Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/3f0ecf30-525a-30e0-9d17-fe647c455234.roa
File:                     3f0ecf30-525a-30e0-9d17-fe647c455234.roa (raw, json)
Hash identifier:          BzAuLdWzpig85hxN6owUMXyPv30Ru+wVL69n1jUbUng=
Subject key identifier:   DF:2E:77:13:65:BB:AD:E0:C5:E2:A7:F5:9A:23:D3:69:15:49:6C:E0
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F4328584DAC457B41DDCDE03EA8D32F00
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/3f0ecf30-525a-30e0-9d17-fe647c455234.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     35280
IP address blocks:        72.19.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7b:41:dd:cd:e0:3e:a8:d3:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=53cc94bd-8398-4c5e-a76c-f27a76e97e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:d0:62:66:a1:8e:d4:6a:d2:73:70:da:8c:
                    06:0a:09:51:ee:8e:80:63:a8:50:63:ee:e9:24:24:
                    c2:74:4c:65:29:c8:c9:6c:9c:2d:63:7b:11:0d:0c:
                    74:db:8c:b7:87:f8:be:fc:a8:26:c8:ad:74:1b:6c:
                    80:a6:96:b5:36:af:78:23:0a:54:85:94:3d:88:29:
                    15:3a:80:05:73:2d:9e:e5:24:4d:19:df:d4:89:08:
                    0e:e3:81:6e:71:e4:76:27:f8:a8:9c:89:b4:e1:9f:
                    5c:42:26:5b:3f:5f:67:b9:e0:a3:3f:32:d9:5e:fd:
                    1c:dc:c9:f7:14:f0:0b:1c:b8:35:54:9a:75:61:18:
                    cf:a5:3f:65:02:09:d9:33:66:67:b3:87:68:fc:cd:
                    f4:8e:04:1a:20:2b:d7:db:d1:7d:8e:5d:85:81:99:
                    e4:f4:a4:4d:fd:5a:6f:90:69:ca:11:9d:42:35:27:
                    27:db:03:47:a6:26:2a:b6:f3:31:dc:9c:b8:d5:99:
                    ae:54:09:56:a2:65:ff:87:90:3b:cd:53:74:5f:1c:
                    88:f5:3c:db:74:9e:09:b2:45:d3:72:8c:c3:2e:8f:
                    3c:44:ba:d1:f2:8f:a9:2b:ce:6b:b8:06:5f:c5:17:
                    97:77:9d:65:3e:f6:59:5a:8b:9d:32:d3:b9:e1:6c:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2E:77:13:65:BB:AD:E0:C5:E2:A7:F5:9A:23:D3:69:15:49:6C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/3f0ecf30-525a-30e0-9d17-fe647c455234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:8e:08:eb:d3:cd:a6:19:a8:7d:14:4c:50:8b:83:6a:92:
         97:15:d3:a3:fa:cc:e1:4f:2a:42:91:ce:9d:2c:45:88:5b:dd:
         86:73:d6:03:51:0a:73:cb:84:7d:c9:19:d8:c5:51:0d:a9:fc:
         5c:00:bc:72:12:e0:73:22:24:84:0f:95:a4:e5:53:76:2a:4e:
         9d:fb:a8:2d:7a:6d:16:bd:17:e4:2f:db:79:66:3d:91:3e:a1:
         54:87:33:7c:f1:0e:22:18:d6:09:c0:78:4c:f1:dd:f9:ce:c8:
         26:09:5d:c5:78:dd:af:8e:64:78:ad:99:28:c0:19:83:23:cd:
         b6:20:c1:6c:ff:2d:cd:71:e6:93:c5:8b:ae:aa:b7:14:72:00:
         1e:cb:d1:14:08:8c:47:74:10:2d:a4:3e:65:93:ff:aa:39:aa:
         c4:8e:0e:56:42:81:63:fb:53:e9:56:ff:bd:47:81:f2:14:63:
         e1:15:85:84:2a:be:d7:0c:f3:5f:b9:c4:0e:ec:20:0d:73:93:
         10:0d:5d:ed:97:e2:be:ab:af:28:0b:b2:f5:0c:75:4b:c3:78:
         69:62:33:9e:8c:e5:2f:87:f4:ea:45:ff:fd:f8:3c:db:b9:7b:
         3a:48:71:7c:85:72:2a:e5:67:44:d0:1d:02:8e:86:92:57:ae:
         42:df:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:41 2026 by rpki-client