Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/fae54638-f451-3725-91d5-9933454dad2d.roa
File:                     fae54638-f451-3725-91d5-9933454dad2d.roa (raw, json)
Hash identifier:          t1Zx2NsjgLjYbx/6v4D1N3m8uAVEXGvHa4ziqPqviNg=
Subject key identifier:   E7:49:02:0D:CF:8E:A7:B8:E5:86:59:C9:1F:D9:C0:86:98:FE:14:39
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F682815436EC763096AA3D290
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/fae54638-f451-3725-91d5-9933454dad2d.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        72.1.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:15:43:6e:c7:63:09:6a:a3:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=bf0c6535-48da-45bc-a417-94fbcb4e3fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:c3:bd:c6:ad:3b:40:6c:12:1d:08:ee:9a:
                    bf:eb:e1:78:81:9f:67:0e:f2:61:0f:29:c8:22:ec:
                    e0:4f:d7:f1:83:cb:f8:9f:40:90:47:87:ec:d0:5c:
                    f8:3e:fd:7f:23:54:44:8a:9d:15:b4:7e:75:9b:72:
                    14:bf:e5:83:a1:33:2f:92:75:94:0c:dc:37:76:ba:
                    4f:0a:9e:d2:05:e0:c4:c3:13:b3:29:b9:41:e3:2d:
                    79:39:88:57:73:3f:9c:23:72:73:a8:c1:ef:e9:b3:
                    02:b5:5e:e6:62:9b:7e:9b:b3:3a:b3:82:f1:e2:f2:
                    95:1e:0e:3a:f8:9a:df:67:38:18:38:d5:ed:b8:9a:
                    73:4b:31:d7:05:cc:3e:bd:70:67:f7:4c:8a:fb:68:
                    b5:3c:44:14:46:6a:0a:6c:20:92:d9:c2:ae:10:8f:
                    56:15:1d:39:d8:1f:65:0b:e3:c4:97:ef:b9:00:4e:
                    b7:ed:e7:76:b2:5c:75:69:ef:51:66:ed:93:01:7f:
                    81:de:41:06:91:b3:d9:5f:37:98:99:39:fc:dc:08:
                    b1:5e:f4:82:ac:69:08:0f:39:90:b1:53:3a:56:b7:
                    00:89:96:62:d1:cd:c7:99:c9:9e:67:c6:bc:86:20:
                    10:26:4b:50:f3:37:fe:eb:58:66:23:fb:73:b0:64:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:49:02:0D:CF:8E:A7:B8:E5:86:59:C9:1F:D9:C0:86:98:FE:14:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/fae54638-f451-3725-91d5-9933454dad2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:68:f7:d3:cd:65:c9:de:2c:c9:af:4f:5f:3c:98:eb:9f:f5:
         58:9d:4c:a2:a3:d8:8f:b1:fa:aa:93:59:2c:25:b7:c9:48:9b:
         46:33:bd:1b:61:42:ff:6d:de:21:6d:10:7d:5e:96:b4:04:98:
         d9:dd:73:91:29:66:49:f4:3f:cc:db:38:90:64:ff:18:c8:69:
         43:d1:0e:0a:2f:ab:3d:b3:d7:33:57:65:3a:b2:c2:3c:6d:73:
         e2:a3:f5:bd:f3:33:4c:cd:49:25:82:84:ac:6f:77:4f:94:63:
         0f:85:7b:1b:1b:2b:13:83:3f:7f:98:22:da:9d:4d:45:c2:7e:
         f2:a6:e8:be:f4:52:85:dd:b7:91:63:c2:9b:b2:5b:6e:71:06:
         08:ef:fb:83:2f:cb:0c:c0:46:f3:ce:94:e0:72:11:c6:df:e9:
         cd:b3:22:2c:09:66:17:64:7e:5e:9f:fe:06:96:58:0f:c4:a5:
         4c:9f:a9:7e:80:6b:ae:6b:b6:c6:63:fb:24:8b:f4:f4:19:dd:
         f4:f4:a0:72:4c:c6:ad:2d:bf:98:14:a2:82:dd:aa:c4:9f:55:
         c0:fd:b7:18:4e:8f:af:c6:66:64:e2:fa:f2:9c:df:4f:51:bd:
         00:48:4d:48:0c:6a:66:08:7a:18:b4:87:68:63:8a:67:89:1b:
         74:2d:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:49:24 2026 by rpki-client