Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34df9244-48be-3b6f-b46a-6d75f98e347e.roa
File:                     34df9244-48be-3b6f-b46a-6d75f98e347e.roa (raw, json)
Hash identifier:          KgZZe6sQ+Eos2QRFTWOCjlAUzTwZmXE/QZvQ+TSlThY=
Subject key identifier:   81:A0:FD:D1:7B:64:51:98:DA:14:20:C1:D5:7A:F4:09:97:37:50:A0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E6574B3116DF20AF5117796C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34df9244-48be-3b6f-b46a-6d75f98e347e.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     2914
IP address blocks:        72.9.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:b3:11:6d:f2:0a:f5:11:77:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=fbdf8007-37e8-4d68-861b-464acfa66b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:0b:01:d4:ee:7a:14:4f:8b:e2:f7:4e:53:
                    12:8a:a8:f0:b4:c9:1c:5c:fe:06:b6:bf:c6:17:2d:
                    a7:1a:e3:03:24:a8:f5:f4:a2:45:5b:ac:09:26:39:
                    2c:05:23:de:10:d2:37:a1:24:d1:86:46:18:70:1c:
                    bf:e9:c2:c7:5e:76:7d:5a:1b:ab:8f:de:1b:e8:79:
                    7e:95:5a:8c:4d:03:9c:07:cb:51:99:28:75:a3:4c:
                    7f:c2:d3:24:f6:93:32:d1:d2:eb:b9:85:01:49:54:
                    dc:cf:af:03:47:10:40:ec:5f:81:9f:66:46:b5:e2:
                    04:e8:56:e0:ae:ed:72:9b:18:25:36:1c:9b:1f:fd:
                    c6:97:e3:86:ce:e0:2b:e8:18:76:87:62:02:3c:f8:
                    32:64:4f:65:69:ea:72:5c:3b:12:5d:b7:55:21:09:
                    c4:24:01:0b:47:b1:23:35:be:93:22:04:8b:ae:51:
                    6d:85:86:a8:0e:8c:e3:b3:2d:ed:86:bf:03:df:2f:
                    c8:40:cc:00:06:71:c9:53:7e:51:25:3d:65:3c:3b:
                    2d:a7:9b:2c:20:f4:df:cf:b8:2d:ae:a9:1c:d5:96:
                    c4:45:4d:03:60:8e:fa:81:f7:6d:fa:38:7d:6e:47:
                    e2:c6:9e:90:14:4a:fa:ad:42:83:49:33:55:8b:ab:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A0:FD:D1:7B:64:51:98:DA:14:20:C1:D5:7A:F4:09:97:37:50:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34df9244-48be-3b6f-b46a-6d75f98e347e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:3e:03:ad:28:40:45:d0:3d:b7:0b:81:79:1a:e2:3f:9c:
         c9:13:95:66:ee:65:19:fd:d1:41:25:8c:a5:bc:9b:16:b9:46:
         12:df:db:79:32:3f:a8:46:87:1e:52:14:0c:ac:bb:c1:ed:a3:
         f7:cf:41:7d:28:5b:49:50:92:02:b4:33:fb:90:88:4a:7f:ff:
         2f:69:7f:98:0e:16:df:ec:4f:e1:c4:18:22:60:04:b3:54:47:
         3c:6b:3c:9d:d4:a8:d4:64:c5:96:5e:a6:70:05:03:1a:78:ec:
         59:ba:bd:bc:30:15:5d:87:91:f7:ab:4b:85:0b:ee:d5:b3:fa:
         f6:d6:9b:51:04:1f:79:4c:0a:c8:41:4c:3e:1c:9d:e7:8a:6b:
         7e:7a:19:cf:1f:c7:53:52:b6:72:05:e0:74:16:7d:f2:b5:64:
         57:a4:b3:d9:0c:35:12:da:1e:92:47:b0:9b:3c:ec:9e:fb:76:
         40:13:8e:80:38:c8:49:d3:da:ee:a8:91:dd:8d:88:9f:3e:15:
         4e:9c:82:a3:f0:e6:fe:59:05:9d:60:e6:f0:ff:c5:56:3d:b3:
         41:60:4b:74:e3:45:44:3f:4e:8e:88:19:bc:2f:34:d2:3d:ed:
         10:d0:56:2d:39:47:4e:0b:b0:90:27:1d:70:e1:5e:27:10:4e:
         1a:ce:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:42 2026 by rpki-client