Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
File:                     e65865d4-5f44-3316-802f-7aa0ec28365b.roa (raw, json)
Hash identifier:          88hUppC2OIQfsBqzWtc9R2cSqdQOrRbveah0ygK/zvc=
Subject key identifier:   C3:76:E9:E6:9F:22:2C:EA:5A:76:B1:2C:5D:5E:13:23:4A:9E:A1:82
Certificate issuer:       /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d
Certificate serial:       010D0C9F4328584DCAFAFB037429F31346AAB220
Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     62915
IP address blocks:        72.172.76.0/22 maxlen: 22
                          137.83.30.0/24 maxlen: 24
                          141.193.194.0/23 maxlen: 23
                          161.38.254.0/24 maxlen: 24
                          185.147.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fb:03:74:29:f3:13:46:aa:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=ac40f829-33e3-4cb7-9218-8d82fa30bfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:d8:7b:eb:2f:60:41:cd:3d:bd:74:35:4e:
                    49:80:2f:4a:12:53:42:14:d6:ce:1f:49:5c:f4:9e:
                    7e:3a:dc:c9:2f:04:aa:c0:73:c1:86:60:53:68:24:
                    ee:87:b1:86:ff:57:17:46:2e:f9:ce:27:b3:fd:d3:
                    8c:b2:1b:5e:cc:ea:37:ba:8d:e8:ad:b1:6f:50:b8:
                    06:65:2f:27:c6:41:88:2f:2b:5b:39:0b:6c:86:18:
                    a7:0b:75:8b:03:3d:84:6b:da:40:52:2b:c4:b4:15:
                    02:14:c2:91:14:7b:3b:40:28:79:e3:18:07:b7:6a:
                    9a:ba:68:b3:7a:aa:16:74:6b:57:20:24:6e:61:df:
                    14:99:29:cd:3b:09:f7:db:a2:e8:c7:96:1c:08:93:
                    62:3d:9e:04:5d:04:a8:64:7b:63:a4:fb:20:50:55:
                    6b:d3:7b:92:c7:04:fc:c8:31:18:45:31:08:16:b4:
                    b9:9d:2e:32:24:f7:b2:a8:d2:81:bc:ab:80:a7:7f:
                    cd:28:21:82:5a:f2:4c:99:78:f5:7d:54:e6:55:8b:
                    28:34:64:de:42:18:61:02:ab:18:13:1c:7c:47:82:
                    88:b5:31:2e:bd:01:1a:03:f3:06:83:93:10:30:8e:
                    a5:bb:9d:9f:62:41:9f:16:89:25:1c:66:18:19:c2:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:E9:E6:9F:22:2C:EA:5A:76:B1:2C:5D:5E:13:23:4A:9E:A1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl

            X509v3 Authority Key Identifier:
                keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.76.0/22
                  137.83.30.0/24
                  141.193.194.0/23
                  161.38.254.0/24
                  185.147.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:8d:7c:b9:95:fc:89:ec:49:fe:d6:18:10:ff:3f:b3:f0:
         2e:e1:61:1b:cc:98:7c:e8:11:41:eb:96:2b:83:76:35:a9:ae:
         97:88:0d:d5:57:c1:29:61:54:23:68:cc:62:9c:7a:c9:5c:b9:
         0b:8c:e0:c9:ed:01:5a:a1:75:f6:b5:05:af:b9:64:59:97:ae:
         37:98:0d:13:58:0e:ae:53:9e:fc:f2:e0:4c:c6:53:9b:4c:1a:
         60:1d:ac:52:dd:b2:56:75:e6:ec:60:ca:f9:16:15:05:d9:e2:
         59:c9:10:15:ea:db:c2:54:c4:88:b4:c3:cb:f6:85:64:97:ae:
         85:d1:1b:9a:05:ef:2b:d1:73:52:f4:22:a8:33:dd:f2:78:7f:
         31:96:00:38:3e:29:1a:5a:88:50:55:1d:72:dd:f7:0b:3e:cc:
         a0:31:55:d4:2d:64:f0:e2:83:12:e9:d3:0e:bb:07:7c:9b:13:
         08:a3:69:36:f0:db:0e:3b:72:cc:c6:29:6c:a9:b6:0e:b1:3b:
         50:12:4f:f8:c2:70:c9:82:69:4a:c1:df:b9:51:a5:f2:f9:ba:
         48:d5:70:3c:8f:fb:4a:61:b1:56:18:04:1d:8f:77:51:2a:39:
         b9:f0:17:e2:72:d2:46:d3:8d:5b:3b:d9:b4:97:99:e5:09:6e:
         b5:8b:6a:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:20 2026 by rpki-client