Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
File:                     703f5f39-4ca1-3844-a475-708e53f14853.roa (raw, json)
Hash identifier:          HD9frUTAm8Aot62HUvNunTuBnWaEDJ+/e/UhNHF6mAc=
Subject key identifier:   9C:5F:C9:67:87:94:EE:A4:72:7C:50:FF:40:DB:8E:DF:EB:A4:36:50
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584E9A7FE14322938312225FC780
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     36114
IP address blocks:        72.46.128.0/22 maxlen: 24
                          76.164.192.0/22 maxlen: 24
                          76.164.206.0/23 maxlen: 24
                          104.143.10.0/23 maxlen: 24
                          2605:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e1:43:22:93:83:12:22:5f:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=118cd4fc-0b94-4ff6-ad51-834e8339bebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:11:40:32:d1:33:cc:88:eb:d4:39:0b:ed:
                    32:3a:d1:aa:ed:5f:69:d7:80:1f:00:f1:8a:f9:d3:
                    42:e2:48:2e:d1:d9:4b:33:27:e9:2c:5f:53:f7:00:
                    d8:0c:ed:4d:c4:1a:ff:31:af:d0:94:4f:64:f7:70:
                    9b:f6:a6:6b:55:a5:86:8d:12:15:30:72:ef:33:8f:
                    94:ec:1f:2f:64:15:0a:8d:f0:50:d8:f7:de:9f:48:
                    7e:61:93:8f:a0:e7:51:4d:0a:b1:ee:4a:75:27:67:
                    db:a2:37:06:7b:d7:87:18:12:74:73:1d:8c:c4:62:
                    37:32:b1:a8:84:77:4a:ae:92:82:b5:30:5e:7d:f4:
                    77:7a:ad:7f:cc:50:f5:83:99:fa:5e:b2:55:9e:b7:
                    07:22:65:75:53:41:63:68:61:b1:35:2a:db:61:fb:
                    fa:de:89:61:e5:a5:60:34:95:a8:47:19:39:d4:29:
                    5b:4a:b7:22:55:5c:dd:21:20:5e:8b:1a:f8:c0:cb:
                    32:87:78:b0:92:04:56:33:18:ec:7b:d6:12:fb:43:
                    6c:43:d5:ec:0d:a9:5f:d8:ad:6c:52:ff:cb:9f:12:
                    c0:2d:8c:8f:fc:ec:1f:3b:70:eb:27:4c:ea:e2:6a:
                    52:4c:13:6c:df:a1:24:b5:60:ee:c1:8d:3c:6f:dd:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5F:C9:67:87:94:EE:A4:72:7C:50:FF:40:DB:8E:DF:EB:A4:36:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/22
                  76.164.192.0/22
                  76.164.206.0/23
                  104.143.10.0/23
                IPv6:
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:fc:36:6d:b0:9e:8a:5a:18:61:12:9b:ec:81:23:71:a2:
         a8:32:2a:71:6c:7b:be:6f:ac:44:34:13:c6:91:09:38:58:c6:
         57:ad:cd:20:dd:05:f3:fc:44:48:22:9c:85:8e:b1:4a:81:79:
         30:00:68:ee:ca:3a:1b:6e:ef:33:e6:7a:f1:0d:07:76:8d:06:
         07:06:e9:96:23:69:1e:7b:e9:d0:c2:e4:c3:c8:73:b9:5c:91:
         c5:66:76:9f:f6:50:ab:80:7d:54:cd:41:a1:95:af:b7:fa:9f:
         f4:bd:f2:2b:e6:e1:6b:03:95:f2:5a:c3:18:99:78:85:42:79:
         f1:b7:36:d1:78:f4:76:2e:90:ed:e6:69:3d:c2:64:f2:0c:ac:
         53:cb:e0:de:93:e1:2e:85:72:fd:0b:1c:15:39:d5:09:9f:53:
         cc:c0:8b:ae:dd:2d:d3:72:ca:4f:2c:1d:65:70:2e:fe:ef:15:
         3b:3d:b7:5d:93:e5:6b:6f:d9:97:af:a0:d7:d0:06:9b:65:2b:
         20:11:47:c1:94:88:a1:ab:6d:19:0e:5d:ba:5d:2b:c2:f2:37:
         54:ba:81:57:41:4d:7d:0c:69:ed:97:29:4d:34:ba:99:ca:18:
         6a:0b:66:c2:fd:e5:11:5d:19:6b:0c:55:0a:b8:b0:b0:02:e6:
         75:04:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:20:28 2026 by rpki-client