Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/518dff86-df26-3101-878a-83a8b68f8de7.roa
File:                     518dff86-df26-3101-878a-83a8b68f8de7.roa (raw, json)
Hash identifier:          RIGV0px3tMlzXycblXa3+Q9TYUNPv4BWTo2d3/ss5MA=
Subject key identifier:   88:80:87:50:4A:B6:27:25:54:10:33:F7:21:C6:E8:C7:4F:12:EB:34
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584F4974F7F6C444986605022380
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/518dff86-df26-3101-878a-83a8b68f8de7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        72.37.154.0/23 maxlen: 24
                          72.37.160.0/23 maxlen: 24
                          72.37.164.0/23 maxlen: 24
                          72.37.168.0/23 maxlen: 24
                          72.37.214.0/23 maxlen: 24
                          72.37.238.0/23 maxlen: 24
                          72.37.240.0/23 maxlen: 24
                          72.37.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f7:f6:c4:44:98:66:05:02:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c87d1e16-8579-4eb9-973f-35f50b412e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:f9:f2:17:c5:09:18:6e:39:f8:62:b1:4b:
                    0c:dd:07:fc:18:5d:2a:4a:a2:8f:e5:94:22:9e:a0:
                    0a:3b:a1:55:14:ae:52:a8:c9:dd:b8:0c:c3:e3:64:
                    38:47:97:29:42:f7:57:4e:dd:5a:c8:bc:4d:de:77:
                    2a:e1:e0:4e:27:9a:ec:3d:1e:08:77:22:e7:cf:f8:
                    bb:3b:1e:26:ae:37:5e:db:e0:a9:a5:51:27:11:eb:
                    a9:1a:b7:74:f9:b6:5d:6c:fc:21:bd:12:84:2d:2a:
                    40:a7:a8:43:2a:08:d2:0b:ce:20:c5:96:9c:cd:84:
                    d5:d3:c6:a9:7e:fd:53:55:9a:a4:4b:75:53:a8:0d:
                    de:95:b7:69:3a:eb:a0:8d:2e:a1:97:02:fc:c0:1e:
                    9a:65:7b:da:aa:16:93:1f:47:6a:58:2a:6d:51:da:
                    4b:fa:2d:e0:99:8a:bb:b9:2b:ac:62:62:66:6b:83:
                    78:f0:de:b2:7b:28:68:88:8d:15:fc:93:3f:ce:4b:
                    d4:59:87:91:ca:10:1b:6f:35:fb:74:77:17:76:41:
                    82:49:a0:73:ec:13:f6:01:b7:eb:b8:02:1e:80:43:
                    f4:fe:ab:e1:2d:86:ac:01:7e:7c:eb:e3:6f:81:f0:
                    e8:fe:91:96:bd:aa:e9:11:5e:41:fc:72:db:5f:d0:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:87:50:4A:B6:27:25:54:10:33:F7:21:C6:E8:C7:4F:12:EB:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/518dff86-df26-3101-878a-83a8b68f8de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.154.0/23
                  72.37.160.0/23
                  72.37.164.0/23
                  72.37.168.0/23
                  72.37.214.0/23
                  72.37.238.0-72.37.241.255
                  72.37.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0f:2e:99:77:d1:7a:0d:f4:cb:ea:3a:1e:a5:3a:33:22:b7:
         da:15:bf:40:b9:aa:7f:80:ac:f5:d3:31:24:93:aa:24:25:06:
         68:67:d9:7a:c2:95:e7:1e:51:13:a3:96:1e:78:0c:59:e7:1a:
         eb:b1:58:99:2a:9e:a4:1c:19:69:16:ab:b5:fb:12:de:43:19:
         fd:db:85:4a:73:a5:59:00:a5:d7:f4:39:97:d2:91:7f:e0:64:
         3e:d9:81:af:69:af:10:86:29:7a:82:3e:df:ea:ff:26:6b:6d:
         32:d5:68:41:46:93:2a:d9:0a:9d:d6:38:df:60:b1:73:d0:1a:
         13:46:b1:d2:6d:d8:19:af:17:97:e9:67:69:c4:77:96:79:74:
         78:ed:71:9f:d1:32:62:85:b1:d4:c0:42:15:56:0b:23:69:8c:
         a1:db:24:76:fd:89:91:25:ae:30:20:71:8a:ba:98:62:41:f0:
         a3:7d:53:7c:8b:37:0f:16:46:46:3d:14:a1:a4:70:ac:5e:e6:
         84:69:65:36:67:33:e3:e1:fe:30:08:f0:13:34:f8:6c:52:6a:
         1b:e5:16:8d:7d:fd:c2:e0:b1:23:da:0d:c3:fe:74:67:f3:b4:
         25:e9:b8:1e:bb:85:1d:ad:e8:6f:da:fc:b8:7a:40:2d:58:3e:
         78:2b:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:43:35 2026 by rpki-client