Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
File:                     3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json)
Hash identifier:          zDj/m5l4NpzMAjOnyaRA85VpoMynKndUqlHBX2k8dp0=
Subject key identifier:   EF:51:30:51:7D:76:B4:19:84:17:BA:43:45:79:0E:CC:3C:F5:43:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F62930150A73F73E13C58A700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        72.31.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:01:50:a7:3f:73:e1:3c:58:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=088727bd-343b-484a-9993-05ea8a008e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:f7:81:bd:35:12:3a:3a:76:eb:1e:4c:13:
                    f1:8a:a5:f3:36:67:a2:1d:9b:f6:77:7d:a2:8f:3a:
                    e3:f8:af:a2:0d:fc:9e:44:48:7a:1b:8a:f5:9f:c4:
                    b3:e4:21:6b:b8:20:2b:1c:cb:2c:63:be:71:3e:58:
                    c0:d4:bf:77:9f:e3:cf:62:07:42:e6:61:1d:cf:4e:
                    5a:b8:fb:42:e3:75:97:b8:43:04:1e:cf:c9:b4:15:
                    7f:3d:95:45:8a:b0:a1:7a:80:ac:61:ef:24:92:b7:
                    ee:89:8a:5f:20:31:56:9e:0e:38:fd:f6:5d:50:3e:
                    c7:f7:7f:bc:16:dd:d3:79:84:74:ab:b0:aa:e6:38:
                    d5:50:04:27:3e:f6:6e:ce:00:d5:28:57:ea:2e:a6:
                    8d:ed:7c:c5:16:9b:12:41:29:55:7b:80:00:f4:69:
                    6a:73:fa:4b:b8:ea:8c:0b:fe:50:26:fa:8b:50:7c:
                    5d:7e:b5:cf:9d:01:af:f0:a1:d4:34:79:6a:46:4e:
                    13:5e:a3:b4:ea:b3:f1:f0:0a:9a:80:42:6f:b1:3e:
                    6f:fc:bd:64:2f:87:2b:fd:35:a8:28:5e:2c:8a:ad:
                    86:c5:93:49:cd:06:9c:b7:61:c9:41:1c:93:18:bb:
                    24:70:0f:4b:9d:35:97:8c:ca:1a:94:98:9d:79:33:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:51:30:51:7D:76:B4:19:84:17:BA:43:45:79:0E:CC:3C:F5:43:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:5b:23:0d:3a:d7:36:de:f8:a0:3e:f7:32:8c:9c:b7:a2:
         84:9e:7f:8d:90:d7:24:50:78:4f:f5:1e:6b:46:74:49:5f:d1:
         a0:47:d1:a8:01:55:c5:72:8f:36:46:cb:97:43:ef:de:07:1c:
         62:45:e3:98:55:2b:02:66:da:c0:22:57:a6:cc:10:2d:ba:93:
         a0:22:1d:ea:96:d4:60:60:a8:ed:8d:30:a6:46:40:ff:b0:9d:
         73:19:4c:3c:60:80:97:10:2d:29:72:28:50:c4:12:fc:3a:d5:
         7b:53:bc:24:07:49:84:53:df:72:e8:b2:45:6b:86:2e:37:a4:
         b2:32:e5:f1:cb:3f:ea:40:50:a9:07:86:d7:2f:41:37:3c:37:
         25:ab:0f:4c:73:4e:5b:28:c6:74:39:a4:f4:dd:bd:e0:d8:99:
         56:62:36:5c:76:5c:55:f9:cc:6d:44:14:0e:2e:c7:c8:26:e9:
         a9:ae:45:0b:57:fb:42:b9:30:12:e1:12:18:82:51:11:b7:53:
         fc:24:06:36:8f:86:aa:87:59:2d:80:b2:b0:97:ff:ba:b4:68:
         ae:e8:e4:7c:19:f0:45:cc:6d:2a:a5:5b:be:86:03:3e:83:24:
         87:4b:e8:92:db:1f:42:a4:83:07:e2:90:39:9e:ab:05:22:18:
         de:99:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:33:39 2026 by rpki-client