Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa
File:                     e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa (raw, json)
Hash identifier:          N/Hs3N3OMpNbSyIuvpPmqgIKtFa3/3PufsSxp97IxVg=
Subject key identifier:   02:0D:C1:D8:EB:0D:90:6C:7C:85:AF:CC:D6:21:66:DC:A3:E6:81:D3
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584DEC7B48F1636B79157F0FA680
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     53959
IP address blocks:        72.29.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:48:f1:63:6b:79:15:7f:0f:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=ca07edb8-dc04-4169-8bbb-3b5440b9e98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:a2:b2:94:65:53:60:0b:07:e9:b6:1c:c2:
                    b5:99:16:97:d0:d1:5e:ec:e9:22:0a:9e:74:19:c5:
                    19:27:87:23:4e:56:27:d0:ee:ae:ff:78:0e:80:20:
                    68:11:a8:71:44:31:51:65:8c:91:2c:51:7d:eb:d2:
                    00:a8:30:7e:a9:18:c2:b1:f1:33:fa:35:30:09:ee:
                    81:51:9b:3c:40:98:da:0f:fa:35:a4:54:e7:95:44:
                    50:57:9a:21:33:8c:50:7d:59:55:82:5b:2d:90:21:
                    e5:c0:95:3b:f3:33:e0:09:8a:7f:da:d4:8b:cd:06:
                    b8:ee:15:37:1b:af:e2:b2:a8:ae:57:d9:26:9b:11:
                    c0:8a:d2:27:e4:43:0a:51:d7:96:47:f1:5f:fe:9f:
                    71:bf:a0:f7:53:8b:ff:43:de:39:01:a0:94:0e:34:
                    5a:94:f3:a6:3f:5b:e8:29:f3:1a:da:97:51:bc:a3:
                    2d:d7:d9:e2:01:bf:81:44:9e:5c:ce:e7:cb:9b:b0:
                    c8:b1:37:65:43:6d:8e:91:56:85:5e:0e:b0:f4:22:
                    49:b2:01:a8:0f:e2:08:0d:cf:7c:0d:08:f7:2b:50:
                    75:91:34:e6:5c:98:a3:27:a2:94:63:51:c8:14:4a:
                    c0:d2:39:93:a4:49:c7:be:94:13:e3:2a:1e:73:8b:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0D:C1:D8:EB:0D:90:6C:7C:85:AF:CC:D6:21:66:DC:A3:E6:81:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:9e:b6:d0:30:42:8b:fd:51:7b:37:02:03:a7:2d:90:e9:
         4e:ee:fa:5f:e3:f4:f3:18:14:5b:50:84:b7:9f:b3:e6:98:34:
         87:0a:88:0c:ba:97:3b:d0:6b:e1:95:07:17:26:bc:d9:a3:4e:
         c3:ae:0a:0d:a0:b6:8e:55:0a:e9:09:99:67:b5:f7:ca:68:c8:
         37:0b:d2:c1:e0:61:1e:fb:85:bf:c5:b9:64:0d:42:d8:80:93:
         7c:29:33:3d:41:b2:13:7f:5f:22:1e:f0:72:df:b7:ba:12:5d:
         2f:cc:c3:a6:88:45:2c:50:1a:df:e5:0f:83:04:bd:a9:82:14:
         dd:37:8a:9a:0b:6a:06:26:ba:9f:82:78:de:44:c3:a6:eb:df:
         c1:84:b3:11:9b:10:7c:37:73:fd:75:9b:c0:af:63:e3:08:65:
         6a:0d:eb:4f:64:43:3b:4e:69:2f:66:e2:5b:24:4e:de:04:92:
         79:dc:63:5f:1c:92:58:60:d5:bc:81:b7:3e:11:8c:6c:e6:e6:
         1d:83:03:33:1b:dd:ac:1e:e2:7e:0c:a8:4d:aa:d0:a2:7b:58:
         6b:c4:84:d8:b5:de:c8:4f:64:a8:7e:3e:99:b4:2d:71:54:32:
         8a:2d:a4:dd:2c:a6:ba:aa:f0:7b:99:b3:20:3a:a1:4c:4b:2c:
         4f:ec:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:10:37 2026 by rpki-client