Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/634baca1-5c9d-30ce-a070-33fe851c4755.roa
File:                     634baca1-5c9d-30ce-a070-33fe851c4755.roa (raw, json)
Hash identifier:          y/U5vVDzt9RXY3abWei3axcTfDBCfmR2VNDordB8yCQ=
Subject key identifier:   36:A1:69:17:76:6B:72:53:3F:55:BA:38:E1:FA:7D:FD:5F:15:05:AD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFEFA9064CD4647CD01580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/634baca1-5c9d-30ce-a070-33fe851c4755.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        72.31.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ef:a9:06:4c:d4:64:7c:d0:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=d7fff7b3-e0ce-4c38-8b50-26c4db5f9807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:b0:c2:56:45:97:ea:69:03:01:f1:d8:a4:
                    8f:5e:70:05:33:86:50:ff:de:64:c3:6f:cc:cc:2d:
                    96:c7:69:23:38:58:61:9d:66:f7:f8:a5:11:3d:9e:
                    6c:07:12:b6:93:80:e1:2d:0a:17:f0:9e:6e:3d:58:
                    d9:78:17:6f:59:5a:07:d1:4a:08:d4:f9:4d:e6:16:
                    a7:af:47:c2:f2:88:f2:a7:f5:6a:2b:5d:13:8f:16:
                    36:40:d6:d1:25:85:31:ce:e8:51:2f:f5:0d:2a:c4:
                    46:d2:8f:60:0f:1a:73:b0:ac:13:2f:17:01:a4:f3:
                    a9:8c:b2:9b:ce:24:0f:02:36:79:38:22:b9:30:52:
                    38:18:c3:08:a8:11:18:a8:4f:ed:66:d1:d3:db:33:
                    4e:56:1c:33:e3:a0:6a:35:18:d3:6a:62:a3:27:2e:
                    69:7d:14:a8:c1:26:ef:8b:2e:81:47:07:96:61:9b:
                    37:1f:06:db:a8:bc:1c:e8:0d:77:58:d7:85:c7:8b:
                    85:49:fb:9a:a5:45:bd:e8:5d:0c:20:6b:54:01:8e:
                    a0:fb:6a:e8:5c:77:be:68:26:60:4e:5b:b0:ae:4a:
                    0c:09:7f:e3:58:f2:ae:44:17:8f:c3:a3:24:65:1c:
                    cf:d0:93:09:57:ac:9b:af:13:ef:d4:25:b4:3a:6e:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:69:17:76:6B:72:53:3F:55:BA:38:E1:FA:7D:FD:5F:15:05:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/634baca1-5c9d-30ce-a070-33fe851c4755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:b1:5a:c1:b9:1c:e1:7d:dc:73:f5:56:4e:69:e7:04:8a:
         40:c0:0a:49:e8:3b:1a:d2:35:e0:42:54:32:2f:a7:20:e6:2a:
         bb:ab:2f:da:33:a0:17:b3:aa:fc:fb:c9:4b:fa:ac:08:76:65:
         19:5a:51:2e:27:35:b1:e1:5b:50:bc:c1:a2:df:76:19:cb:a5:
         90:ea:8c:b0:77:12:9b:9a:32:39:9c:0a:4f:51:1d:a0:13:73:
         37:42:7c:5d:bc:c5:a3:59:af:48:f1:48:50:9f:76:74:0f:80:
         ea:62:55:5c:11:d3:60:20:e6:46:79:9a:7a:d4:17:34:62:ce:
         82:26:04:76:bf:2c:c4:69:15:a1:6c:93:03:05:f2:03:30:1a:
         47:52:03:8e:15:c4:62:d0:6f:09:b3:cb:4f:00:dd:17:cd:ff:
         da:a6:8d:bb:27:de:82:93:33:e3:b3:fb:95:62:f2:02:d5:e8:
         74:f6:ba:b1:11:43:1d:d9:54:d3:74:9f:c3:58:d3:a9:bb:f1:
         f7:85:73:4f:5d:b3:2a:b2:9c:1e:5c:7a:5a:1b:c9:d2:5a:af:
         c7:a4:96:e4:2b:5f:c7:d0:9f:6a:24:64:92:4a:6a:92:9c:c4:
         51:6e:1d:36:01:2c:76:3f:63:a6:a3:54:c5:29:9f:2b:68:53:
         76:c1:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:13 2026 by rpki-client