Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/5b4535e0-62df-3f94-ac8a-66c1fa493a73.roa
File:                     5b4535e0-62df-3f94-ac8a-66c1fa493a73.roa (raw, json)
Hash identifier:          ce7x8dntcrhW9t7lm2wgH55dcc/k21rodiWG669/eCk=
Subject key identifier:   86:85:DD:88:50:33:BD:37:9F:96:BF:AE:13:4D:64:BD:17:EE:DE:FA
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584D95F006DEEAB6A2DACB84E1A0
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/5b4535e0-62df-3f94-ac8a-66c1fa493a73.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     33436
IP address blocks:        172.82.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:06:de:ea:b6:a2:da:cb:84:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=e57b4f01-b2e9-44cb-bf18-0bd8c9e122af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:aa:13:49:0f:6a:2e:94:e3:a8:e0:04:3c:
                    86:10:94:03:d4:72:8d:b7:1c:e9:80:ac:4c:4f:02:
                    52:b5:b7:9b:96:9d:93:b2:34:b1:55:47:a7:e1:ee:
                    87:32:96:73:cd:3f:04:4a:22:11:87:ca:e7:7a:00:
                    5a:a8:52:67:13:b8:49:e8:ca:28:3b:07:a4:35:18:
                    54:e9:97:cf:73:08:be:53:11:86:b4:a3:99:ab:51:
                    88:3d:51:b8:52:79:b4:b6:94:1d:7d:2d:51:c1:3f:
                    4d:3d:8a:49:bd:c9:5c:7e:df:ce:31:4e:4b:68:f3:
                    21:5d:1f:f9:c1:cc:08:5a:18:3f:15:d1:7e:f3:e7:
                    3f:65:b1:f7:cc:2c:20:d8:7e:07:a7:3f:75:39:b8:
                    0a:20:b4:47:3b:84:a1:de:9f:bf:6f:85:47:07:63:
                    34:78:ac:e1:1e:c8:e5:91:88:1e:bf:80:1a:fe:7e:
                    70:62:d7:4b:98:af:46:cf:4b:9b:b2:2e:77:49:bc:
                    fd:47:2f:04:e2:13:d8:b3:1c:63:cd:2d:d4:35:7e:
                    53:75:80:ee:39:38:40:d4:74:93:b6:54:b3:87:6c:
                    d4:fc:9f:72:6d:60:3e:78:81:4c:9c:b2:8f:9a:03:
                    21:6e:6a:e9:b3:da:c0:78:e1:04:66:50:f2:e8:e3:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:DD:88:50:33:BD:37:9F:96:BF:AE:13:4D:64:BD:17:EE:DE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/5b4535e0-62df-3f94-ac8a-66c1fa493a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f3:fb:65:20:1d:de:91:20:8b:0a:d7:aa:95:b2:93:e1:8e:
         37:83:51:7e:58:c4:50:17:e4:43:a1:c2:07:62:17:78:82:2f:
         0f:9f:2c:c7:90:a9:1b:61:2d:11:e6:15:62:cb:47:45:8f:70:
         10:0e:01:bc:d7:0b:a4:d0:1e:f1:07:bd:bb:8a:7f:c1:14:87:
         ba:72:67:31:c1:8a:04:47:ed:c6:e5:15:f3:e4:3c:e7:90:e9:
         a4:df:7f:cd:2a:c0:25:e8:ed:92:da:a0:31:10:4a:7e:fd:97:
         43:d0:57:4e:ef:53:9b:cb:95:f2:f5:e7:29:5c:e0:ba:87:86:
         7a:c2:a6:9b:52:dc:ba:53:21:47:22:fc:08:bc:32:6a:a4:43:
         f6:52:a9:c3:40:8d:94:90:54:b1:60:f0:06:32:ef:43:c2:c0:
         68:ad:e7:97:a7:3b:a5:65:0c:64:ea:3e:cb:84:34:e1:c6:13:
         02:ff:c2:38:f3:dd:04:f9:c6:cd:26:dc:82:3b:18:79:ed:d1:
         dc:36:8c:74:fe:f5:cc:9f:22:89:c3:6d:cc:c1:1e:6f:44:d5:
         8c:c3:52:70:39:ae:4e:ea:c0:02:6f:1f:e6:ea:3e:9b:aa:03:
         bb:70:fb:9e:5a:c3:55:d3:f0:3b:14:fa:19:65:5a:e1:7f:cf:
         3b:65:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:01:29 2026 by rpki-client