Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa
File:                     31c8bc35-faa3-3035-9823-b218dbe0b84a.roa (raw, json)
Hash identifier:          i8Wx05jVWi7Oto0PrLlhZIecOXRW4I5on3fD55lnkqI=
Subject key identifier:   14:88:49:1D:88:AA:7E:07:0B:6B:2F:37:84:DB:FB:C9:FF:2D:1C:E2
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584EC7A1CF352CA140F8904B79C0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     54032
IP address blocks:        72.233.142.0/24 maxlen: 24
                          72.233.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cf:35:2c:a1:40:f8:90:4b:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=42b60295-f7d1-42cb-8fb4-2e253a0b8590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:0f:18:c0:59:74:1e:8e:3e:49:73:56:46:
                    3a:2c:82:c4:bf:2a:a6:3d:4f:8b:98:a9:6a:40:02:
                    27:3c:1d:04:8c:9b:3c:8e:19:f1:55:b3:95:ee:bd:
                    cb:92:42:9c:75:e9:0b:54:a4:ad:1c:ea:09:9c:4a:
                    c9:81:36:27:82:31:90:56:e2:12:56:74:05:2f:4c:
                    9a:f8:75:81:fe:ea:73:5f:6d:1b:49:54:e1:81:1c:
                    ca:75:55:91:fc:a9:bc:a2:ff:dc:7a:4a:d1:04:66:
                    e7:cf:16:84:a3:17:c2:92:3f:19:eb:b5:d9:e0:b9:
                    c3:bc:65:d2:2e:cb:78:ae:48:02:16:3b:55:88:29:
                    5a:7f:4a:22:3e:95:3b:f6:b1:b1:69:13:6a:41:30:
                    cc:2d:07:39:40:a9:79:07:30:f2:30:21:74:f5:81:
                    16:a5:02:cb:b8:59:4b:64:95:19:af:d6:70:92:1f:
                    68:3d:e3:a0:fd:11:8e:29:b1:57:c3:9b:da:34:fb:
                    b8:30:6f:68:bd:a3:81:b1:21:17:9e:5b:92:74:45:
                    b9:d1:b7:19:29:c1:48:4a:00:b6:da:5f:b1:a3:81:
                    f6:19:26:70:1a:f8:55:42:97:86:2a:8f:8a:c8:9b:
                    cf:2a:27:5e:34:c8:7e:1a:13:08:0d:43:76:82:bf:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:49:1D:88:AA:7E:07:0B:6B:2F:37:84:DB:FB:C9:FF:2D:1C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:7a:18:af:b7:80:55:74:a7:ac:1b:a0:39:dd:42:12:b4:
         26:42:71:f5:50:31:c9:3d:ae:9a:67:b0:23:3e:2f:2c:ab:f8:
         c2:48:90:6a:7e:7c:e5:23:e4:cb:5e:df:ef:11:71:fa:b3:b8:
         35:3e:b9:d9:d0:16:d8:b6:46:46:4d:64:5e:01:e1:84:91:69:
         bb:58:43:65:cd:44:12:91:67:01:da:30:9d:60:f3:da:83:40:
         9c:65:f9:1b:cf:2d:e2:2a:5b:b0:d8:d0:96:20:e5:b5:4e:06:
         ed:d6:a0:dc:f7:69:99:fa:aa:37:00:d1:f1:53:4d:fd:7e:b0:
         f6:df:6d:32:0c:4f:35:9d:bb:fe:02:68:07:94:19:06:8a:13:
         88:a9:d2:f9:d9:09:af:be:eb:5c:87:50:10:38:d3:73:a4:78:
         5b:1e:41:18:3c:ae:e4:9f:00:ad:bd:7b:35:28:7f:54:c7:3a:
         15:80:0b:47:17:12:ad:d8:e4:e0:fc:43:a9:fa:6c:a6:00:5e:
         48:e5:df:e4:aa:c2:cb:03:a8:85:f6:53:b8:ab:cf:2a:59:c9:
         91:d1:4f:aa:09:51:bb:47:89:3e:66:4e:5f:5c:bc:fb:f7:7a:
         17:59:b2:8c:f5:02:09:97:4f:65:f7:a6:a7:b2:92:0a:c7:60:
         31:b8:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:01:16 2026 by rpki-client