Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a9b107d3-9709-3cba-90b8-401f08baf731.roa
File:                     a9b107d3-9709-3cba-90b8-401f08baf731.roa (raw, json)
Hash identifier:          AM/KRrge29ltCfhpNYvRCaGEIJ/r3weM64NrrF3xlx8=
Subject key identifier:   98:12:F2:34:05:B7:BA:A1:74:47:56:FB:31:98:55:ED:49:CE:D6:5A
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584E95B38F16B8F810D045A7EE80
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a9b107d3-9709-3cba-90b8-401f08baf731.roa
Signing time:             Wed 22 Jul 2026 15:45:45 +0000
ROA not before:           Wed 22 Jul 2026 15:45:45 +0000
ROA not after:            Tue 20 Oct 2026 15:45:45 +0000
asID:                     20115
IP address blocks:        72.162.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:b3:8f:16:b8:f8:10:d0:45:a7:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Jul 22 15:45:45 2026 GMT
            Not After : Oct 20 15:45:45 2026 GMT
        Subject: CN=8fc42389-2594-4be2-a0fe-af05f623dfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:20:b6:3a:99:b0:80:d2:aa:73:33:eb:2d:
                    66:76:83:cd:05:08:5e:28:b3:88:91:13:78:b1:e6:
                    72:67:8f:19:ca:47:b9:3a:eb:6f:db:9a:e1:da:25:
                    4c:fa:64:1f:5f:01:0b:e9:32:13:c2:63:c2:1e:67:
                    5b:e9:4d:ed:d6:01:84:0f:81:54:10:cb:b2:29:ea:
                    75:1f:e0:a2:c4:4a:fc:ec:a3:be:5a:e1:d3:12:c7:
                    38:16:3c:c1:93:01:d3:86:3c:93:4a:b2:df:34:8f:
                    b9:1c:1c:de:27:0d:dd:9a:e7:a7:64:c6:a4:98:82:
                    71:15:b3:ae:9f:d4:a0:1a:4d:bc:06:d4:53:39:29:
                    86:c0:38:d6:48:21:aa:97:65:14:1a:7a:49:bc:87:
                    0e:3d:43:24:a5:79:f4:d7:f6:78:a6:ef:fc:6b:ce:
                    cc:94:b1:50:8d:e8:6e:8a:05:07:a1:2e:61:ea:65:
                    6b:2d:9b:c5:55:0d:3d:d0:43:07:a2:74:3d:ff:b4:
                    e4:18:5b:10:5a:a2:98:2b:93:7c:ce:a2:03:73:71:
                    75:a9:ec:3d:7e:41:70:c7:5a:50:0d:73:5b:d8:03:
                    19:66:33:cb:6d:7d:43:e2:61:99:54:1c:a9:29:89:
                    6a:88:c3:00:d9:07:7b:78:53:0f:1e:82:92:c8:95:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:F2:34:05:B7:BA:A1:74:47:56:FB:31:98:55:ED:49:CE:D6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a9b107d3-9709-3cba-90b8-401f08baf731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:11:c4:e4:87:7b:56:46:95:2a:40:0c:a1:66:39:fd:2f:dd:
         77:01:84:3c:1f:8e:27:7e:3b:60:f1:5d:ff:3b:9a:aa:fe:63:
         3b:b2:db:0a:44:91:76:c3:5a:8e:d2:9d:ba:f0:9c:30:ee:d7:
         79:b2:ff:5a:73:30:e2:1b:46:68:21:e0:ec:86:25:65:ea:35:
         5a:81:85:1d:2e:33:49:f8:62:42:74:2d:16:13:95:92:8f:6c:
         db:37:33:5f:77:a5:d2:bf:13:39:ad:97:b5:3e:b0:b9:7b:b4:
         26:1f:77:c3:4e:1a:2b:47:64:11:43:1a:13:c4:3e:20:5c:fa:
         31:a9:83:0d:74:4e:c3:22:12:a8:e7:c4:dd:e9:a3:f5:ab:7d:
         94:c4:c5:79:59:76:d8:07:0e:9a:1f:20:ec:d4:a6:e8:92:1e:
         2b:6e:b9:83:29:98:97:d5:13:59:dd:d1:69:51:f7:c7:39:0a:
         76:46:49:41:26:ce:fd:6d:d0:c8:51:55:f9:47:91:f1:92:44:
         79:4c:f8:48:19:77:e0:f4:8d:bb:38:40:c4:75:a9:a2:d0:b1:
         57:0f:76:52:1e:de:32:b0:e1:f5:94:e3:77:a5:66:e7:a4:c9:
         0c:49:e2:72:20:96:32:e6:76:ce:19:41:01:fd:50:9a:2c:34:
         35:27:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:48 2026 by rpki-client