Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa
File:                     7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa (raw, json)
Hash identifier:          ZuxWU7XqHwOqEVjixhLUdJ5HhFpX0hWm4yfrh/BqSZo=
Subject key identifier:   AE:D7:76:B7:6D:10:4F:57:61:BC:27:91:1F:B0:59:86:F7:E6:13:3A
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584EEA874A7BCE7178D871265600
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     22709
IP address blocks:        72.11.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4a:7b:ce:71:78:d8:71:26:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=bc86f50b-bb45-4614-a057-ad1094ab4289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:c9:89:99:3d:fd:9f:29:c2:14:a2:14:6d:
                    b1:bf:0f:6d:21:7f:68:58:3d:51:fd:54:cf:c5:21:
                    ee:61:cb:4b:3e:33:38:80:1b:af:2d:0b:ca:40:b8:
                    c5:6a:e8:6f:88:05:2a:65:81:51:63:7c:bc:6a:50:
                    5d:5c:10:40:8a:18:ad:b3:77:7d:08:ef:2a:ab:b7:
                    ab:1b:1f:6a:5b:57:97:7f:1f:de:62:ba:3a:cc:4f:
                    6d:1f:8c:84:b9:cc:c5:67:45:24:54:a3:b3:01:9f:
                    9c:9f:aa:25:4c:73:4f:bc:d4:b0:49:03:43:4d:c9:
                    ef:b2:8a:ef:a4:50:9d:ee:aa:cd:1b:4d:4c:c8:43:
                    4f:e4:88:b0:c9:83:25:55:5e:69:07:a4:e0:58:9d:
                    56:a9:60:ad:6a:83:81:43:4a:36:66:f0:e4:b0:87:
                    02:73:2f:0b:2e:c4:6b:a4:67:03:d5:a1:a2:9e:5a:
                    30:db:7e:f1:c6:d0:64:38:77:86:47:f6:5f:f7:3b:
                    16:0f:2c:36:3e:15:36:bf:52:27:70:db:7c:12:d3:
                    c9:98:7a:dc:20:98:03:65:92:21:13:7b:f5:f2:bd:
                    f9:64:3c:79:44:3f:39:6e:bc:81:30:96:79:8e:83:
                    4b:54:8a:5f:8b:df:fe:ce:9c:87:88:62:c0:a5:53:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:76:B7:6D:10:4F:57:61:BC:27:91:1F:B0:59:86:F7:E6:13:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:38:ec:a8:b6:c6:de:3a:4f:c2:71:d6:5e:4e:ad:82:c8:20:
         bb:20:0a:26:bb:e7:70:0d:c9:a7:9e:ad:c0:b5:a6:74:7e:9f:
         39:3e:c7:dc:e7:1e:b3:ac:c7:c3:7c:1b:3f:fe:ad:5b:c2:70:
         53:f8:b5:9d:f0:47:3f:0f:e5:4f:67:ab:8f:79:e9:6b:25:0f:
         5d:01:d3:8a:f6:59:46:2e:e9:ef:a1:09:58:67:6c:50:09:26:
         71:b5:4c:98:cb:fa:7e:1e:8f:84:a1:29:6a:b6:ed:26:94:5f:
         0d:93:ea:c0:3f:40:fe:ff:c6:39:85:d8:5f:ce:1b:e5:0c:61:
         ef:bd:3e:33:f0:94:93:44:ee:da:16:af:25:d0:de:47:32:f1:
         f4:90:d0:80:a9:e2:5f:3c:d6:23:2d:7d:4b:82:13:7d:21:89:
         37:00:e0:98:d9:d1:e2:d4:fe:10:56:a5:ba:50:ce:18:60:b1:
         fa:a8:63:86:ff:26:d9:da:99:ea:d0:76:f9:ca:3b:ee:3f:b5:
         97:16:fd:79:02:cb:66:9d:a3:01:8c:ce:98:42:71:7f:b3:7d:
         9c:48:16:62:fe:6b:ba:ba:a6:c5:c1:d0:d0:4e:42:f4:7d:32:
         06:9a:1f:f7:4e:66:73:29:5b:ad:24:1a:f6:33:2d:e8:d5:04:
         8f:af:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:24:12 2026 by rpki-client