Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa
File:                     36891b6f-364a-36d2-91fd-846ddb4cdb41.roa (raw, json)
Hash identifier:          NvPRyCz3Ykxhb7K7AmmMhO381nKq+EJQGRfyeU7l3LE=
Subject key identifier:   04:B6:8F:7F:FD:60:B4:2D:98:5C:AD:60:B8:4C:AD:B4:99:25:41:BD
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584ECBD1D3A4F5EA493EF2E14140
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     22742
IP address blocks:        72.10.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d3:a4:f5:ea:49:3e:f2:e1:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=56fc48c5-624e-4a34-9f48-b6c2e5cf5f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:e6:50:2d:23:bc:b7:0c:c9:55:aa:d0:3a:
                    ab:1f:a8:bd:48:8b:3f:7b:a1:ba:df:b9:48:65:40:
                    2c:3c:c7:25:70:0e:3b:12:83:e4:99:39:81:3f:4e:
                    c5:40:61:73:92:41:8a:e4:a5:71:67:63:ed:d8:a2:
                    07:49:7b:ad:52:ac:7c:be:2d:01:86:69:68:ea:02:
                    b1:7b:3d:d5:bf:90:a1:89:4f:bc:7d:19:7a:6c:b1:
                    3b:d1:ec:0c:3e:05:0c:c0:d2:b6:db:d8:4e:39:cd:
                    d1:b3:7d:57:1b:7b:6e:d3:fb:c4:09:f6:3d:db:46:
                    c1:e5:a2:d6:76:21:4e:72:c5:f0:0c:49:66:37:d6:
                    0b:23:8e:20:eb:c8:08:74:3c:02:c5:bf:fb:48:9e:
                    26:47:40:00:a6:17:40:3c:50:69:02:74:dc:d5:0c:
                    13:2a:2d:86:1b:7b:a1:03:7b:62:0c:50:79:c7:f4:
                    8f:47:5f:59:b5:bc:18:5e:39:0d:d1:25:1b:0f:45:
                    71:fd:ad:22:93:1a:58:0b:30:13:a6:d7:65:58:65:
                    01:78:c3:2f:e1:93:c3:ba:53:24:65:06:72:14:8d:
                    9e:80:0f:66:e5:0c:8e:94:94:b0:fe:37:0c:79:3f:
                    36:2c:bc:24:fb:8d:f1:38:e0:49:f8:c5:00:07:00:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:8F:7F:FD:60:B4:2D:98:5C:AD:60:B8:4C:AD:B4:99:25:41:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:46:17:65:48:54:8b:1e:af:b1:8d:e8:6e:13:d8:02:31:
         3b:b8:45:57:3b:14:ca:0a:23:94:44:59:24:90:23:3c:a4:bc:
         26:a7:20:f7:d1:dc:81:c1:62:4f:91:7e:c7:4c:a0:b8:db:14:
         12:39:22:7e:d9:fe:59:2c:90:40:da:f3:6e:dc:87:15:33:68:
         fe:e7:9e:fe:01:67:c6:68:21:d7:6e:44:ea:0d:36:79:87:29:
         2b:e7:04:10:d1:08:86:0d:13:9a:99:9d:28:2d:68:cc:dd:dd:
         ae:fc:fb:7b:81:4a:78:6d:e1:c4:29:1f:58:9f:8a:3b:ed:97:
         ef:f2:97:d4:41:49:bf:37:b8:0b:03:a7:7d:75:b8:23:06:a8:
         c7:5b:5f:8b:d5:d6:eb:1e:e0:6a:85:c2:ff:94:56:52:b4:4f:
         a3:71:07:4a:75:f8:40:a6:dc:5a:ed:91:ae:0f:91:7c:7c:6a:
         48:41:2a:95:00:b5:5c:43:27:8e:4b:2b:f3:ac:8e:59:fa:74:
         87:2b:74:1b:60:b3:2d:d6:ef:01:96:35:5b:cb:8f:a7:b0:86:
         0a:a1:3a:96:f6:b9:f2:ba:41:18:f7:21:bb:43:6d:58:ec:bd:
         e4:cd:d7:c9:76:84:2c:80:b8:e0:a1:d0:1b:fb:99:e1:04:b3:
         3e:db:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:53:21 2026 by rpki-client