Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa
File:                     dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa (raw, json)
Hash identifier:          dTY3V8TwNhft7NIZ0Biybk5dIjhPPR9k89J3uZ0HKhI=
Subject key identifier:   96:46:8E:5D:BF:D0:D0:6C:99:89:8F:4F:3E:A0:91:83:35:8C:C3:65
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584F3E47E63C447B8D4EF8F68100
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     7992
IP address blocks:        72.38.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e6:3c:44:7b:8d:4e:f8:f6:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=bf0a3379-ca9a-4657-9e89-670462adec30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:f9:bd:9e:b4:94:7e:7b:f5:ae:5f:19:16:
                    75:75:e3:31:4d:5e:13:17:8e:66:4d:b3:bf:51:70:
                    07:ba:30:02:05:25:d2:ac:83:ed:b2:49:04:f0:2f:
                    c2:96:98:95:0e:87:29:aa:d7:83:2d:ea:94:2a:1e:
                    57:b0:88:ae:ce:fd:8c:36:78:2e:1f:e9:82:8c:d4:
                    28:e0:a6:72:c4:92:13:87:8b:9c:60:ab:a7:66:45:
                    5e:86:1d:87:28:55:ff:bf:3b:63:e9:70:29:ee:7e:
                    61:41:1d:1d:98:b3:48:68:d5:ba:c5:43:d2:6c:b3:
                    d8:03:d6:70:34:23:0e:6c:28:72:56:94:0b:1f:78:
                    35:0c:e2:9f:90:62:a6:f6:0c:6f:c6:d3:90:70:8e:
                    d3:92:c8:4e:44:2f:ae:4d:80:05:f5:28:9b:8e:bb:
                    7d:02:7a:ae:38:7f:52:d9:0d:57:80:b5:4c:55:49:
                    09:01:0c:90:f4:6b:9a:58:0b:53:0a:62:a5:1f:6f:
                    63:a7:0d:b6:8b:48:3b:e7:52:cb:2b:0f:29:58:be:
                    47:be:2d:b5:a9:cb:71:a5:23:d0:be:f0:6c:7b:36:
                    1a:e5:a1:b3:62:00:96:bd:75:ad:72:b6:a5:36:02:
                    0b:91:ac:bd:63:ca:ea:74:2b:a3:7f:f9:f6:56:ce:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:8E:5D:BF:D0:D0:6C:99:89:8F:4F:3E:A0:91:83:35:8C:C3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.38.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:db:0d:cf:cc:ee:14:09:59:52:b1:a7:de:83:c1:01:06:
         b4:02:52:61:ed:26:c1:04:0a:af:67:41:7a:ee:13:f3:10:b1:
         16:e4:5a:48:b4:a7:e1:6c:6c:b7:13:42:4d:dd:83:2d:99:30:
         de:37:8c:85:7f:06:bf:ff:bd:c9:ae:b8:94:19:a9:03:3e:0d:
         2e:cc:4d:32:88:7f:a8:2a:75:75:25:3d:b7:af:d1:d5:f8:ed:
         13:12:e1:f2:bd:94:5a:bd:d8:ce:a7:34:4b:a1:8d:77:cc:0a:
         98:85:5e:f4:98:55:dd:f1:ff:c5:96:54:99:e2:b2:9e:51:e8:
         98:eb:e6:2b:ec:c3:2c:3f:c7:c2:cf:db:ea:33:78:d3:68:73:
         06:fe:c1:a1:ca:c3:14:ea:f1:2c:52:24:7d:a3:ff:de:78:2d:
         98:ac:1a:5e:53:4a:41:51:1a:4d:4f:35:01:b2:49:a4:47:2c:
         5b:2e:ae:b7:38:f6:12:50:06:76:12:b2:ed:79:9f:c0:20:dc:
         d6:40:90:83:55:af:3b:72:8f:23:75:04:1d:59:a5:b7:bf:13:
         3a:f7:96:e2:f9:57:62:d3:d9:1d:d6:59:7c:e5:24:8c:20:95:
         a5:38:3c:b7:db:52:1d:00:82:0d:e3:d3:07:27:4f:ba:d1:28:
         d7:c4:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:21:57 2026 by rpki-client