Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59c6ff65-9683-39c8-948a-8e776c619f8f.roa
File:                     59c6ff65-9683-39c8-948a-8e776c619f8f.roa (raw, json)
Hash identifier:          +n1YilopVLJvbmU18H2ZgYNZDeaNWg7W6X2WAEet5sI=
Subject key identifier:   C5:29:E7:62:B0:36:DF:BC:CD:1D:66:A1:6A:9F:98:34:1C:95:40:6E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFEC119B176CAAEB6D03F0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59c6ff65-9683-39c8-948a-8e776c619f8f.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        72.31.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ec:11:9b:17:6c:aa:eb:6d:03:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=fefeb8a2-fec4-4606-8e62-9cfef890f0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:b4:aa:e2:3d:cc:9e:c4:07:88:88:27:33:
                    10:f2:03:1c:8b:3c:79:81:36:d9:9a:7d:d7:5c:23:
                    3a:24:b9:63:6e:4a:dc:39:24:07:f7:fd:c7:43:c9:
                    79:b2:99:1e:dc:92:a5:e4:c6:a2:9a:ff:f0:3d:38:
                    29:de:d7:05:1b:64:51:56:b8:01:d9:07:69:02:ee:
                    65:3c:14:09:ae:c9:e7:7f:34:bb:80:26:ab:f9:84:
                    c6:d3:35:ca:ed:27:46:df:61:0d:c9:7c:83:af:14:
                    17:2f:54:de:22:72:a6:76:16:91:9e:dd:04:11:f8:
                    b9:21:80:79:97:b9:59:96:0d:ec:71:95:eb:e4:79:
                    fa:8a:29:32:39:f6:ec:bd:f8:99:67:3a:4a:18:df:
                    cf:d9:eb:5a:34:7d:91:3a:33:3f:d3:fc:d7:9b:d9:
                    e5:0d:14:9a:7c:28:aa:f0:07:4d:2d:c2:77:a1:37:
                    d8:d1:38:da:3c:0e:01:66:08:11:91:3d:ef:39:f2:
                    1b:ba:90:9b:f8:c2:6e:34:80:47:64:4c:a0:be:48:
                    39:e1:dd:ce:1e:45:b7:f0:5e:51:47:25:b3:7f:70:
                    f1:fe:b7:dd:8a:68:65:24:c8:5d:d9:67:25:c7:14:
                    82:56:3a:44:ee:5f:2b:16:4e:d6:e7:2b:1e:f1:f5:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:E7:62:B0:36:DF:BC:CD:1D:66:A1:6A:9F:98:34:1C:95:40:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59c6ff65-9683-39c8-948a-8e776c619f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:f3:40:99:46:16:97:78:87:df:48:8d:0b:9f:6e:d7:43:
         ee:6e:7b:d2:7e:f2:da:3d:0a:92:c1:62:b6:b5:dc:9f:51:ad:
         ca:41:50:93:ac:1a:8c:fe:b2:fd:7c:d5:c1:03:ba:f2:81:34:
         c6:f0:e1:b5:ac:74:1e:73:c7:3c:96:77:31:1a:25:71:0c:a6:
         4e:85:77:3e:ea:17:98:19:e0:ea:44:a9:8f:22:ec:d5:15:b6:
         39:ca:10:68:c3:42:34:89:d6:8d:90:96:51:86:34:dc:c4:41:
         26:97:1e:2f:25:15:5b:fc:16:76:59:87:fa:ac:be:68:f7:62:
         25:bf:1b:30:c6:53:8e:0b:b8:6f:2d:07:5e:e9:97:ec:90:25:
         e0:e9:78:7e:59:af:8c:61:e1:8e:0d:df:1e:25:03:48:3c:31:
         40:00:8a:61:24:74:d7:98:47:aa:9e:44:f6:fa:57:42:37:14:
         c8:44:5b:14:b3:00:59:a5:12:11:ad:27:f8:e1:92:43:7c:0d:
         45:ae:32:74:ff:f8:d0:91:36:09:8f:95:7d:08:94:19:52:71:
         75:19:3e:70:a4:c8:b7:d2:cb:4d:1b:40:b0:a7:c5:df:8c:8d:
         0e:e2:4e:bb:9d:ab:03:c2:36:bd:52:23:0e:3e:64:c1:50:f7:
         cb:dd:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:35 2026 by rpki-client