Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa
File:                     3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa (raw, json)
Hash identifier:          mZetyoaAqBtYG0HY2MPBgKfq4KIfiXAAlxg+KxxdDcM=
Subject key identifier:   BF:83:D5:50:2D:B0:80:17:CB:4B:F9:5B:43:FC:57:C4:06:A2:3C:63
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F68281E0B03C8510189EA7700
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     399221
IP address blocks:        72.44.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1e:0b:03:c8:51:01:89:ea:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=8841f1e9-4525-4469-83ea-9cf49aa5997d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:83:57:d8:d9:22:d2:5f:e6:6c:50:10:53:
                    c7:e4:a6:e5:47:2c:02:2b:61:78:f8:2d:ee:79:80:
                    11:6e:80:bf:da:4a:03:40:f4:77:21:2d:16:95:88:
                    09:00:58:dd:ae:ca:7d:66:f1:40:6b:99:0c:a3:80:
                    5b:da:dd:66:fe:e5:90:05:42:1b:bf:b2:9e:b7:95:
                    3e:66:97:b7:f1:45:c8:66:e1:12:53:32:bf:65:6c:
                    f2:c1:cd:04:47:74:15:76:ad:31:d2:63:7c:4f:60:
                    69:fe:9a:db:23:90:03:82:b1:e2:6e:2d:e3:ec:bc:
                    16:d0:fd:92:63:28:fc:69:ea:94:ee:5f:ce:47:cb:
                    98:6d:61:84:6d:c1:71:83:b6:36:4c:88:0f:ee:34:
                    9a:06:76:42:0d:b8:81:67:86:ae:50:0c:17:0a:92:
                    5e:d5:ea:f4:ce:e6:99:8c:fa:64:e1:0d:96:26:ae:
                    44:03:47:8b:b4:5b:43:d4:43:68:a9:69:df:3f:35:
                    4a:d2:75:05:5a:84:f3:46:06:02:51:10:d4:c7:8d:
                    0c:2d:ca:12:6c:7f:6f:44:e8:c5:cf:65:97:45:67:
                    fb:a0:f1:de:08:14:d4:8d:cd:2f:58:3b:33:50:15:
                    64:23:f9:1d:2b:2c:60:e0:b9:7e:31:7d:bb:39:e1:
                    44:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:D5:50:2D:B0:80:17:CB:4B:F9:5B:43:FC:57:C4:06:A2:3C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3df002fc-f7c2-3e18-b450-a0339a1c44ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:67:e2:73:e0:32:36:7a:c1:81:ce:5c:7b:3f:10:31:08:76:
         b8:3b:f6:41:af:7d:2f:5a:10:6e:b7:2d:71:fa:af:38:74:57:
         b1:62:d3:01:bb:de:ce:00:f3:6f:98:6d:8f:bf:c1:32:d7:58:
         1a:95:96:15:43:84:88:4c:c3:bc:44:26:0d:e9:74:3a:48:4d:
         b5:1a:d7:3a:10:b2:8c:79:5c:c6:f9:d3:b8:22:a6:e0:dc:9f:
         73:58:0c:d7:9f:26:a3:26:65:a1:21:71:a8:e1:e7:28:12:f4:
         af:84:37:57:55:e3:5b:17:ed:c8:64:2f:ec:66:3a:5f:e2:f1:
         cb:b5:0d:ee:87:c8:f1:f3:8b:c9:6e:01:a8:3d:8d:13:60:d4:
         50:33:bf:78:2e:26:0a:9e:5e:11:3d:59:b8:29:b7:a2:f8:6e:
         73:db:8a:22:11:b3:c7:f2:4e:10:79:4b:fa:03:2f:f5:3a:8b:
         f2:9a:7b:bb:24:77:82:7b:cc:6a:79:c1:e6:b6:f9:2d:8a:9c:
         88:68:46:90:14:08:fd:fa:d6:db:81:06:32:cb:1c:51:a2:48:
         6c:d7:a9:d1:4f:49:03:73:d5:d7:97:c7:2a:9e:91:1d:e1:33:
         04:84:1c:b8:be:df:87:94:99:1b:51:56:54:e0:70:8e:e5:18:
         55:80:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:29:48 2026 by rpki-client