Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6f661fae-cac1-345c-bfa7-3f54c032771c.roa
File:                     6f661fae-cac1-345c-bfa7-3f54c032771c.roa (raw, json)
Hash identifier:          +0jFfL1e7QDoQ5psDKzyNV0TsQx3F3A7eflDub2oj3w=
Subject key identifier:   BF:8D:B4:73:47:BF:F1:36:44:C1:77:49:EA:3F:CB:BF:C4:47:A1:65
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584D0A77A1026FAF158209447880
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6f661fae-cac1-345c-bfa7-3f54c032771c.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     40934
IP address blocks:        72.1.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a1:02:6f:af:15:82:09:44:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=38662681-26c1-4ead-a33e-d96fcd4c49f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:b4:e1:19:ff:58:b9:79:67:a9:cd:3a:b5:
                    71:c9:a1:34:1c:9b:e9:2d:b7:0c:6a:ae:19:22:a2:
                    3f:05:ed:ef:0a:a7:f8:d3:5d:ea:1d:73:66:44:bf:
                    af:dc:f1:26:b8:45:5a:a7:36:eb:ed:c2:87:81:a1:
                    e5:76:16:4b:92:a2:37:80:2d:7f:6a:4b:90:5d:5e:
                    ba:5c:32:20:07:e0:99:5d:32:69:8d:bc:94:c0:f5:
                    9f:d3:76:f0:7a:85:19:44:f6:d1:15:60:92:12:26:
                    80:35:f7:ef:5a:c4:3f:2f:05:59:42:34:3f:c9:92:
                    b2:a6:7d:d4:05:d6:69:27:b1:8d:2d:36:a6:41:fa:
                    c7:91:5b:e4:40:56:85:c5:df:f9:49:cd:f4:db:53:
                    0e:82:63:b0:c6:7d:e4:2d:66:e0:b3:b2:38:82:42:
                    c8:58:e4:98:ff:2e:55:36:9c:6e:33:f6:27:d7:af:
                    55:05:6c:30:a9:43:87:b0:4f:8f:0e:59:d1:02:fe:
                    5d:e2:16:ce:bc:a0:79:4d:1e:dd:1f:4f:5e:06:87:
                    bf:4d:51:45:4c:fb:5d:71:30:17:dc:f1:1f:f7:6a:
                    94:10:cd:89:ae:e5:dd:1d:61:ec:4a:8f:84:2d:8f:
                    d8:07:c2:47:cf:be:51:e1:9a:ce:f3:fe:55:ea:45:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:B4:73:47:BF:F1:36:44:C1:77:49:EA:3F:CB:BF:C4:47:A1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6f661fae-cac1-345c-bfa7-3f54c032771c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:8a:58:22:0d:4d:0c:66:25:4e:df:f5:4f:54:21:1e:0d:
         fc:a5:4c:b2:be:3b:a2:27:d0:aa:dc:0c:19:75:95:29:4b:76:
         50:4b:e3:48:dc:10:23:07:c9:a5:4d:0d:08:d1:47:db:3f:79:
         e3:91:3d:a1:b2:6a:bd:23:7f:a6:8e:09:87:c6:e9:53:d8:ac:
         f5:04:95:c1:d1:d2:bb:09:bf:47:f6:f1:ce:88:e5:b0:1e:7e:
         d7:b4:fd:c6:e7:87:17:71:98:86:9e:b1:a7:28:88:03:f9:dc:
         3a:05:b5:95:49:29:30:04:de:70:25:59:97:26:3f:f3:86:79:
         7c:69:e4:21:87:82:65:40:3e:4b:30:f5:6b:55:79:cf:48:42:
         23:eb:76:63:23:c7:52:da:b2:a8:43:37:0d:1d:33:f5:d0:13:
         21:47:f7:0d:66:47:fc:29:cd:e2:58:d2:5c:bf:f3:9d:54:f1:
         97:01:ef:dc:a1:2b:d7:40:4d:fd:89:87:ff:4e:25:4d:d1:7e:
         03:cc:ce:ad:aa:e4:bb:36:4b:7e:94:42:b9:01:b9:0e:34:90:
         a7:e1:f5:76:1b:17:4e:b7:58:6e:81:6c:99:23:da:ae:94:d9:
         2e:c5:29:03:a4:bb:13:2d:5f:18:f1:11:b7:4f:2d:5c:86:6a:
         62:a9:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:55 2026 by rpki-client