Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/e3774d17-055a-32f2-83ee-52b97836b08c.roa
File:                     e3774d17-055a-32f2-83ee-52b97836b08c.roa (raw, json)
Hash identifier:          SRivYOioEC/IL9M1jKzqA+DD6av9YPbNxpFfCpZN1P8=
Subject key identifier:   1B:38:56:EF:3A:D4:30:02:15:FE:88:B7:6B:9C:32:CE:64:5F:3E:98
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584D23B81E76C53487516DBA5A60
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/e3774d17-055a-32f2-83ee-52b97836b08c.roa
Signing time:             Thu 12 Mar 2026 03:05:51 +0000
ROA not before:           Thu 12 Mar 2026 03:05:51 +0000
ROA not after:            Wed 10 Jun 2026 03:05:51 +0000
asID:                     26277
IP address blocks:        72.18.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:b8:1e:76:c5:34:87:51:6d:ba:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Mar 12 03:05:51 2026 GMT
            Not After : Jun 10 03:05:51 2026 GMT
        Subject: CN=0702d298-7ee9-4290-8163-860c4d847f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:74:a1:01:bf:36:b7:67:3b:ff:41:05:f4:
                    66:5c:80:45:0b:91:0a:6d:6d:3f:a1:8f:2d:e3:4a:
                    4f:96:9a:61:a6:f7:81:ef:40:d3:b1:1c:63:c0:4a:
                    42:11:1e:e9:40:9d:6b:75:18:8d:d7:f5:5c:19:b6:
                    8a:51:2d:f1:9c:4f:b8:0e:8a:c6:bb:66:f0:49:51:
                    96:d6:85:20:1b:1f:5d:58:9d:67:46:c1:ca:1b:a5:
                    43:ee:4c:ad:0d:ad:a7:ac:d5:99:ed:cd:cb:9f:12:
                    44:15:bb:f3:c1:90:06:c4:e9:7b:59:67:3d:cb:bc:
                    ed:99:ae:4e:f6:16:c2:d9:27:b2:8f:8a:df:32:cc:
                    05:0e:8f:a0:98:d4:3c:30:68:67:f5:32:a1:9e:ad:
                    de:ea:15:82:72:cb:0c:b4:e8:98:ca:16:a6:dc:99:
                    2e:a5:7c:cb:b7:9d:e0:ed:27:24:77:92:0f:fd:9f:
                    c2:16:99:b7:50:c9:c4:9b:0d:b8:6c:93:d4:36:38:
                    dc:86:b4:b3:00:5e:27:dd:33:7f:20:07:f8:b8:8c:
                    ac:6d:e3:ee:9d:ac:b5:d5:19:ba:e1:21:b9:9f:ef:
                    35:9a:e2:cc:b1:f6:6a:04:dd:3d:eb:45:94:77:1d:
                    21:2f:90:52:74:92:82:17:19:91:8a:e3:d3:8b:82:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:38:56:EF:3A:D4:30:02:15:FE:88:B7:6B:9C:32:CE:64:5F:3E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/e3774d17-055a-32f2-83ee-52b97836b08c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:c9:4a:37:73:5b:8d:2b:ac:30:d4:6f:2d:9f:37:c8:92:
         cd:a5:3e:2b:36:ec:c4:44:9d:44:a5:9f:1f:a3:b9:7f:ba:18:
         41:1a:af:bf:9b:f0:02:59:4d:2d:af:f4:f9:70:29:9b:96:4f:
         ae:f5:a7:2a:ff:75:b0:e5:90:a2:e5:57:89:eb:85:2d:89:14:
         67:cb:ea:b5:fa:46:1e:c5:ed:3a:eb:2a:ea:b0:5c:d7:1a:cb:
         49:cc:99:66:d2:da:ce:d3:85:f4:8c:c8:dc:67:2f:7b:57:e9:
         b7:ba:70:3a:d5:f4:be:56:c3:a1:da:d6:87:01:5f:f8:e6:80:
         1d:8a:de:f9:67:32:f2:fd:c9:ac:6f:7d:44:53:6c:92:1e:cb:
         73:7f:7b:31:50:91:5c:f2:32:b7:0b:98:75:f8:39:2c:19:9e:
         77:7f:95:b7:4e:cb:fe:fc:b3:fb:30:de:74:99:5d:e4:17:0f:
         3a:66:5d:ee:ea:e6:cb:cb:35:c3:26:1d:16:f0:82:9b:af:ac:
         ed:f3:7b:c3:9f:a9:f4:73:71:82:0b:3f:5f:6a:68:66:5b:10:
         0b:92:83:0d:ba:71:d9:f5:5e:67:ff:6d:00:09:3b:6f:07:30:
         9f:c6:c5:c2:c2:f7:00:61:a7:8e:c6:a4:04:49:51:f3:ba:bc:
         14:e0:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:13 2026 by rpki-client