Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b890a850-9125-3f77-b34a-714f6fb5e273.roa
File:                     b890a850-9125-3f77-b34a-714f6fb5e273.roa (raw, json)
Hash identifier:          7lve+xF8ZU4Vuh0rMg8OtFIQS8MnLQdjikGrowxIH4A=
Subject key identifier:   04:1A:97:32:5A:AC:61:87:9A:4F:10:7D:83:15:FB:B0:2E:D1:B4:1A
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584EF87CC1E3957799A66F735520
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b890a850-9125-3f77-b34a-714f6fb5e273.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     151373
IP address blocks:        72.37.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c1:e3:95:77:99:a6:6f:73:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=0cd09442-cdba-47c1-aff0-c9d964c2f2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:d3:f9:5f:23:13:17:40:f2:bb:b3:1e:89:
                    f7:3a:78:67:7d:ab:3e:85:d0:b7:83:f7:0e:7c:52:
                    1c:f5:40:4d:f0:88:a4:53:a4:50:7a:d9:64:96:15:
                    81:d0:9f:9e:69:1d:31:b4:72:be:4a:09:63:07:cf:
                    c8:e3:f0:57:60:38:be:7f:6a:ca:7f:89:25:f8:bc:
                    9b:0e:88:74:da:3e:96:c3:6f:a7:65:ba:9c:86:8e:
                    03:d2:02:a3:17:f3:0b:90:f5:da:e9:d2:aa:81:8c:
                    87:8b:4f:4d:f4:b2:b7:01:10:4f:bf:60:ab:29:48:
                    3e:cb:69:1b:89:f1:9f:69:30:2a:f7:e3:c1:58:6a:
                    d6:60:24:83:f1:06:6c:47:19:ff:33:b3:55:85:39:
                    01:ae:0a:24:9e:c0:bb:14:ba:16:0c:d8:4c:c9:de:
                    f2:23:5e:bd:06:1d:20:0e:19:2f:b4:38:17:0a:3e:
                    27:56:12:5d:e8:ae:a4:a9:b4:ad:a2:bb:87:09:61:
                    de:41:88:33:25:af:63:29:28:b2:0d:e8:a3:7a:df:
                    d2:00:6b:ab:54:a6:a6:6b:68:f1:59:8d:fe:f1:91:
                    0f:e7:48:3f:29:f1:35:03:c7:5f:17:b4:10:a8:1f:
                    0c:db:84:bb:ec:b4:9e:5a:cd:ab:11:d1:20:eb:b6:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:97:32:5A:AC:61:87:9A:4F:10:7D:83:15:FB:B0:2E:D1:B4:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b890a850-9125-3f77-b34a-714f6fb5e273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:01:5e:3b:65:ca:03:f7:1e:75:1e:82:d9:d5:1a:ef:b5:08:
         d9:a1:c5:74:ed:ea:4f:9b:81:33:6f:bb:21:31:a8:b8:b1:8a:
         2f:6c:1d:f6:88:a9:97:d9:61:46:43:f2:1c:a2:3f:ac:f4:c1:
         a0:17:0a:76:f8:be:94:1b:41:6a:30:a4:52:31:be:76:18:a9:
         3c:3f:1e:66:ba:8e:a1:03:10:ae:da:b2:b7:bf:2e:dc:89:48:
         e5:c2:2a:77:68:95:b2:c9:d4:4a:d1:2d:63:1d:c5:33:ba:7d:
         eb:b6:6d:07:25:59:35:81:82:68:f9:ae:1c:32:df:4f:ff:95:
         73:43:c3:6f:ce:03:a1:46:8d:ed:c2:02:77:38:e9:c6:76:c0:
         af:8f:ce:59:4c:09:c2:4e:90:ef:23:ec:3e:e4:10:53:2a:75:
         0f:9c:d5:70:64:14:63:51:f9:06:bf:d2:a9:60:b3:9b:6e:2c:
         92:2a:36:d1:2f:1b:d9:e2:d9:5e:0b:58:0e:dc:a5:6f:16:2f:
         53:7d:2e:f9:22:9d:ef:5d:77:9f:b9:68:27:62:29:50:5a:e2:
         11:3d:76:1f:f5:56:58:29:ce:d0:15:6e:6f:7f:db:db:61:b3:
         89:ba:c5:cf:7b:7a:02:6b:f0:14:0b:e4:ff:e3:88:a1:c8:cc:
         53:5c:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:08:49 2026 by rpki-client