Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/396c3a2e-bd2b-35ff-98ce-637b57bc7026.roa
File:                     396c3a2e-bd2b-35ff-98ce-637b57bc7026.roa (raw, json)
Hash identifier:          8Df7sU/R9ZPRT+MEIfc9sfSQxHqlFM0r3hhBYFR17mw=
Subject key identifier:   8A:E6:B4:67:1C:D1:20:DE:AD:0D:7A:57:6B:62:BB:53:AA:3F:1A:26
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E534F35AAE5F338BD8AB82800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/396c3a2e-bd2b-35ff-98ce-637b57bc7026.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     274035
IP address blocks:        72.1.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:35:aa:e5:f3:38:bd:8a:b8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=32fc4bb1-3e02-4f20-b17e-814a312a505f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:ee:89:74:77:16:71:3e:e2:23:ae:14:97:
                    9b:a2:8f:fd:8e:fe:73:ed:6e:3d:9a:8c:c1:53:a6:
                    71:4e:33:44:d8:8c:7c:c3:62:b2:b4:b3:ed:7e:98:
                    94:1c:c6:0e:0c:2c:ec:ea:3c:bf:e1:41:ce:6d:13:
                    63:b5:80:84:41:19:6e:c1:07:8d:2c:f0:50:37:5f:
                    ec:ac:01:ac:9c:98:22:64:c5:1c:d6:d8:74:c4:68:
                    22:8c:32:01:98:12:a7:1f:35:08:22:ba:a1:4f:6c:
                    d9:38:e5:75:1e:a6:df:9f:17:7e:1a:3c:f8:84:1f:
                    4f:f3:d3:37:b1:dd:c0:ca:0a:15:d7:5d:4b:b0:b7:
                    7d:12:c8:43:60:cf:4f:02:ef:49:96:45:e7:0f:53:
                    ab:35:42:75:ad:ca:82:26:cc:3d:9d:ce:2e:1e:f8:
                    91:00:f7:e0:7a:50:27:5b:17:2e:4f:70:bc:f3:e9:
                    f1:9b:6f:be:c2:51:22:05:d9:83:df:1b:c5:2c:26:
                    ad:ed:40:c3:ef:39:f7:9d:90:c8:b8:9d:f9:5f:50:
                    87:ed:0b:e7:33:b6:83:48:5e:05:18:63:05:80:62:
                    3e:c0:26:a4:5a:91:67:42:ef:96:99:3e:8b:7c:0e:
                    83:d7:f4:74:f4:38:d6:5b:d2:67:2c:99:53:0f:bd:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E6:B4:67:1C:D1:20:DE:AD:0D:7A:57:6B:62:BB:53:AA:3F:1A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/396c3a2e-bd2b-35ff-98ce-637b57bc7026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:30:43:af:f6:b0:c8:7b:4e:5e:44:69:10:8a:2d:00:62:48:
         da:64:62:b8:61:8f:31:04:50:1b:03:b2:24:e1:24:60:d3:f5:
         67:b0:1c:b4:07:e6:68:de:cf:e3:55:7c:ed:87:55:5d:62:66:
         98:37:11:47:f7:3f:53:66:c0:fa:7a:6c:e1:21:28:30:ac:53:
         c4:58:fd:3d:87:e2:3b:65:11:7a:b1:0a:c3:54:29:5b:1e:ce:
         d6:e5:29:5a:b8:d5:63:c5:85:c9:a6:da:e7:e5:20:8f:78:bf:
         52:3c:c8:1e:e3:0b:a7:38:07:fa:9f:9a:b2:e7:f8:b6:91:19:
         a2:00:e6:9f:f4:23:3a:fd:2e:2b:b1:a8:34:d3:c5:90:a7:1d:
         23:98:89:74:8a:d5:d2:29:96:0f:26:7b:d1:cd:e5:c5:fe:e8:
         fc:23:3d:3c:1c:4c:22:52:ec:bd:0d:6a:7e:ce:a3:b2:d8:d8:
         67:31:2f:17:72:15:1a:19:42:4b:28:5f:6f:30:0b:81:d6:58:
         b0:3e:ca:96:18:ec:d7:98:4c:a7:38:82:d4:c3:47:42:5a:47:
         85:6f:07:60:75:23:1e:c7:ba:d0:26:f3:51:f8:3b:74:66:d2:
         31:e1:82:ce:15:21:be:66:0c:7b:06:e9:97:ef:2e:8d:4c:08:
         8f:6f:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:50:07 2026 by rpki-client