Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/96adfbf1-839d-3d89-865b-f24bc6df6370.roa
File:                     96adfbf1-839d-3d89-865b-f24bc6df6370.roa (raw, json)
Hash identifier:          OQYl4SP/QlMHqJfLSeIJWDPYyXl3rxIGFpi5juf9FUA=
Subject key identifier:   9A:D7:C8:D4:9E:09:F9:13:DE:78:97:2D:07:FE:97:B8:85:CD:15:74
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584D40CA4E9727AF6A18291CA880
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/96adfbf1-839d-3d89-865b-f24bc6df6370.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        72.13.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:4e:97:27:af:6a:18:29:1c:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4a7df6cc-eeec-498e-a6c1-e7383de8aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:36:d4:27:47:78:89:1f:f6:63:08:4f:01:
                    c7:ab:46:32:15:bd:e7:3b:88:d3:dd:4f:96:b1:07:
                    6c:a2:b6:87:92:84:91:4d:a6:76:95:d5:cb:ba:01:
                    bb:8b:c6:e1:9f:e6:6d:3a:26:a9:0f:01:18:a7:64:
                    f3:e2:ff:b5:b0:ff:64:db:64:77:aa:16:6a:4a:58:
                    d4:01:70:42:88:cf:39:8a:62:9d:10:93:8a:df:73:
                    dd:43:db:fe:26:12:75:53:c1:00:32:69:ed:6a:3b:
                    4c:07:1b:12:9b:59:fa:80:c3:bf:ae:d6:ec:79:51:
                    14:3a:78:33:a3:d6:26:68:9c:b0:14:62:d3:7d:8f:
                    d2:bc:9f:b6:d0:fc:b8:da:5b:36:8d:6a:06:f2:00:
                    2d:45:32:33:65:e2:cd:37:5e:dc:ae:ac:07:92:7a:
                    11:93:e5:73:89:ee:c9:a9:87:78:e0:43:fc:6c:75:
                    36:5c:84:f1:0f:e0:6f:87:21:a2:b2:e9:b6:7c:76:
                    2c:e3:c7:b5:2d:d2:8d:02:0c:72:e3:94:a3:82:11:
                    05:2d:2b:f3:fe:78:63:e1:0b:4d:f0:af:91:4e:19:
                    68:94:0f:1b:69:92:fc:f0:12:51:52:59:3a:5d:19:
                    68:12:59:2a:13:91:44:5c:78:9b:2c:25:82:85:d0:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:C8:D4:9E:09:F9:13:DE:78:97:2D:07:FE:97:B8:85:CD:15:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/96adfbf1-839d-3d89-865b-f24bc6df6370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:97:f9:af:c7:79:82:85:4b:d4:e4:24:b2:76:ea:31:f3:
         20:82:99:1e:0d:49:b8:fb:03:4e:42:29:a9:a5:0b:3c:51:a7:
         4b:da:9c:4d:0d:17:c4:da:e0:7c:9e:9f:00:ec:7f:3f:c6:ec:
         bf:93:43:27:78:56:5c:09:ca:05:9e:b1:e6:ff:64:0a:3f:3c:
         e4:eb:65:d4:c3:24:3d:61:cc:92:c3:9a:bb:29:3d:9f:76:34:
         f4:f1:77:20:5b:68:ee:d4:16:55:a2:79:bc:e8:78:71:39:b3:
         9e:8f:93:9b:fe:04:bc:3b:40:86:34:33:31:51:89:9c:77:b5:
         17:48:2b:c6:d5:e1:97:97:c8:c5:55:80:f5:14:3e:e6:52:a4:
         01:9e:78:f5:32:31:30:a1:e5:9b:7f:9b:c6:04:1b:dc:37:8f:
         08:04:39:c3:90:6e:a4:6b:da:6d:99:b5:5f:aa:c8:1a:a3:6c:
         0e:f0:18:12:cd:0f:6e:19:fc:7d:41:28:4c:c9:9f:5b:7d:9a:
         9f:79:23:56:88:57:e1:21:ed:c1:87:9c:47:81:6a:ca:61:7e:
         73:37:50:d1:f7:cb:be:c0:09:7b:7d:52:38:bf:09:bf:5f:1a:
         97:2a:65:af:79:6b:93:d3:a6:b0:6b:aa:f5:14:44:97:07:14:
         da:3c:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:40 2026 by rpki-client