Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
File:                     17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa (raw, json)
Hash identifier:          TqPhISplbM18kFy1NdsdzptBnCMcQPJoPEse4PnaaBM=
Subject key identifier:   96:DF:DE:49:68:9B:26:D9:CF:07:36:8B:63:BC:F0:D4:E0:77:C4:B4
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584EFCACCEF12B0BFAFD0F48DDA0
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     36666
IP address blocks:        72.10.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ce:f1:2b:0b:fa:fd:0f:48:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=ad36aa2f-5b14-43e2-bf87-becdc5321850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:aa:ba:3c:76:c4:44:6d:49:c6:c8:37:d2:
                    64:9e:75:d1:48:3d:ce:e2:5e:72:2f:7a:4c:df:44:
                    33:b0:0e:f0:0f:f7:94:e8:9e:9f:00:99:78:ce:cb:
                    a1:a0:78:d5:5c:60:ac:20:89:d9:89:60:c7:75:08:
                    f4:88:86:d9:e2:24:8a:0d:bc:c2:ec:17:ec:44:be:
                    1b:71:cd:02:72:9f:f0:94:cb:db:f6:3c:cf:17:09:
                    0f:ae:9c:3b:ed:a0:e3:3a:3f:92:e8:c1:27:ba:64:
                    05:96:45:85:98:4a:f4:d5:74:32:92:25:43:44:83:
                    5b:d4:e8:17:8a:eb:e9:ba:33:7c:6e:34:97:eb:79:
                    1d:02:91:93:04:d7:7d:23:16:56:e1:55:33:e7:fd:
                    0a:22:5c:1a:b5:fb:51:38:c7:36:74:6d:db:91:60:
                    77:ae:21:6d:c5:40:c5:9b:de:38:b1:58:a0:81:41:
                    1c:1c:f9:be:8a:4a:4e:30:1c:f4:cd:75:0d:31:6a:
                    22:36:9f:1a:76:a0:09:4c:95:84:83:d3:5d:a6:ea:
                    01:bf:bd:be:88:2d:df:68:24:72:07:18:f6:0d:38:
                    71:08:b7:95:1a:5e:68:1b:e6:0e:46:d7:da:c9:8f:
                    42:2e:9e:c2:fb:94:dc:e7:99:2b:ce:57:ef:f7:5d:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DF:DE:49:68:9B:26:D9:CF:07:36:8B:63:BC:F0:D4:E0:77:C4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:c1:0e:0e:ae:59:59:09:2b:f3:cd:e0:b1:83:2e:c3:4a:
         99:3b:7c:6c:ab:bc:81:31:9d:36:89:97:f9:0c:b6:24:6e:39:
         39:63:b5:5d:a1:b5:c3:01:7a:da:cb:6f:ae:87:b6:53:4a:80:
         f0:13:76:41:2d:a2:ec:f0:2d:38:36:4f:eb:f9:2e:aa:31:53:
         ee:1d:01:3b:bd:43:32:72:68:b2:23:40:98:9e:09:87:45:b1:
         a2:8e:d5:25:9e:0f:08:55:eb:8e:54:76:36:29:dc:c0:52:2d:
         3b:3a:b8:3c:1c:43:f6:db:ce:64:3a:42:59:29:3e:c3:0c:89:
         7e:b1:47:2b:4d:c7:94:72:99:06:be:09:c2:4a:3c:b2:f4:26:
         b2:00:4f:17:8a:2c:2e:7d:36:70:5d:eb:fa:ef:0c:7b:e7:b0:
         2e:1e:da:74:64:9c:d6:9c:27:11:8e:b8:66:bc:6c:a9:c2:87:
         00:e0:3a:be:20:28:ee:4b:53:e4:5d:99:b7:ad:27:1c:cd:ef:
         e6:54:b9:e5:72:e7:e7:74:34:56:da:c2:bd:83:57:13:b6:2c:
         07:d6:8b:74:58:e2:2b:aa:4a:6b:2f:f8:15:cd:0d:40:48:dc:
         ef:6d:0e:16:e2:4b:b1:f1:b5:f4:cb:dc:b6:54:fd:62:a3:bb:
         79:c6:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:23:37 2026 by rpki-client