Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
File:                     ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa (raw, json)
Hash identifier:          NqnA8RQvNnofeupCPiAkwuG5UqEqVlNi/tRjms44qF4=
Subject key identifier:   3D:11:ED:E1:20:1B:95:8B:F1:56:F1:08:1D:C1:09:C2:A9:78:44:1E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74C2A926F4680DEC6FA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        72.31.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:4c:2a:92:6f:46:80:de:c6:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=ac49cb36-7811-491c-8f29-1eaf79287a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:27:dc:b4:33:25:1a:e8:a7:5a:2b:1d:5c:
                    26:8a:6e:a0:31:ec:6b:c3:3d:46:74:06:85:fe:38:
                    d8:83:9d:08:80:46:f3:d4:d5:a2:6b:bd:9f:46:8c:
                    6a:50:e2:38:9e:3f:c6:70:c0:61:36:02:94:bf:eb:
                    c3:ed:26:ad:08:2b:65:52:89:0f:ce:43:65:fd:b3:
                    bb:e8:b5:0d:ea:94:17:58:61:76:1b:94:da:91:ad:
                    55:7e:61:49:32:7a:63:17:aa:cb:90:70:9d:60:a2:
                    11:66:2f:9f:40:81:6c:08:f0:fe:f1:18:1c:2a:73:
                    af:9a:70:6d:8d:ec:aa:84:57:00:fb:c8:21:37:4e:
                    14:dd:75:6a:51:c3:1f:3d:e9:a7:0b:13:d6:a0:75:
                    a7:d8:df:27:15:70:ff:06:76:e5:22:e9:ba:11:dd:
                    dc:f8:65:86:d8:3c:d3:9f:f3:a0:1b:97:88:75:e2:
                    cd:6a:e5:c8:65:aa:e0:05:ba:48:f7:46:f4:44:75:
                    7f:bc:e5:e0:b3:7b:fa:85:34:fd:ad:8c:22:e2:32:
                    95:e4:2f:ea:7c:54:16:d8:50:a6:c6:e7:48:69:84:
                    48:42:32:1a:c0:68:a9:9e:a8:f0:5e:c6:b6:0b:50:
                    8e:3b:d0:5d:e4:19:40:db:54:a5:eb:0c:60:2e:c4:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:ED:E1:20:1B:95:8B:F1:56:F1:08:1D:C1:09:C2:A9:78:44:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:57:78:aa:2a:2a:14:6b:c2:12:10:44:31:ed:8e:df:5c:
         fd:13:26:7d:a0:4f:b1:12:de:80:28:53:7c:3f:6a:ee:04:7d:
         d7:77:d0:c4:d5:2a:b1:ec:f3:5e:f3:59:b8:7a:17:74:a1:01:
         34:fe:a4:a8:b3:c7:ca:0c:07:3e:cc:f9:08:ee:7e:dd:80:f1:
         ea:78:dd:09:83:94:88:e0:be:f6:33:c7:11:64:7d:21:03:63:
         1c:ed:7a:21:1e:77:49:bc:9a:25:4f:c8:f9:71:56:15:8e:a2:
         aa:bd:f4:ee:12:8d:17:8b:c6:91:45:35:bf:d3:3d:10:92:2c:
         06:59:f4:bd:29:58:0a:ec:48:eb:13:1c:88:c5:18:00:65:d0:
         83:db:13:1d:1c:04:d5:9b:5c:c5:ed:bb:be:ab:30:41:75:7f:
         bd:29:d3:60:a2:a0:12:18:8f:76:99:c6:af:96:19:1f:38:8e:
         27:eb:6a:d1:e2:9e:0c:cc:01:7f:b9:9b:20:02:d3:b5:bf:21:
         9f:28:af:fa:3e:4c:98:0e:a0:ca:d8:ce:df:47:14:e7:ec:04:
         37:5c:72:45:a7:68:4d:9b:89:35:9f:d5:c8:c6:c5:b6:43:89:
         bb:52:eb:0f:9e:54:fb:c5:24:60:7f:94:87:d5:d4:c1:50:64:
         d4:47:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:29 2026 by rpki-client