Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/383990af-6414-3c6c-b547-6487eed72375.roa
File:                     383990af-6414-3c6c-b547-6487eed72375.roa (raw, json)
Hash identifier:          KWax5UvtiBLioZi0EmfeKhrWDzB9Dyp/irn9NHXf0Rw=
Subject key identifier:   22:C5:F6:5F:62:52:D5:FF:B2:25:15:10:48:D6:75:23:B7:F3:90:EF
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584DEB15E40DF36AB55A09176100
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/383990af-6414-3c6c-b547-6487eed72375.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     40934
IP address blocks:        72.1.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:e4:0d:f3:6a:b5:5a:09:17:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=c74cf11b-3268-485d-b90c-4f4ca10ae981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2a:66:b5:73:18:75:3d:4f:bb:5e:6e:7d:7c:
                    12:0b:23:8e:45:7d:09:b3:4d:68:02:db:6c:5f:ab:
                    e4:3d:44:44:39:44:9c:20:a9:4c:70:2a:ec:0c:43:
                    01:bf:20:4f:65:17:34:35:28:16:64:bf:e3:50:af:
                    09:df:55:31:88:f7:65:de:d8:71:51:09:a7:37:05:
                    34:e0:f5:b8:3a:0f:23:42:2b:65:e1:d6:32:d3:a5:
                    de:99:30:bd:dd:eb:45:55:ac:43:8a:4b:96:4a:4e:
                    71:2a:38:40:15:c7:ec:b0:bf:43:39:46:dc:1d:47:
                    e1:f0:ca:5f:61:e2:04:04:08:b0:57:bd:66:bc:5e:
                    70:fe:af:57:82:1c:c8:a2:97:ea:1e:75:8c:2b:06:
                    f8:ec:d5:fd:d0:24:49:13:6f:43:66:10:a1:cd:28:
                    0e:ce:9c:1c:47:d0:30:f6:14:15:5e:4a:f3:48:31:
                    8c:e1:cd:74:5d:fa:70:80:6d:92:93:5a:25:91:f2:
                    6f:e8:dc:49:20:79:b6:c6:0b:e8:8f:10:c9:8e:44:
                    99:ec:bb:53:2c:fd:70:93:de:aa:4f:e7:0c:bc:92:
                    39:f5:0e:dd:43:e9:00:30:fb:99:9a:93:8f:33:91:
                    72:ab:ac:44:3e:da:93:76:f1:d2:62:99:b2:71:fd:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:F6:5F:62:52:D5:FF:B2:25:15:10:48:D6:75:23:B7:F3:90:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/383990af-6414-3c6c-b547-6487eed72375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:a3:d2:8d:87:fa:33:e4:e6:8c:51:e8:2c:bf:d8:8d:e8:
         11:4b:90:6d:7d:b5:ca:ed:b0:0d:ab:5f:96:01:4a:b2:f0:d1:
         db:47:37:46:a3:0b:f8:ad:81:ba:59:2a:04:18:68:f2:10:49:
         e9:d3:92:e7:35:c0:ad:33:f3:64:e7:f1:af:11:ef:ec:8b:ea:
         61:2e:2e:7a:1c:cc:a3:52:f1:b8:91:6f:0b:0c:04:8d:d8:a8:
         57:42:fd:de:62:63:e5:2f:2a:a6:19:35:6a:93:4e:94:5d:e7:
         99:f9:6c:47:71:67:b3:4c:d2:19:70:7b:33:d5:75:7c:1f:c1:
         c6:81:a6:54:1f:a0:94:61:c0:95:1c:48:89:6b:54:69:03:e2:
         2c:43:49:07:01:20:be:83:89:0a:b3:74:f3:9c:af:ba:10:9f:
         06:21:5d:79:fd:c0:e9:de:98:3a:93:e7:16:f7:2b:db:4f:50:
         9d:93:74:93:77:80:28:ce:81:d4:11:94:0b:a9:b1:ed:36:4e:
         f5:22:38:0f:b3:bf:b3:ae:99:80:0e:42:ac:72:c0:90:dd:bf:
         42:8c:ce:88:fd:7f:e6:33:1a:7c:c8:7d:ab:a1:89:46:07:72:
         f3:74:04:51:d7:50:70:5e:8a:ac:2d:21:5b:c1:56:5a:6b:e1:
         8e:89:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 20:25:53 2026 by rpki-client