Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/410c4210-1bca-3d90-bb1f-0b524e79b315.roa
File:                     410c4210-1bca-3d90-bb1f-0b524e79b315.roa (raw, json)
Hash identifier:          hh6Ajh9h7VBLnxNQpbl1GlgtZtCjcO78ATp6HouQsGA=
Subject key identifier:   A4:49:6A:93:46:40:BF:94:6C:C6:ED:E4:98:11:36:E8:DF:D6:02:5A
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584EA78868B06B7AA0ECEB99EFE0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/410c4210-1bca-3d90-bb1f-0b524e79b315.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16532
IP address blocks:        72.12.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:68:b0:6b:7a:a0:ec:eb:99:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fde75114-b4e3-4631-88f7-523aadc500ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:0c:62:a3:45:3d:6d:4f:31:fe:4f:35:2a:
                    36:95:2c:12:a2:38:d0:03:41:f2:cf:d4:9e:8e:76:
                    f1:73:de:dd:cf:3c:e9:fb:ad:57:d0:9d:10:66:f8:
                    fc:40:22:00:c0:fc:5a:28:10:9b:7b:4d:b4:02:33:
                    a3:3a:74:a6:ea:5b:4b:a0:75:91:cb:5f:f7:39:ed:
                    16:d0:f5:76:2c:48:1c:6c:ee:8e:4c:0e:d2:9a:a8:
                    f8:c7:b8:88:c4:09:90:25:1c:f3:22:9f:8b:4d:8c:
                    c9:ef:42:1d:64:c7:69:2d:a6:53:a3:b1:7f:f4:a8:
                    7b:86:e8:24:ef:59:61:75:ff:22:ad:27:fb:58:ad:
                    9a:2e:7c:33:1f:70:ba:9f:01:40:24:df:85:b5:41:
                    bb:e5:67:f5:83:0a:ac:6f:ee:4f:b8:01:53:12:98:
                    c2:54:82:70:b1:8a:b3:b5:07:87:1f:05:f2:bf:00:
                    8d:f4:ac:e5:51:3c:73:a2:ea:cd:94:ff:71:3e:02:
                    8a:f2:0f:d8:90:b4:13:2f:60:fc:0a:c0:0a:6a:5e:
                    70:8f:aa:38:16:d2:9a:8d:0a:e1:4a:fb:49:07:53:
                    1a:58:59:22:33:9b:e3:66:76:22:83:11:25:3a:80:
                    87:a7:07:c9:c3:23:95:60:36:da:0b:71:b4:e1:b5:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:6A:93:46:40:BF:94:6C:C6:ED:E4:98:11:36:E8:DF:D6:02:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/410c4210-1bca-3d90-bb1f-0b524e79b315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.12.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:df:3f:12:b0:36:ff:8b:7d:04:50:1e:72:d2:97:44:83:20:
         3e:43:6b:02:3b:8a:d2:fc:f9:f8:1a:e3:a5:69:0a:b3:0b:60:
         d0:65:e4:92:50:ff:71:91:d6:e5:0a:5d:3a:e6:ee:ca:29:8e:
         6f:15:24:2e:85:b3:b9:09:c5:75:7e:9d:80:55:dd:28:79:98:
         1d:38:27:03:99:c2:97:75:db:8d:c0:d1:a3:bc:39:c1:22:55:
         d7:60:62:98:94:31:e2:50:32:f2:53:f9:37:54:f6:18:41:8a:
         ef:4b:42:33:db:9a:54:8a:b2:10:0c:19:dc:b1:e1:da:49:40:
         dd:36:d6:e3:ef:e1:1c:5a:eb:bb:eb:05:77:94:8c:46:7c:f7:
         15:cc:58:14:18:b7:ef:c5:ea:94:8e:cf:6d:c7:11:41:ed:55:
         36:39:5d:2b:1f:fc:41:37:35:5b:86:9c:76:f2:53:0c:d5:4e:
         c5:98:ea:71:6a:4f:07:c0:87:d0:f8:86:a9:76:f0:56:bc:9c:
         c9:5f:c9:f6:8f:3b:84:23:83:7b:98:b8:07:aa:6d:3b:b9:2f:
         55:88:25:07:bd:fc:f4:0c:22:e3:9d:17:e4:e3:e6:c8:18:e4:
         d9:77:f7:f5:5d:78:a3:ed:96:fe:6f:1b:fe:7b:e0:0b:a5:fb:
         da:7e:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:15:59 2026 by rpki-client