Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b50859c-6c1c-369b-8147-39e53c586764.roa
File:                     3b50859c-6c1c-369b-8147-39e53c586764.roa (raw, json)
Hash identifier:          QaOcsveruwGkfDEPBqaa1c6FSr2ozIhEZsK0LMS7K+E=
Subject key identifier:   E3:CF:53:66:23:29:DF:C1:BB:41:8D:25:D9:2D:6E:04:77:94:01:43
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E796A6EBBD03B923BAF0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b50859c-6c1c-369b-8147-39e53c586764.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        72.31.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e7:96:a6:eb:bd:03:b9:23:ba:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=eebf8829-90fe-4a65-b5a9-2337ee3564e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:b0:7b:c3:f6:80:34:53:6f:44:59:2f:9e:
                    e7:0d:cf:9d:fa:b3:66:07:75:20:e1:ca:99:cc:fe:
                    16:4d:cd:d7:95:c4:91:d2:a3:12:7d:49:54:55:7f:
                    10:00:22:2a:75:d5:01:5c:9e:5b:fe:e7:f5:4f:84:
                    f2:ef:6f:b9:89:05:25:61:94:c4:95:da:32:ba:ab:
                    97:38:06:0a:05:f2:68:1b:6a:c0:98:53:30:10:14:
                    ac:ab:83:1f:48:dd:04:59:3c:77:f3:46:79:cb:8e:
                    29:4c:7f:3a:c6:5b:cf:a4:24:df:62:77:f6:ff:38:
                    63:82:94:56:35:40:97:8b:03:09:54:07:dd:54:f4:
                    ee:42:c4:fb:a7:cb:32:53:21:1c:31:77:81:71:cf:
                    74:12:1a:5d:61:2d:dc:1d:39:e4:53:0f:a7:e1:87:
                    34:ff:22:35:6f:70:4a:aa:32:50:15:c8:09:4e:b5:
                    e7:81:8d:50:ed:18:41:f5:11:6d:5d:7e:cc:75:d5:
                    35:ee:3c:75:40:66:95:b0:8b:0c:5e:40:6f:5f:2a:
                    e0:95:07:8b:b5:73:c2:e2:e4:57:e3:0b:c2:f1:c1:
                    38:16:61:b0:85:e2:be:8e:83:59:59:35:c3:b3:d4:
                    f5:26:6e:c1:31:3b:58:30:f4:73:9e:ad:7e:44:e2:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CF:53:66:23:29:DF:C1:BB:41:8D:25:D9:2D:6E:04:77:94:01:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b50859c-6c1c-369b-8147-39e53c586764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:02:51:34:82:76:98:94:8a:60:a1:46:2e:d4:61:d5:7f:
         6f:bc:f5:33:56:b4:3a:77:19:04:2e:fb:af:3b:ad:7d:4d:c2:
         b4:9b:9c:cc:c0:8b:9d:45:cf:e5:f9:36:76:b8:3c:1c:57:56:
         3a:ab:e2:01:a2:d6:c5:5f:ae:95:e6:76:0f:d8:ec:73:b9:3a:
         75:eb:27:a5:64:d7:6e:50:03:12:4a:7c:90:5d:a8:a8:9a:8c:
         a9:78:6d:3e:ac:e3:89:0b:27:8a:75:c4:50:6d:ef:b2:41:10:
         7c:48:04:2d:74:40:6f:ba:f9:d9:db:91:5f:47:65:c4:c3:58:
         50:9d:12:11:f4:85:18:83:76:7d:67:80:fc:ed:33:b4:e4:52:
         78:5d:6c:f0:06:8b:7e:78:50:11:56:b2:0a:57:11:62:18:ba:
         08:9e:8c:88:69:6e:06:fe:c8:a2:44:78:3c:6f:3f:dc:34:ec:
         8b:ec:d4:9e:60:b1:e8:e1:da:65:fa:b5:a5:29:4c:6a:00:da:
         b1:eb:82:f9:ac:ce:17:a5:7e:77:01:a9:a8:6a:7b:8b:e4:24:
         d4:7f:ba:00:53:32:05:d7:6c:b0:0d:a6:dd:7c:6b:ab:b3:27:
         78:3e:17:b9:e6:c7:88:15:dc:17:30:70:d4:7d:27:18:ba:85:
         9b:3c:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:10 2026 by rpki-client