a4:5a:e6:b3:cd:35:dc:
         4d:bd:aa:f7:51:7a:83:e9:54:26:12:e7:2d:61:6b:ba:a3:46:
         03:a4:1e:6a:07:8a:92:b5:0c:84:f6:b9:d9:a9:11:b4:c2:16:
         23:20:51:cd:61:e0:80:a2:6f:91:5b:27:13:fc:cc:d3:94:13:
         f6:ab:db:85:20:20:55:df:c0:a5:8d:d7:ca:47:59:28:5d:2f:
         c8:ee:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:28 2026 by rpki-client