Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa
File:                     4931962f-9845-3178-a5e1-2dfe784bd128.roa (raw, json)
Hash identifier:          DZVY2aCzsIk/k1fGAECPPp3+7zleHEmtoHHQ8pfh058=
Subject key identifier:   98:63:B5:6C:E4:EB:D0:45:B3:02:77:8A:71:42:18:0E:D9:48:AC:90
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584ECBD1D9E42640C0D9D8C05520
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     394391
IP address blocks:        72.233.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d9:e4:26:40:c0:d9:d8:c0:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=96caced1-4a29-40d5-8f29-e2cfc4267b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:ef:83:1f:4f:80:d7:42:d8:d5:a7:67:eb:
                    fe:b9:f9:9b:e8:b5:60:48:be:68:67:13:91:1d:ed:
                    96:c4:16:99:4f:15:12:a0:13:31:03:ec:b3:e8:cc:
                    61:02:62:d9:eb:7c:36:f2:2c:80:44:8f:bd:46:18:
                    8b:31:ec:8c:58:76:6f:d8:cc:d9:3b:da:f9:31:6a:
                    50:31:25:88:61:a0:d8:1d:75:af:3b:0c:e8:d3:53:
                    f8:83:e4:5e:ba:23:7c:23:ba:11:04:15:59:89:58:
                    8c:14:03:62:d1:a3:7b:ba:76:a7:93:95:d4:50:3b:
                    81:2d:d2:c9:02:f1:be:80:a2:6e:ba:f1:d4:25:79:
                    0c:76:52:e8:ee:25:98:20:62:21:38:20:e7:ff:8b:
                    0d:4e:c4:fb:33:e9:de:3f:2a:1f:2d:a0:9c:35:26:
                    9f:63:97:5c:72:b1:8d:b5:4c:c5:69:e5:65:8a:fe:
                    59:86:b3:3d:bc:8f:d2:61:71:c1:23:02:26:ee:fd:
                    bf:c6:20:2a:e5:20:1f:e7:59:70:6b:b3:aa:22:30:
                    d1:ce:d5:ad:70:fc:d4:b9:18:f1:cb:fb:57:bf:ca:
                    88:9f:39:32:13:18:6e:5d:41:da:10:20:8d:e6:cb:
                    be:d6:8d:d3:92:03:c6:3d:8f:b6:1d:0e:42:da:ed:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:63:B5:6C:E4:EB:D0:45:B3:02:77:8A:71:42:18:0E:D9:48:AC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:6e:b6:c6:26:0b:34:e7:43:3b:23:ba:c7:37:f1:0d:c0:
         40:6c:30:37:6f:20:4f:b0:3f:ea:29:e3:c0:a7:00:9a:a7:68:
         35:61:e9:36:eb:51:37:80:d4:98:fb:ed:ff:e4:71:c9:70:9f:
         1e:57:59:3f:60:1d:68:2a:11:79:9d:28:8f:8e:ea:f9:be:fa:
         80:5e:00:95:1a:4e:15:0b:6c:a2:2a:78:ff:a6:24:cb:6e:bc:
         7d:be:a0:9a:09:41:87:2f:28:62:e4:17:0a:95:85:4d:bc:e9:
         7d:2c:a6:5f:66:19:e5:16:17:61:82:fd:60:45:c8:a1:4b:78:
         cd:bc:de:2d:02:2f:b7:fd:dc:ef:c9:01:b2:05:9e:14:c9:68:
         b3:31:c0:a6:bc:06:96:85:34:3e:69:58:80:b3:be:16:06:18:
         f2:ed:8f:30:07:a8:09:12:7b:11:e1:74:85:ce:a8:81:ee:0a:
         13:51:02:9f:ae:56:6b:17:f7:45:1c:2c:e1:98:d9:9e:1d:46:
         9f:9c:76:12:d1:89:ef:de:56:f2:52:01:10:b5:88:cc:24:3d:
         c7:f2:01:71:88:a5:fa:af:7a:01:03:9d:42:f3:b6:d3:16:02:
         8f:31:6d:5b:b1:14:3e:cb:39:62:b0:80:31:52:11:c4:99:a8:
         f0:be:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:59:40 2026 by rpki-client