Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/37a264b3-42c4-3426-a5ed-8a8593d08049.roa
File:                     37a264b3-42c4-3426-a5ed-8a8593d08049.roa (raw, json)
Hash identifier:          WBVM2V6F4GgTyiJkdrzkW9M5LLobqxWBHdZATAPNuKs=
Subject key identifier:   29:F5:20:86:F4:AD:A9:26:B3:5C:FD:47:E4:E6:36:AE:B4:E9:FC:F4
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584DB4A588FCFCE817851D4D1500
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/37a264b3-42c4-3426-a5ed-8a8593d08049.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     23470
IP address blocks:        172.93.96.0/24 maxlen: 24
                          172.93.97.0/24 maxlen: 24
                          172.93.98.0/24 maxlen: 24
                          172.93.99.0/24 maxlen: 24
                          172.93.100.0/24 maxlen: 24
                          172.93.101.0/24 maxlen: 24
                          172.93.102.0/24 maxlen: 24
                          172.93.103.0/24 maxlen: 24
                          172.93.104.0/24 maxlen: 24
                          172.93.105.0/24 maxlen: 24
                          172.93.106.0/24 maxlen: 24
                          172.93.107.0/24 maxlen: 24
                          172.93.108.0/24 maxlen: 24
                          172.93.109.0/24 maxlen: 24
                          172.93.110.0/24 maxlen: 24
                          172.93.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:88:fc:fc:e8:17:85:1d:4d:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=6df8931b-72fd-43eb-899f-839f5d67a51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:12:ba:32:13:07:be:71:08:2e:67:cc:9e:
                    70:3a:34:a4:0b:ea:57:27:63:3d:c4:6e:48:83:ed:
                    b6:c3:7b:c9:40:0b:1b:6a:61:1d:89:b0:f6:eb:d1:
                    7c:2d:f6:70:4a:54:ff:ae:6f:46:de:0d:13:af:44:
                    d3:69:03:bc:b6:25:20:9a:62:65:cf:8b:2a:e8:b0:
                    ca:ed:a6:74:59:51:88:f0:f0:88:54:d3:ce:67:d1:
                    25:b5:ba:6f:e0:ab:55:e9:ac:f5:a6:de:0c:90:9b:
                    ac:20:07:d5:03:61:ad:1b:a3:a1:a0:ef:75:29:25:
                    3d:0c:33:43:4a:c1:6d:28:af:36:bf:51:48:cd:8d:
                    f1:6e:7a:6f:e3:0f:8c:97:bf:4d:fe:18:ac:df:ce:
                    cc:aa:9f:16:58:ed:00:58:ca:e7:20:04:1b:a3:d3:
                    3c:c4:9b:48:5e:d5:8d:6d:68:3d:1c:ec:21:6c:67:
                    ad:2c:2d:6b:21:6f:b7:eb:f8:08:41:9b:0c:09:c3:
                    2e:ea:69:80:cf:0d:1e:c8:ef:bf:e8:a9:5e:da:e9:
                    63:04:32:94:22:e0:04:64:2d:06:e0:a3:ce:9b:6a:
                    0e:90:9a:e7:d2:b5:db:f9:a5:cf:21:bc:1d:93:66:
                    ce:e2:2c:d4:05:3d:f6:9c:c8:68:a2:c5:f1:b8:c1:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F5:20:86:F4:AD:A9:26:B3:5C:FD:47:E4:E6:36:AE:B4:E9:FC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/37a264b3-42c4-3426-a5ed-8a8593d08049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:ef:63:19:d3:5f:5b:2d:27:2f:77:df:fa:26:ee:fe:7f:
         65:5c:7b:d5:84:2f:08:de:53:76:9d:e2:e5:bd:0b:7a:9f:9e:
         2c:4a:02:53:a8:8d:b7:cc:4a:42:7c:0c:1d:83:ab:c0:b0:a5:
         bd:b3:92:78:31:2d:2f:80:20:1e:1d:c2:f7:ed:35:a7:9e:6a:
         b4:72:3f:51:a6:2a:be:c6:d9:1c:87:15:a9:80:e0:c6:ab:e5:
         f6:6e:a1:b7:fd:56:02:7d:a8:ed:07:5f:30:08:4a:6a:f9:5e:
         a5:97:b9:07:e1:dc:f4:0d:ee:80:93:5c:bc:a6:2e:80:b6:4f:
         d3:b2:a9:74:21:f1:f6:8a:45:a8:54:17:fd:ed:e5:84:12:9d:
         01:b1:29:48:d9:25:ec:86:6c:21:a5:13:55:06:64:c8:66:ed:
         3d:8c:94:19:9c:60:17:ca:15:45:a3:ad:9b:c1:b5:27:13:bc:
         d6:22:91:8f:95:d8:27:5d:dc:13:11:b9:0a:b4:6d:40:1e:37:
         14:a2:b2:5c:85:e9:46:42:3e:4e:99:2e:66:23:15:fb:ae:4a:
         cd:d4:2a:9a:5d:93:75:c9:6d:31:ef:d0:ab:6d:7e:7d:47:ab:
         e6:c6:59:bf:48:48:74:4a:66:f1:a2:9a:e9:12:ef:0e:6d:2d:
         d0:d1:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:35 2026 by rpki-client