Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/28eb3182-6eff-3021-bdab-720e1ca5394c.roa
File:                     28eb3182-6eff-3021-bdab-720e1ca5394c.roa (raw, json)
Hash identifier:          LZNB/jFAgOTWA1EkV68v1W1jSpvdZS+8Qkd3FEBTcnw=
Subject key identifier:   CF:0B:3F:9D:20:62:5C:24:EF:09:14:6B:97:01:F0:B7:C0:5E:C0:9C
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584D143D7B81446701D77ED82600
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/28eb3182-6eff-3021-bdab-720e1ca5394c.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     7725
IP address blocks:        72.162.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:7b:81:44:67:01:d7:7e:d8:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=16868c05-c006-4321-9260-76ee516caaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:c2:05:9a:dd:27:fd:78:2d:be:db:90:19:
                    68:38:79:67:1c:31:b9:15:20:5a:5e:0f:5a:c8:6f:
                    8d:ba:4f:bf:c3:5a:9e:0d:25:b0:32:09:92:e9:1d:
                    e3:14:d1:7b:a2:4f:c5:f8:2c:a2:ea:13:85:37:01:
                    aa:56:13:c8:fd:74:d8:7d:57:e4:87:91:8b:cb:6b:
                    1d:e3:ce:c7:00:99:e6:07:a8:62:45:94:65:85:39:
                    47:b5:08:b7:9b:46:00:93:11:75:5d:55:80:76:b4:
                    7d:89:2e:a9:09:00:6f:ef:98:84:d3:14:5d:7d:29:
                    ec:f0:04:2d:48:fe:67:41:44:8d:7e:e9:b0:39:d7:
                    79:97:44:5a:a4:86:7f:6e:fd:d8:07:03:a8:b8:5c:
                    d7:e9:d1:27:69:33:75:c7:dd:81:1d:bb:c0:16:8e:
                    a2:12:ef:0a:d9:78:8e:c4:38:3b:c5:66:99:ab:51:
                    8d:39:0c:7b:47:ad:b3:fb:b4:bc:19:77:be:b9:79:
                    d4:e0:ef:5b:8d:a5:99:6a:d2:80:e7:bb:2f:8d:d2:
                    2c:81:18:87:20:f7:f0:72:38:e8:0b:ca:21:50:51:
                    da:7b:94:e0:3b:0c:24:b7:4d:85:a7:b4:ce:2a:75:
                    e3:49:f3:f6:a1:ad:31:7d:1b:6e:7f:b6:54:6f:14:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0B:3F:9D:20:62:5C:24:EF:09:14:6B:97:01:F0:B7:C0:5E:C0:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/28eb3182-6eff-3021-bdab-720e1ca5394c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:c6:0c:be:f5:e1:13:77:9d:7b:c4:3d:5c:28:3e:0b:70:
         49:27:e4:44:48:96:1b:66:06:2a:90:13:ec:6f:0b:be:02:f2:
         42:16:1b:34:ab:89:b5:f6:25:9f:36:5b:fa:97:04:cd:42:60:
         05:9e:d6:b0:87:64:85:a7:47:eb:e3:bf:d9:e7:81:af:03:29:
         37:ee:f1:89:ce:4d:3c:d5:75:7b:a0:e4:7c:22:05:29:1b:d6:
         30:b9:30:36:87:29:d0:40:72:7f:b5:aa:1c:74:85:92:72:c2:
         12:62:92:94:cc:12:00:37:07:aa:b9:82:2a:9c:9d:36:73:16:
         03:3f:07:23:17:26:d4:f0:ac:31:ee:85:14:1f:1a:ac:ad:8a:
         7a:21:6e:1a:9b:8a:6a:83:07:65:0b:27:98:3a:f8:fc:14:19:
         8e:f8:d9:4d:9c:fe:a8:5a:e3:1b:bd:27:1e:4b:43:a4:07:0a:
         7b:15:ee:0e:1e:be:8c:01:19:d5:e4:ea:a2:15:e0:64:68:c9:
         75:c3:84:d1:0c:02:d5:68:2f:d7:fc:d4:9f:f8:14:42:82:92:
         3b:23:d6:e0:ff:2e:5c:b2:bf:16:74:35:85:65:f6:ee:eb:1b:
         72:12:2d:14:f0:a2:7c:f4:e8:b2:5e:66:0a:a5:45:54:73:32:
         e7:a3:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:45 2026 by rpki-client