Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa
File:                     3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa (raw, json)
Hash identifier:          uF0PAiG7/f3+RxNkCeEsOXaQ3HRqUBqnwNKJkbrtdGY=
Subject key identifier:   B7:B4:1F:68:E6:80:CA:B3:87:31:21:A1:89:1F:1B:AF:48:83:83:D3
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E23D995FAA56BB50C1C8AFD00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     399221
IP address blocks:        72.44.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:95:fa:a5:6b:b5:0c:1c:8a:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=7ac48901-2adb-43f9-af6e-2a40add5905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:af:0c:6f:00:23:58:d3:f3:9e:76:d2:b0:
                    b5:ec:aa:c0:6f:6d:45:e3:1e:07:6d:ec:48:56:38:
                    ff:10:b3:25:2b:1d:c6:ca:6b:73:7d:c0:04:2d:4e:
                    d1:5b:cd:a7:70:d9:03:31:43:c1:c5:5e:d0:2f:3a:
                    b5:41:4b:00:9c:71:13:18:a2:eb:6f:52:89:4f:14:
                    82:7c:7a:83:df:13:e7:11:39:b3:3a:27:78:bc:e7:
                    47:11:3b:64:55:12:ff:42:7f:19:f3:01:b0:09:95:
                    5c:43:fe:c7:a6:c2:2d:ff:5f:47:99:b5:4b:df:cd:
                    aa:53:d7:30:4f:0a:3e:a9:eb:8c:8e:12:75:89:c5:
                    16:99:19:f5:57:8d:92:26:46:ef:9c:a6:c0:fc:4f:
                    1f:f1:7a:7b:e4:39:fd:52:c3:db:06:51:e5:ee:8a:
                    2a:be:8c:0e:51:ea:fc:25:e4:79:44:87:32:e9:38:
                    5a:6d:84:44:76:1c:25:76:ee:76:9a:93:08:39:88:
                    5e:15:ec:a9:e8:c1:cb:77:cd:60:56:4a:6f:d2:0e:
                    26:e6:ab:2e:c5:3a:f4:54:f3:10:fe:a3:b5:93:ed:
                    e8:4a:3c:62:e6:c1:5f:7b:d5:85:9d:a3:14:75:3c:
                    5a:b4:7c:4d:de:70:dc:49:31:bf:9a:d6:9a:aa:c8:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B4:1F:68:E6:80:CA:B3:87:31:21:A1:89:1F:1B:AF:48:83:83:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:6a:4a:a0:ec:c5:65:25:dd:18:bd:10:73:36:f2:30:3f:
         1d:96:95:e9:15:1b:91:e2:a2:66:3c:cc:64:a5:d9:ec:e2:1e:
         63:f8:c0:16:31:94:66:fe:a4:60:04:d7:b3:ec:23:b6:ac:ca:
         a6:62:22:50:1f:66:cd:db:5c:12:28:fd:a1:06:f4:be:78:16:
         d2:a4:11:cb:b1:36:8f:c0:e8:63:bf:ca:6f:4c:08:33:31:20:
         20:1c:03:1a:74:9f:b3:b2:09:eb:7f:02:c6:35:4f:f9:10:6b:
         07:b0:d4:91:38:09:05:08:f9:42:f9:fb:80:7e:4d:9d:fc:fb:
         88:eb:df:dc:fa:98:aa:ad:22:aa:e4:32:f7:5e:a8:62:94:bf:
         95:2c:30:0f:c8:ca:6e:b5:50:c9:be:e1:07:b6:7a:64:69:53:
         c3:ff:a7:a0:a7:9e:e9:eb:b9:ee:e1:51:32:fd:7f:1d:a8:58:
         2b:d6:51:1f:d9:3c:3d:d8:10:5f:8f:bf:dd:e7:6e:d0:2f:6f:
         31:25:c6:e1:df:2f:66:97:2d:b2:da:ea:62:b7:16:0a:b4:73:
         98:85:e1:1a:54:f0:8b:16:5f:c6:15:2d:00:e7:c9:a1:f3:72:
         9a:c5:99:cb:f5:c9:5b:b2:eb:d4:37:08:01:7c:0d:5b:0b:1a:
         28:c7:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:11 2026 by rpki-client