Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa
File:                     f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa (raw, json)
Hash identifier:          DPckoJ1Iw+cpxeESrOPrpdra00bMWfEPy4Q1h6tgsz0=
Subject key identifier:   4D:72:77:9C:CA:A9:9B:7B:B4:B2:8B:84:51:C1:0B:D5:8E:40:35:19
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584ECBD1DDE17ADE412FA6F5D540
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     54032
IP address blocks:        72.233.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:dd:e1:7a:de:41:2f:a6:f5:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=ef9e2e21-e88e-483a-b2c9-15071293f677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:79:0a:ff:89:d7:09:f7:79:ae:33:e2:de:
                    48:3b:df:f6:4e:0f:fb:c5:87:42:24:79:ac:ea:23:
                    04:39:0b:7e:1a:8e:47:1f:65:ca:7c:13:dd:f8:c4:
                    2a:9a:cb:85:65:94:3b:5f:e5:ed:da:4d:72:73:7b:
                    30:2d:03:c8:5e:79:72:01:b8:16:0a:66:12:91:d8:
                    1f:7b:19:0d:8c:89:7d:0e:56:50:4a:6c:43:b0:03:
                    39:22:21:27:97:49:5b:11:b0:0c:5e:f2:96:db:78:
                    d0:d2:c0:e9:28:5a:a2:07:77:39:dc:20:a0:a6:cb:
                    cb:75:91:91:33:00:78:56:45:99:32:28:97:95:e6:
                    42:ab:89:e6:37:76:13:84:ea:20:70:57:51:f4:97:
                    7c:9e:bb:9a:42:18:4f:35:2c:2d:80:ea:d4:18:09:
                    b9:d3:d2:41:14:e3:9d:de:a5:7f:c5:7c:8f:ca:1d:
                    9f:9b:58:12:28:11:f7:e8:ea:6a:9d:ee:b0:d1:3b:
                    b3:b3:cb:3d:f3:3f:19:ad:df:81:bd:24:24:e0:8b:
                    73:77:42:26:d3:49:9f:81:f2:63:dc:a0:8c:26:47:
                    2d:8c:85:77:32:74:ef:59:98:d2:94:ef:55:e7:6b:
                    47:e0:d5:69:6e:ac:89:13:ea:65:89:7f:20:ba:10:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:77:9C:CA:A9:9B:7B:B4:B2:8B:84:51:C1:0B:D5:8E:40:35:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cc:51:c0:c9:a6:58:f0:ab:e0:c8:dc:f4:f8:ef:5f:40:5a:
         f6:ea:02:8b:e9:7a:5e:ee:48:18:b6:b7:bd:3c:38:c9:33:42:
         12:0f:8e:32:23:de:dd:5f:04:00:2c:cb:22:82:2e:6e:9a:c2:
         0f:fc:65:ee:e3:53:09:21:7b:d1:da:90:38:cb:4e:cc:e6:85:
         61:02:fa:cb:db:34:02:1a:af:54:67:e5:b5:7d:10:92:eb:2b:
         70:6e:f8:b7:8f:d7:12:c0:c0:cc:04:92:9d:af:bb:a2:da:13:
         a6:4c:0a:b2:22:77:ed:98:fc:b0:c7:85:14:90:95:b4:5f:91:
         3d:b8:d2:a7:20:3d:f9:e2:23:ec:e5:5d:f1:79:03:77:98:20:
         11:88:7e:f4:26:52:45:d7:c6:7e:0c:10:37:99:c4:67:77:7d:
         62:a4:88:9c:71:69:53:d4:d7:63:90:d3:71:2b:04:eb:2b:c6:
         b0:55:2f:7c:85:be:aa:e7:19:3d:81:52:5b:2f:3d:8d:21:83:
         82:ab:18:07:7a:d5:ce:38:13:a5:3d:e0:ff:fa:80:9c:e7:c1:
         79:7a:38:4a:0e:06:aa:35:e3:93:79:84:72:ce:20:cf:01:2c:
         25:c0:63:3a:9c:96:46:72:0a:82:88:60:50:73:e1:85:45:b7:
         d5:85:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:01:16 2026 by rpki-client