Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/ad4e4d93-67b4-3f24-bf4f-cb6c33cb707c.roa
File:                     ad4e4d93-67b4-3f24-bf4f-cb6c33cb707c.roa (raw, json)
Hash identifier:          XKDwmC/8Ie5PA7xvId1Gp7PciPXslovi0TMA/b0Euf4=
Subject key identifier:   92:9C:F2:FD:32:88:1D:2E:95:56:A4:4F:28:46:3A:EE:78:BE:FB:F9
Certificate issuer:       /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9
Certificate serial:       010D0C9F4328584F138D4D7B83A1BFD9C85605D0
Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/ad4e4d93-67b4-3f24-bf4f-cb6c33cb707c.roa
Signing time:             Sat 05 Sep 2026 17:40:31 +0000
ROA not before:           Sat 05 Sep 2026 17:40:31 +0000
ROA not after:            Fri 04 Dec 2026 18:40:31 +0000
asID:                     210000
IP address blocks:        72.22.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:8d:4d:7b:83:a1:bf:d9:c8:56:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9
        Validity
            Not Before: Sep  5 17:40:31 2026 GMT
            Not After : Dec  4 18:40:31 2026 GMT
        Subject: CN=9caf61be-36c6-4faa-8bd9-6f2b282ad540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:16:c7:d6:1e:ce:72:24:08:6b:07:88:6c:
                    a5:eb:28:ce:18:fa:0d:50:a8:26:70:ff:49:63:a6:
                    4f:d9:3f:11:d6:dc:64:9b:8c:83:ed:a9:d1:95:76:
                    f2:4f:8b:30:a6:92:b8:fc:ac:00:24:53:1f:c6:40:
                    5a:9f:a7:b3:18:c3:37:7e:c9:45:90:59:45:95:c7:
                    72:36:d6:37:8d:29:0a:cf:06:ea:be:c2:ac:8e:09:
                    f0:99:c8:df:ad:2c:12:4a:62:fb:85:0b:ff:02:c1:
                    86:55:ae:c1:fe:bf:76:7d:11:23:e5:b5:17:01:06:
                    2a:ae:60:ce:ed:e7:93:28:53:ae:bc:52:ad:3d:9d:
                    f4:7a:48:2c:c2:de:aa:c0:f4:0f:93:d6:68:28:89:
                    ab:bc:bc:1e:68:b8:37:6e:37:5d:c6:02:bc:81:96:
                    bb:7f:3c:1c:ad:a2:70:34:ec:13:7f:7f:ab:c4:11:
                    ce:07:39:a3:d1:19:da:0b:f0:06:9c:13:1c:23:e6:
                    d1:76:f8:d3:1c:f6:be:73:ca:ec:a7:b8:9f:97:64:
                    de:8c:6c:f4:20:be:55:8e:06:d4:36:5e:d5:f9:39:
                    68:7a:ef:d8:1c:68:6f:fd:6a:c1:0f:83:43:44:bd:
                    6e:6f:72:b1:bf:f4:88:4f:5b:71:37:94:98:f2:8b:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9C:F2:FD:32:88:1D:2E:95:56:A4:4F:28:46:3A:EE:78:BE:FB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/ad4e4d93-67b4-3f24-bf4f-cb6c33cb707c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl

            X509v3 Authority Key Identifier:
                keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:48:4a:93:0a:ab:cf:3a:42:1c:f8:4c:14:c0:3d:33:a2:
         2d:ab:26:5e:cd:f7:78:b6:ef:2b:47:46:33:3f:ca:b2:51:34:
         30:a5:4a:2f:4f:fe:e2:c3:06:51:3c:63:68:a8:06:49:3d:69:
         f7:d8:ad:3a:6d:52:53:ab:f5:5f:40:10:52:d6:f6:81:40:6c:
         e9:e0:04:d4:35:91:67:39:a8:3f:22:bc:bf:02:85:03:09:95:
         80:fa:fb:db:b7:af:cc:f1:c5:a7:e0:99:36:47:a6:90:5b:13:
         95:43:7d:0a:a7:55:35:20:3f:00:7f:c8:12:aa:a1:2b:1c:01:
         96:6b:9a:fc:6f:02:f9:c5:ad:65:cf:f5:76:86:63:12:a9:3b:
         88:b9:73:d2:e7:d6:7a:9a:85:29:ab:65:0f:7c:47:b1:27:fe:
         a4:5a:e1:dc:c8:a3:c3:7a:a7:2f:03:dd:cd:ce:3e:cb:9f:58:
         6d:11:a9:44:7f:94:01:3e:b1:2c:86:aa:fa:f5:fd:a8:85:5e:
         7a:92:4f:de:9e:6c:7e:87:e2:94:77:d8:c1:00:96:27:8b:bc:
         44:01:db:f8:2e:03:c7:5a:c0:76:b2:2b:8d:22:e6:88:85:90:
         64:0c:05:fb:dd:85:2d:27:f2:72:19:4a:e1:77:29:45:f0:24:
         7c:b9:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:29 2026 by rpki-client