Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa
File:                     e2f738f2-29e9-3955-988c-62d352942d5d.roa (raw, json)
Hash identifier:          zEDvBs9SERoz3RG3BIkxdkexG+PnduQ60C1NuNr+8r4=
Subject key identifier:   03:72:89:BD:CF:66:9C:75:41:D1:60:5C:80:2C:DC:94:B8:A9:F7:4C
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584E37646ACCDDE57BEA45561020
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16904
IP address blocks:        64.72.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6a:cc:dd:e5:7b:ea:45:56:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=a8eed128-97a5-4eaa-90fb-7565eb0e612b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:6d:45:71:59:2f:da:8d:74:f5:58:15:1e:
                    20:5e:a3:26:13:39:c6:63:09:e1:b0:89:9e:f1:6b:
                    c6:3b:88:bf:8b:e5:82:91:51:12:2f:40:eb:20:cd:
                    7d:3f:a3:da:ef:71:7f:76:34:72:7f:df:0c:cd:00:
                    bc:03:a8:aa:88:05:33:71:4f:7c:a0:06:74:e4:06:
                    dd:05:af:83:90:4e:e1:df:b1:a5:d1:fc:11:1a:6b:
                    d6:c9:4a:0a:aa:32:a2:d7:2c:94:c8:38:bb:a6:0a:
                    5b:87:7f:8d:e5:14:6e:71:99:fe:39:16:0c:89:97:
                    5d:24:d9:2c:8f:d2:60:93:b0:ee:b8:e4:7a:af:4e:
                    42:85:3e:e6:5e:3e:95:ad:c9:63:4d:bb:60:99:a2:
                    c2:c2:70:30:c9:6f:5b:a1:88:53:70:94:5e:d7:cc:
                    c0:6e:1b:c9:70:1b:86:0f:b9:7d:7a:75:d7:1f:38:
                    7a:55:08:76:6c:2c:4e:b4:37:81:68:0d:00:cb:38:
                    05:18:99:8d:4e:18:47:d0:7e:2f:a3:50:18:21:89:
                    ab:61:d0:34:98:ed:b5:af:e5:72:ef:16:ef:a6:b4:
                    cd:b6:83:24:3d:92:2c:8c:bb:3a:1d:f8:d1:c4:21:
                    a0:db:2b:76:cf:0b:76:63:6d:cd:a1:99:84:07:4e:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:89:BD:CF:66:9C:75:41:D1:60:5C:80:2C:DC:94:B8:A9:F7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:07:da:77:5e:53:8a:cc:44:e6:c6:36:d3:49:90:ef:73:e8:
         0a:5c:9e:07:41:4a:71:5a:70:1b:84:e7:4f:4c:30:99:6e:45:
         c9:f7:89:8f:00:ce:29:0d:d3:c6:ed:4f:3c:42:40:38:73:8a:
         86:db:ff:99:33:5b:24:8f:67:a6:53:a6:01:f4:f2:6b:cf:8c:
         19:9f:61:60:2a:e9:8f:e7:a2:10:bc:7e:6c:2d:e5:8c:ac:1c:
         bb:d6:79:0e:f6:ae:30:f5:60:d0:e9:0e:43:0c:bf:32:51:a9:
         30:63:77:f1:21:0e:b9:1f:58:00:cc:a8:31:b3:40:10:69:82:
         c3:b7:d7:43:64:11:3a:b3:9d:3a:9b:4a:71:8f:dd:ae:f1:7b:
         fd:60:1e:cd:66:9c:54:f8:5a:08:56:2e:7f:e3:f3:e1:dc:97:
         24:42:93:4e:8d:7f:96:5f:5b:68:ef:ea:d0:ec:b1:44:6c:44:
         8f:e1:40:1b:41:56:35:58:1b:20:a9:43:cd:7c:dc:67:4a:03:
         3a:e6:60:b3:2b:f1:3d:2b:58:2f:1b:1a:20:b9:ea:cb:7e:6b:
         77:0d:f7:c4:89:5f:84:03:da:15:e9:cb:97:1f:5e:76:b1:3b:
         03:7b:13:fe:bf:fc:5e:ff:c3:eb:d9:59:37:83:15:f3:bd:3a:
         f1:a2:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:56:12 2026 by rpki-client