Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1203184d-ac07-39fd-921f-09ae3466ceac.roa
File:                     1203184d-ac07-39fd-921f-09ae3466ceac.roa (raw, json)
Hash identifier:          i9xKiQHuCsOlxGONLEwRJ7yt910+FK/sblc/EiLFcv0=
Subject key identifier:   13:D9:F7:FB:B7:E3:89:1D:CF:61:5B:34:6E:BE:02:AA:36:05:43:48
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584F093D171EE5321021ECE602E4
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1203184d-ac07-39fd-921f-09ae3466ceac.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     38854
IP address blocks:        72.37.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:17:1e:e5:32:10:21:ec:e6:02:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b63b0ef0-779e-46c7-9dc1-9bce36f09507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:7d:1a:56:dc:3f:bb:e7:c0:1e:a3:e7:2a:
                    f1:5d:a1:81:18:d2:36:8b:42:f1:51:54:a2:c2:12:
                    fe:13:5a:bf:70:de:12:1f:9e:0d:41:dd:0e:b2:04:
                    45:6a:25:03:07:1d:a5:48:23:ee:dd:42:9d:f4:59:
                    11:b5:04:56:ff:f0:c0:6d:e9:3e:67:38:1a:75:11:
                    a6:b4:06:93:c3:1e:e7:e3:a8:16:b3:5b:06:09:fb:
                    96:f0:7e:de:56:28:55:bb:31:a6:8d:da:2f:8f:2f:
                    30:a6:d4:86:f0:d4:2d:fa:7c:9b:55:5d:3c:4d:51:
                    7a:7a:8a:67:d8:6d:88:22:ad:78:52:45:45:e1:1e:
                    78:d0:08:18:55:75:1c:64:82:2a:5a:e4:e3:3a:ea:
                    40:9c:12:7d:9d:69:61:88:2e:92:5b:d2:5c:6c:26:
                    07:d4:ee:8c:fe:6c:6c:64:a0:c1:66:db:9a:8c:01:
                    7a:d1:d0:fd:b4:5f:f4:37:61:db:4e:aa:af:43:e8:
                    45:df:48:e7:03:dc:97:9a:e5:19:21:d4:67:50:24:
                    ad:02:da:2c:50:74:66:78:99:bb:72:f1:3c:37:cf:
                    78:ef:19:ac:21:c1:16:10:30:6f:92:cc:c3:1b:c4:
                    d5:03:91:f2:99:f0:14:8d:bd:d8:9d:0b:2e:6d:9f:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D9:F7:FB:B7:E3:89:1D:CF:61:5B:34:6E:BE:02:AA:36:05:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1203184d-ac07-39fd-921f-09ae3466ceac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:80:e0:37:e3:ce:39:66:51:59:b6:1c:9f:9d:e8:e0:e6:2c:
         55:b3:87:b2:cf:f5:af:1b:15:f5:8c:17:f8:b0:2d:f3:b2:9c:
         7a:01:23:db:17:12:00:94:af:1c:fa:b6:f9:2b:88:0b:98:1c:
         6e:98:6d:5f:d5:8a:59:4a:d1:7e:b6:fd:2b:b8:d4:17:ad:21:
         3d:22:7a:cb:a2:f4:b6:dd:ab:ed:40:31:fd:36:ee:49:a2:27:
         4a:f3:89:6f:9c:c6:1b:a6:09:d4:a2:8b:1c:db:3c:5d:0e:88:
         4b:3c:26:e4:ca:90:02:96:e3:a8:5b:ca:9c:93:a6:39:c4:38:
         61:e8:86:8a:d2:4e:b0:f7:ab:41:5d:b7:56:46:7c:78:72:03:
         6d:60:a7:f4:2f:a9:7f:bb:ce:56:fd:f0:e5:81:65:dd:ed:e0:
         ce:ab:9c:90:fc:00:cc:bf:ec:28:37:71:a3:22:90:d9:01:db:
         73:3d:50:73:8c:7b:16:92:8b:fb:57:53:4c:e1:ee:33:2a:28:
         68:a8:22:55:92:c6:68:b0:57:94:1f:42:37:b6:47:49:e2:55:
         13:05:fc:8e:55:7d:b3:88:07:ed:dd:c7:8c:2c:9c:47:01:83:
         e0:56:2c:71:2f:f5:cb:d2:ab:6b:90:b0:e9:13:ed:3a:63:58:
         7c:71:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:09:31 2026 by rpki-client