Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa
File:                     3f610126-c000-34a1-8bf7-08e6484877a2.roa (raw, json)
Hash identifier:          HsnKUCr8IFbbJdVZJicNHNHq9IbOjGF7PS8RuVLJeBk=
Subject key identifier:   36:03:83:84:F7:E9:24:33:53:09:91:B1:78:1C:EB:44:A3:AE:EC:D7
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584E48247BE0B22127AD1E811C00
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     22709
IP address blocks:        72.11.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7b:e0:b2:21:27:ad:1e:81:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=ee76715c-eaf4-4fea-822b-222c43267efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:ae:bf:ea:50:23:2c:ee:d4:6a:f6:f7:7a:
                    d6:ec:ca:b6:b4:65:e6:79:90:97:a6:a7:e5:8a:fe:
                    a7:18:b8:1a:16:29:3f:5d:db:35:ee:d9:dd:72:77:
                    0b:42:d2:69:d6:39:02:63:75:ee:4f:61:03:d9:1d:
                    a6:2f:88:f1:00:0c:8d:db:f7:ff:f6:ec:04:6d:65:
                    51:ed:b3:a6:22:99:b2:a7:23:3b:7b:26:18:b9:82:
                    8b:7d:a9:00:d5:82:22:a0:df:3d:70:69:57:09:fd:
                    87:d4:50:25:27:d2:aa:cb:0d:3d:16:99:38:d2:f9:
                    dd:2b:5f:2c:61:82:03:20:06:4e:47:d6:51:3c:99:
                    aa:7b:3a:f8:a9:24:94:88:44:85:5a:1f:88:14:a9:
                    0a:73:8a:99:9d:ff:01:aa:32:d5:f4:de:cf:69:d8:
                    27:12:a8:5e:88:ca:7b:bd:05:d8:51:b7:e0:6e:b2:
                    f0:82:0d:d5:5f:9e:2f:2a:0d:cc:2a:bd:2e:32:1f:
                    b0:77:58:16:82:25:3f:6d:97:9b:6b:2d:b4:ec:65:
                    53:d4:af:01:10:83:35:9a:ce:8b:84:46:a5:90:1e:
                    13:37:da:93:2c:7d:81:47:49:e7:b6:ff:b0:54:b6:
                    51:d3:1c:39:d3:78:56:bc:c4:85:f7:8e:84:21:d1:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:83:84:F7:E9:24:33:53:09:91:B1:78:1C:EB:44:A3:AE:EC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:91:40:ba:4d:3a:f2:23:36:77:c1:d4:6b:05:44:db:8d:07:
         30:a1:57:ff:3f:1e:e5:07:d7:cb:2c:ef:ff:d5:0f:49:90:b2:
         a2:fc:6a:09:91:06:b4:1d:08:33:80:04:ef:ef:d8:7f:ae:90:
         40:89:4f:c4:96:b2:ad:0f:83:67:03:20:a7:51:b7:6b:0e:0e:
         5f:b6:72:03:c5:c1:11:84:97:33:16:2e:8c:40:41:05:27:98:
         4b:42:1e:d1:3d:00:9a:3d:a4:d2:ac:e9:bb:72:bc:5a:91:9e:
         a5:ac:d6:a6:d6:d2:81:46:cb:71:83:43:df:f1:20:d4:57:e2:
         9c:6f:34:b6:41:5d:c4:69:2e:87:93:61:4f:e7:b0:b4:06:c4:
         ea:4a:e6:ed:42:dd:0e:43:0e:78:9c:81:2e:da:f4:21:58:5d:
         ca:4c:06:61:f3:a2:e3:1e:9b:ef:ff:88:ad:bb:69:71:d3:75:
         d3:de:99:40:33:45:5e:b6:fa:95:f4:69:1f:f6:6d:02:08:7d:
         77:fe:59:8f:b0:50:6f:38:fc:84:1e:c3:55:35:e6:65:f0:81:
         69:65:4b:54:2b:ad:19:6a:97:fd:72:34:64:ae:f1:d3:83:85:
         39:dc:57:55:ad:4f:06:89:17:37:28:b5:a2:0a:93:1c:4a:b1:
         a8:e6:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:27 2026 by rpki-client