Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa
File:                     c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa (raw, json)
Hash identifier:          +0MyP/4Mlls27mz2r3Fkn5Z4bdCQVAFqUBzo2qWU8io=
Subject key identifier:   CD:B5:83:BF:94:FD:E7:76:69:EC:88:19:B5:EC:F8:63:EB:68:96:C2
Certificate issuer:       /CN=3e5c42ff-624e-4419-832c-8d3b65c73dad
Certificate serial:       010D0C9F4328584EA795C8DEE9D7BE5E0A820880
Authority key identifier: D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40581
IP address blocks:        72.35.208.0/20 maxlen: 24
                          192.231.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c8:de:e9:d7:be:5e:0a:82:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5c42ff-624e-4419-832c-8d3b65c73dad
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d4251641-fedd-4f53-9e34-c3d643911fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cb:f2:e0:46:15:e3:78:21:66:e9:67:e8:00:
                    1c:6c:e9:37:9c:54:5f:fb:75:f5:55:1a:67:f7:b1:
                    b5:fa:de:f7:a2:4a:89:a0:bc:51:8b:7c:a8:1e:74:
                    cc:89:c0:fa:31:b7:5b:40:cf:ed:40:89:22:9a:b5:
                    63:8c:c2:d2:e4:b7:54:a4:21:e5:76:cb:68:1f:77:
                    cc:95:6e:2e:a9:38:91:96:81:79:dd:0b:ee:36:ae:
                    72:a1:1f:a0:ff:5b:8c:08:9c:77:2f:35:23:36:1a:
                    52:8f:ae:5a:ba:83:7b:6d:57:f0:7a:46:03:d5:d0:
                    58:be:dc:b0:2a:42:e7:22:8b:c1:0a:30:ed:20:fd:
                    37:b1:58:60:80:0e:21:67:21:69:e3:e1:78:58:21:
                    de:0d:96:9b:d6:c9:22:44:b8:8d:a4:97:8b:f4:a9:
                    22:b0:27:bf:b5:1f:e0:be:66:ab:e4:d3:7b:a1:7a:
                    cc:e9:6e:79:d9:0f:17:c5:7c:3c:6c:37:dc:52:58:
                    ad:2a:70:85:fa:00:b4:14:70:2c:a7:31:c4:89:e2:
                    a8:fe:f1:c2:e8:6d:ee:0e:38:4c:42:59:3f:fd:30:
                    31:45:38:36:26:30:4e:0b:da:6a:5e:75:d9:17:e8:
                    9a:e6:b7:93:25:0e:2c:94:2f:7a:dc:5a:0b:c9:15:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:83:BF:94:FD:E7:76:69:EC:88:19:B5:EC:F8:63:EB:68:96:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.crl

            X509v3 Authority Key Identifier:
                keyid:D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.208.0/20
                  192.231.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:bd:14:03:ee:3d:be:4d:c5:ab:e7:bd:28:01:75:1c:da:c1:
         c1:bb:74:ab:38:57:15:f2:07:8e:d5:ae:8f:e9:97:af:c2:57:
         bf:a1:60:36:61:49:b9:cd:06:d8:c4:2b:c7:f9:e8:85:61:62:
         c3:f6:e0:3e:f0:79:00:1b:ff:7c:19:80:ec:1f:97:04:56:65:
         ed:34:22:d7:1c:6d:7d:bc:e1:41:a9:f6:95:49:c8:bc:f8:60:
         cd:e2:4f:c0:9f:31:97:5a:96:ef:c4:34:df:02:92:e7:ea:c4:
         a6:c6:a7:15:0a:f8:1b:ec:ab:96:92:be:ff:c7:2c:13:90:39:
         d1:ba:b8:13:80:d6:15:57:17:95:42:bf:2c:42:46:21:c3:d1:
         a1:e9:de:bc:77:fb:77:21:7c:08:eb:82:5f:1f:ec:7d:51:73:
         a6:dc:8e:a9:d8:41:7e:01:26:27:6f:1d:07:50:43:ae:88:d1:
         ba:c1:9f:98:1e:1e:6b:a7:ba:08:1c:21:1e:35:6e:df:b0:e6:
         bf:b9:ec:f3:98:9c:60:ac:6b:16:21:69:5f:b1:16:7f:81:39:
         ba:20:fa:0e:38:23:08:48:60:d3:26:57:95:3f:50:a0:1c:f6:
         32:f7:c2:1b:14:eb:f3:7b:bd:98:7b:c9:5e:54:f3:9b:28:e3:
         22:68:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:45 2026 by rpki-client