Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3195597-7fda-3891-850e-d9e49f860d51.roa
File:                     f3195597-7fda-3891-850e-d9e49f860d51.roa (raw, json)
Hash identifier:          zvHNTYz23TdA/59gCuIk413O5lurv9+6BuL4XSQQQ2M=
Subject key identifier:   03:63:50:CA:50:52:36:18:FF:9A:A0:8B:56:DD:31:55:13:DB:3E:D1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D8D8FE5FE1B12C1E46F8D93B0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3195597-7fda-3891-850e-d9e49f860d51.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     3257
IP address blocks:        72.13.245.0/24 maxlen: 24
                          72.13.252.0/24 maxlen: 24
                          198.144.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e5:fe:1b:12:c1:e4:6f:8d:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=48aab203-a26a-4567-8b00-669a307fce1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:d5:e0:77:97:a1:ad:ef:e5:88:89:16:af:
                    1b:2f:aa:1d:d7:41:77:3e:4d:e2:b8:fe:41:ad:90:
                    55:a2:11:f4:4f:b9:1d:0c:4a:ec:a6:a7:a8:34:75:
                    35:22:70:76:d0:69:fa:7c:15:03:e8:55:a9:34:e1:
                    7f:33:b4:a8:84:c6:85:a9:32:cc:21:91:ef:ee:08:
                    2c:f6:f6:c6:a5:de:b2:11:e1:47:6a:cd:e6:67:13:
                    8d:ab:90:a8:14:f7:8b:d6:b4:b2:0f:bf:c1:92:34:
                    df:f7:5f:d5:91:65:81:4d:bd:e7:ee:66:cc:5c:64:
                    ae:e8:4a:f1:d8:37:18:3b:a6:5e:cd:9b:cd:e2:73:
                    9c:97:0c:ed:52:52:33:3a:26:8f:85:f1:eb:e6:c4:
                    e1:e3:91:54:5c:5c:3c:4f:bb:ce:e7:aa:95:7c:bb:
                    40:2b:38:27:37:9a:6f:30:93:b1:b0:78:ed:f9:a4:
                    23:b0:e1:40:82:f3:c2:b5:9c:e5:19:be:71:d8:d0:
                    f6:af:7f:6f:e0:86:8e:3e:20:dc:fa:51:99:82:ac:
                    e2:6e:1a:44:92:aa:ab:17:d7:6d:ae:86:ee:f4:a1:
                    66:5f:af:62:a1:ce:51:f3:24:24:7f:13:10:9b:ba:
                    d0:74:d8:7f:a1:66:43:ac:34:a1:d2:f5:ca:15:e2:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:63:50:CA:50:52:36:18:FF:9A:A0:8B:56:DD:31:55:13:DB:3E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3195597-7fda-3891-850e-d9e49f860d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.245.0/24
                  72.13.252.0/24
                  198.144.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:b3:11:04:40:39:33:98:6f:4d:3f:66:af:e0:b9:2d:83:
         7f:7c:aa:e6:3c:ed:b6:e7:c2:73:b5:12:12:4a:9b:20:94:50:
         20:15:bd:e6:b5:e7:ea:ab:0f:0f:74:17:8e:39:95:8e:ad:df:
         de:9f:6a:53:d7:48:eb:78:64:9b:c7:be:e6:11:95:d4:22:cb:
         c3:9d:5c:17:9d:b2:4c:d6:36:de:41:b6:81:53:22:71:4d:f1:
         ee:1e:d8:79:fc:1b:c2:08:94:fa:8e:59:3d:49:d7:ad:a5:40:
         0c:45:eb:fd:19:ba:27:22:e6:fb:88:7c:89:49:69:b5:b5:bc:
         3f:08:78:9c:a2:5f:7f:64:eb:e5:71:b2:56:b6:2e:da:3e:16:
         74:3e:56:68:07:52:eb:1f:38:03:11:57:5d:de:41:52:f1:02:
         7f:b1:b0:3e:be:ab:79:96:32:94:dc:2a:05:cb:c1:e4:9f:8c:
         aa:b7:7f:2f:9e:f9:b0:62:91:ba:1d:41:09:32:1a:4b:6b:c9:
         8f:75:86:29:66:ed:0a:37:1a:33:1e:f4:be:3a:be:94:ef:dd:
         f4:9e:a8:02:2c:bf:43:62:0a:21:c5:f5:19:34:01:c7:5a:19:
         8d:ee:c2:f6:3f:d3:7c:10:54:56:73:99:e6:87:9b:e3:ec:5f:
         cb:7e:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:47 2026 by rpki-client