Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
File:                     17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa (raw, json)
Hash identifier:          W3ZGk3ZQjRQgu9SchOKlDxGvehEFW8bZg26vD/Qjflw=
Subject key identifier:   AC:9C:1D:1D:EB:04:30:8A:CD:48:D3:EC:98:7B:C1:D5:AD:49:6C:C9
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584DBB9BECAC57597F68D0FD38BD
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
Signing time:             Tue 05 May 2026 12:51:54 +0000
ROA not before:           Tue 05 May 2026 12:51:54 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     36666
IP address blocks:        72.10.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:9b:ec:ac:57:59:7f:68:d0:fd:38:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: May  5 12:51:54 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=dc761607-dc8b-4b02-81b3-163271c004e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:85:95:2b:8f:91:de:6e:69:74:54:ce:6b:
                    17:ce:ec:a5:5d:b9:65:02:72:9c:95:7f:21:0a:8e:
                    ac:b8:3c:e0:45:fa:81:16:fd:e3:cd:c5:78:4c:bb:
                    2a:a5:3e:5c:3b:1a:69:76:2e:f9:df:42:8b:75:42:
                    9d:16:cf:08:ae:1f:c7:9c:11:35:d2:b7:80:88:6b:
                    25:4e:7f:65:77:9e:b5:94:bd:02:bc:8d:07:58:19:
                    42:30:b6:01:cf:35:88:18:50:5c:c4:64:e0:bd:16:
                    5b:13:9d:16:1e:45:ce:6e:1a:a8:0f:2c:f7:44:46:
                    55:35:c7:9c:49:a2:08:53:a8:1a:f6:c3:16:0e:e3:
                    52:57:2b:c5:2b:70:cf:0a:b1:b1:a9:77:cd:cc:9b:
                    9f:f2:eb:71:46:d5:23:7c:21:b1:80:ed:12:59:79:
                    de:8d:26:45:2d:76:3d:27:f1:8f:c0:3f:d9:2a:d1:
                    bd:c4:a0:93:eb:30:e5:af:02:7f:e0:7f:9c:0e:ad:
                    c6:87:e1:dd:d6:1d:bf:0e:02:e7:5e:39:ce:cb:27:
                    8e:84:5d:1e:cc:74:73:73:e3:66:55:dc:f8:e8:fa:
                    90:c1:bc:e5:e9:64:8c:f1:ac:24:83:24:9a:c4:1b:
                    e0:ed:9d:01:28:35:cb:9c:6d:82:b6:a4:91:be:78:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:1D:1D:EB:04:30:8A:CD:48:D3:EC:98:7B:C1:D5:AD:49:6C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5b:1c:19:f8:c4:0a:35:11:93:f4:38:7b:af:f1:e7:c3:e6:
         e7:09:10:94:cc:e3:27:58:74:f7:e7:f6:3b:83:a3:f2:50:84:
         23:ca:a0:47:a3:c4:4b:1a:87:19:05:44:fb:f4:b0:d7:14:4c:
         a3:61:b8:62:49:e3:58:4c:ec:c7:29:46:5f:d3:f6:dc:a1:4d:
         32:7b:06:11:fd:cf:55:6a:6f:49:87:0e:b7:09:a6:f0:1b:bf:
         6e:55:c2:3b:f3:13:72:0b:34:81:d5:ca:10:d2:ad:66:47:82:
         8c:77:38:90:e1:a9:c7:c1:6e:e8:f3:15:74:b2:60:53:5f:63:
         44:78:bd:c3:c7:6d:5d:ba:c4:bd:eb:81:a5:0b:af:b0:ba:db:
         55:3c:b2:0f:0a:af:c2:92:af:1c:d1:d9:eb:c3:16:85:a7:b6:
         e4:f0:07:25:1d:ff:d5:6d:cf:9d:82:97:f8:83:2c:39:0a:75:
         74:33:dd:52:c8:3f:b8:8c:80:fc:73:df:da:be:9c:a9:24:83:
         ec:6b:0c:72:56:bc:23:3d:1a:fb:e2:4f:84:70:34:25:c0:e7:
         05:0b:fe:4c:b4:81:eb:9f:e2:d9:33:d8:41:b9:23:81:e2:14:
         53:6b:ef:29:8d:e3:36:d0:b2:90:dd:fa:ec:86:02:ae:1c:73:
         c9:c5:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:58 2026 by rpki-client