Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa
File:                     e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa (raw, json)
Hash identifier:          y2jHTjRvBoql+I/7JKbOXbrMUZReFRvtEfNL6eibeVY=
Subject key identifier:   6D:50:52:25:19:C8:24:58:CC:14:46:BE:74:94:BC:12:A4:9A:36:F3
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584DBFD05A32D37CA74491F0F500
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     398143
IP address blocks:        72.46.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:5a:32:d3:7c:a7:44:91:f0:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=cd5fbcee-db8c-4712-9977-787891eab907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:50:08:08:9e:00:15:8d:dd:d6:16:70:06:
                    ca:3b:58:ae:46:21:4b:a1:75:8c:e7:37:bf:76:0a:
                    d6:2d:9d:f3:99:1c:ff:0e:53:87:eb:a8:9d:03:fc:
                    e2:3a:dd:1d:94:f8:5b:99:e3:8f:3a:7f:92:49:c8:
                    75:f3:b7:24:5e:a8:f2:09:bb:fc:de:6c:1c:ca:6f:
                    f5:06:81:f1:aa:6f:fc:db:e5:49:ec:a0:be:c6:81:
                    f7:45:2f:63:51:c5:b9:fe:14:90:90:15:f6:a7:6d:
                    e6:19:fa:c3:86:00:4e:61:57:ee:e4:26:71:f5:3f:
                    ed:96:7e:08:f7:2b:e7:d6:62:12:a0:13:91:83:45:
                    18:72:08:2f:51:82:7a:6f:7b:60:03:f3:d2:e8:f8:
                    a9:74:c6:c5:7b:93:87:99:70:39:b3:9c:e4:19:6a:
                    ce:f7:e4:60:e7:ce:c5:fd:c2:3f:f8:7e:9c:bd:1f:
                    e7:c6:03:b9:b4:46:68:9f:32:7d:cf:32:37:7d:12:
                    15:4a:a8:7c:d2:26:03:dd:8a:57:ef:7f:e6:35:78:
                    c2:ab:90:82:b6:92:08:47:70:ea:89:d0:37:e6:f0:
                    88:a6:7f:62:af:37:2d:57:48:a1:44:88:f2:30:6a:
                    f1:ba:1e:1b:af:01:97:02:4d:f1:41:0b:a8:82:78:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:52:25:19:C8:24:58:CC:14:46:BE:74:94:BC:12:A4:9A:36:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/e9cc30fb-7b0e-3874-9396-8e14fa4ce815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:42:aa:46:6d:81:4a:81:d3:26:80:cf:8b:66:72:c0:bf:06:
         f1:62:a2:08:4b:69:a9:5c:4e:f8:b4:f6:34:39:d1:42:0c:d0:
         d8:eb:ed:c7:1b:3d:33:2c:06:66:7a:30:9d:da:bb:6e:18:bc:
         f6:11:9c:1c:3f:7a:1b:d1:0d:ef:00:8d:6e:12:b6:ea:04:b0:
         24:04:02:a2:5e:be:24:1b:b4:ac:f2:7e:9e:8b:07:11:2f:a6:
         07:67:22:85:aa:df:32:39:89:68:4a:48:d0:08:56:47:99:33:
         3d:2a:b6:f2:28:72:5f:6f:55:5d:5d:2f:e7:59:23:0a:3d:c5:
         76:8c:1c:1f:18:64:b7:04:ab:22:1b:fc:03:6d:bf:99:df:f8:
         22:60:f7:06:07:20:7b:21:eb:80:ce:af:73:55:04:6a:5a:d2:
         5a:7c:2c:b3:56:f7:77:24:1a:d6:80:91:be:f7:60:a4:8b:aa:
         e6:25:a2:78:02:e0:24:20:6a:88:c3:2c:5e:f4:1b:05:ab:17:
         4f:d2:7d:c0:5b:f7:45:e4:73:42:f4:8a:a1:b3:01:49:06:72:
         7b:b5:36:02:cd:41:e0:15:0b:8b:6d:f6:0f:9e:8d:a8:b7:64:
         ed:3d:bd:35:8e:59:eb:3a:36:bf:b0:6d:d6:06:fd:40:42:37:
         e2:f1:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:18:01 2026 by rpki-client