Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1cf585-1dec-3c96-9823-7febeed081a8.roa
File:                     3a1cf585-1dec-3c96-9823-7febeed081a8.roa (raw, json)
Hash identifier:          H2f6wHCj9cbfN5dhtAmg8+rs7ltOppnXIVfIh4FEjCY=
Subject key identifier:   49:55:65:91:BE:72:87:80:80:19:80:66:0F:0E:13:9E:9B:AD:67:D9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74EE80411724F6A90B980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1cf585-1dec-3c96-9823-7febeed081a8.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        72.31.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:4e:e8:04:11:72:4f:6a:90:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=68c73fff-84a0-4416-8e61-7d8944618e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:99:31:88:1b:60:9d:e7:0d:34:4c:cf:04:
                    2f:95:1d:88:92:bb:78:8b:c5:28:1b:15:ce:86:2d:
                    d1:ae:47:bb:13:1e:0c:80:74:60:89:ce:06:d6:01:
                    9f:77:83:d3:a5:22:5c:ce:94:3e:af:e1:82:2a:5c:
                    aa:a5:61:c8:5e:2d:e7:05:31:a3:9e:b5:a6:4c:39:
                    9b:59:b9:88:cf:19:ac:54:0f:40:0c:e5:f6:0a:6b:
                    e6:b8:dd:90:6d:20:90:76:9e:7f:75:ff:61:e3:88:
                    d1:63:05:85:b6:17:1b:af:fb:aa:3a:3f:f4:ca:b0:
                    f1:89:a4:7b:d6:22:19:7b:4f:4a:19:b1:10:3e:b7:
                    8e:e7:d5:64:73:25:7c:2a:9c:53:6d:07:90:a9:57:
                    75:7d:01:1b:0d:b7:40:60:50:22:44:c3:97:9e:75:
                    39:78:84:3b:43:7a:aa:cf:4c:76:ef:1c:bd:1e:6b:
                    7d:7b:7e:5c:dc:3d:c6:35:5c:a5:8d:4f:e5:0c:f1:
                    d5:d6:79:ba:9f:d5:66:89:42:cf:f9:87:b6:f3:03:
                    08:0c:81:d9:45:fb:ff:e0:d1:32:33:66:d9:2a:20:
                    52:a1:47:46:91:54:4d:ba:75:d9:9d:d4:91:e7:a4:
                    19:e3:02:5a:ff:de:4c:b4:c8:50:cb:a2:23:8b:06:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:55:65:91:BE:72:87:80:80:19:80:66:0F:0E:13:9E:9B:AD:67:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1cf585-1dec-3c96-9823-7febeed081a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d1:54:95:f7:30:89:ea:73:bc:96:9d:24:e6:8c:42:33:d8:
         44:04:de:0e:02:a5:13:11:77:2b:68:b6:c4:17:cb:e2:c8:95:
         b8:4d:8d:83:1e:3f:fc:60:8f:b4:19:75:47:42:bb:dd:11:55:
         e6:2a:5f:8b:dc:4d:d0:b5:fe:a3:6f:32:16:74:97:ad:72:af:
         57:5c:66:21:54:3b:10:00:b1:6d:4c:af:dd:36:af:33:5a:1b:
         d3:e8:02:33:ea:00:36:5f:c0:d6:79:15:08:87:61:0b:37:4b:
         b8:33:16:fc:73:59:74:e1:87:bb:61:8d:7e:a9:b3:fa:94:d6:
         f9:92:75:e9:36:7e:4a:89:eb:c3:9e:fe:13:12:1b:19:73:92:
         55:46:f6:23:1f:9e:8d:9d:db:1c:09:bb:1d:4b:69:a0:64:18:
         10:04:ea:3e:dd:d4:05:59:31:9d:97:a1:ea:1e:f7:83:8c:6d:
         11:57:83:a9:28:00:26:f6:08:b2:d4:bc:ab:e8:67:fa:0f:87:
         8d:5e:84:29:ba:03:0a:6f:ec:91:ea:27:a9:2d:81:d4:dc:33:
         97:b3:9b:b6:65:92:f7:2e:9c:4a:69:55:1e:2d:68:05:d2:dc:
         9b:18:84:16:5c:0c:7a:e6:d3:40:23:f1:8a:eb:6d:24:3a:4a:
         d7:61:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:24:04 2026 by rpki-client