Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf237dc7-b648-350b-8444-f27f2b9fcc62.roa
File:                     bf237dc7-b648-350b-8444-f27f2b9fcc62.roa (raw, json)
Hash identifier:          G6xiG+utFcBb7kaDpe9yQ5xI1wqZc1lX+GOOX11mbqg=
Subject key identifier:   E1:FA:73:F7:0E:4A:25:D7:89:BB:00:B9:6F:17:23:A7:99:99:FE:6A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA9ECDF2EC37C04DB72E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf237dc7-b648-350b-8444-f27f2b9fcc62.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33363
IP address blocks:        72.188.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:9e:cd:f2:ec:37:c0:4d:b7:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=09a60d70-81c9-47bc-8b2c-a34f68182bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:d0:fa:c4:9f:5a:90:8f:cf:57:23:45:6a:
                    f1:88:4b:1a:23:5f:4b:62:b3:18:e7:4a:c7:d4:94:
                    e9:a6:65:b4:95:fd:8a:e6:8c:f5:7c:cb:53:71:19:
                    da:91:2b:88:0f:7e:b9:60:58:56:a4:58:f9:9d:5f:
                    60:f4:ec:37:2f:57:f1:b4:41:1d:3c:96:3e:78:a3:
                    49:2c:cc:ef:de:6a:da:83:e4:95:22:f8:e6:1f:fe:
                    04:c0:e9:97:13:82:97:4c:bb:7a:ef:8c:20:70:27:
                    cd:c5:b4:78:f3:f9:c8:40:e5:73:6d:39:0e:1b:93:
                    6f:1d:15:7b:9b:b3:8f:45:b1:39:74:c5:5f:74:d1:
                    b7:6e:48:a1:29:ee:b0:47:d6:9e:71:5c:78:8a:20:
                    22:d6:aa:d5:9d:f2:da:02:4b:4c:24:dd:1d:94:5d:
                    ce:b0:98:98:68:6d:90:43:9d:ce:15:9e:ca:f9:a1:
                    0b:07:78:5d:41:04:21:b7:56:dd:f8:8f:4f:a5:3d:
                    b2:1e:31:b2:c7:35:86:30:93:c9:3c:f1:19:ea:31:
                    16:a8:07:e1:80:f4:51:f2:eb:22:4d:6a:f1:bb:f8:
                    09:83:3d:98:af:b3:dc:97:88:21:94:9a:69:42:11:
                    3e:f5:ee:84:9f:cd:a8:2a:d7:fb:ce:08:71:dd:b7:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FA:73:F7:0E:4A:25:D7:89:BB:00:B9:6F:17:23:A7:99:99:FE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf237dc7-b648-350b-8444-f27f2b9fcc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.188.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:72:ea:9b:af:59:44:b3:b2:e6:6f:50:06:dc:1a:6d:89:
         12:30:f6:7f:38:81:2c:6e:b6:2c:6b:ca:e0:75:22:1c:b7:38:
         28:18:ee:6d:d3:93:67:89:a5:bb:05:75:23:5b:6b:03:03:ac:
         b9:c2:6f:95:ab:5b:54:b1:2f:36:48:95:a9:91:ca:44:f1:8e:
         bc:fb:64:cc:49:68:52:8f:55:44:24:ed:4f:75:18:3b:3a:f8:
         d7:45:67:1f:b6:88:22:4d:bc:69:9a:51:85:17:f5:ea:9a:55:
         be:89:dd:c2:6e:df:ab:66:37:72:2f:49:8f:e0:71:b9:ca:7d:
         cf:7b:8e:8b:d1:8b:64:e1:aa:90:2f:8c:39:a5:fd:d3:49:34:
         b1:a1:b3:a8:1f:4e:87:77:06:9f:21:8c:67:52:4f:df:8d:0b:
         f4:f8:11:97:55:ab:93:36:d7:90:d9:77:d9:a0:84:e4:2e:db:
         fb:10:17:5f:8e:a5:6a:4d:41:5c:4b:87:25:c5:a6:e0:55:65:
         af:c4:e8:f0:f4:25:1f:9f:18:0e:0c:c1:ec:fc:be:e4:af:b6:
         a2:a5:b8:b7:29:93:a5:f1:a8:ae:6f:6f:b9:d9:1e:a9:31:8b:
         62:bb:a7:16:ec:c0:4e:37:43:47:78:9c:41:1d:95:57:b2:06:
         51:2c:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:40 2026 by rpki-client