Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29f8df59-220d-31b0-a851-44afca16df4a.roa
File:                     29f8df59-220d-31b0-a851-44afca16df4a.roa (raw, json)
Hash identifier:          Fh5fVhU2EmmLOoZoYCqxN3NuJHBlmN8Wj9hfCIu3XVo=
Subject key identifier:   B7:79:DA:8F:76:A0:B2:C9:BF:05:5E:D7:ED:88:35:DE:2B:E4:B1:94
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A732919FAAB8711F07E980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29f8df59-220d-31b0-a851-44afca16df4a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        72.31.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:32:91:9f:aa:b8:71:1f:07:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=5a201f65-a300-44c0-8f45-3977e060b91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:36:f2:a1:2c:4b:e9:28:ac:05:01:cc:1c:
                    bb:7b:33:49:9f:b9:22:ae:85:48:08:3a:45:f8:5e:
                    d8:4e:99:d1:8b:e7:51:5c:f2:a9:e9:78:d8:48:1f:
                    48:28:89:f8:d5:84:d8:8f:44:0e:ad:29:aa:3b:d0:
                    3b:66:f5:02:c2:c9:ff:30:bc:a7:9e:e6:1a:43:8d:
                    ed:6b:21:62:e1:cc:d4:09:bf:6b:73:92:c9:6a:58:
                    1d:10:5a:61:13:5f:2e:e2:e9:7e:83:6a:fa:88:a5:
                    17:ca:2f:71:de:e4:06:dc:f3:97:a7:dd:c9:93:15:
                    fb:19:ca:98:6c:a9:3c:fb:81:8d:03:72:51:51:f3:
                    d8:3c:03:9b:ba:89:bc:e7:5f:29:f2:21:e4:66:30:
                    6c:b4:46:f9:61:ae:0a:b3:e1:1e:4b:c8:91:5f:bc:
                    41:00:f9:82:d0:b5:49:1e:fb:15:8f:42:2e:b8:31:
                    7e:b9:27:96:c7:55:ee:1f:76:55:8a:3d:95:b1:10:
                    1a:03:61:15:64:63:2c:53:c8:33:c7:f2:e0:1e:80:
                    2d:74:05:ba:38:1d:93:b1:aa:db:71:f5:13:ac:2b:
                    94:9f:2a:1c:b7:b2:33:46:55:a8:80:6e:c3:55:bd:
                    1e:41:02:f8:3c:83:90:18:08:15:f0:bf:14:52:db:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:DA:8F:76:A0:B2:C9:BF:05:5E:D7:ED:88:35:DE:2B:E4:B1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29f8df59-220d-31b0-a851-44afca16df4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:24:35:00:aa:54:9e:97:0d:01:34:12:e9:7f:8e:78:27:
         57:65:10:2f:e1:f1:b6:cf:ad:98:10:3f:5f:7b:5c:92:47:fc:
         c3:2c:17:31:59:08:a3:16:4f:0f:0f:69:33:8e:c6:e9:5c:09:
         85:14:df:94:20:ec:be:3b:63:db:15:d6:6b:93:c8:1f:1f:e6:
         59:0b:28:df:a0:91:06:ea:80:c1:a4:0d:55:fa:14:90:97:03:
         02:ea:ff:62:66:d9:ed:d7:c0:9c:9a:69:af:12:a4:4f:b2:bb:
         e3:1f:39:fb:eb:9d:6d:be:e7:86:c4:24:ba:0b:4a:0f:76:93:
         75:7e:0f:99:9b:f5:d0:1d:1c:36:cd:5a:5b:cf:94:80:6d:0a:
         7b:ef:3a:5b:7e:ac:d1:14:15:c4:7f:a3:07:bf:63:5b:cd:d2:
         e4:11:1a:1d:e1:84:d4:a6:4f:71:e1:e7:df:61:00:bb:5f:98:
         10:e0:40:fd:a9:1b:30:85:87:8d:96:1d:5d:50:58:cf:3f:1e:
         f5:8a:b5:fb:2f:c1:67:6b:84:3b:a8:6e:1e:2f:9e:eb:80:85:
         77:fa:59:b9:57:bc:d0:dc:a2:31:1a:a3:00:0b:f7:c0:b6:1b:
         ab:7c:bd:f4:84:fd:1d:10:91:b9:02:bb:03:2c:2c:0a:16:fe:
         2c:06:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:59 2026 by rpki-client