Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa
File:                     ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa (raw, json)
Hash identifier:          H2CIfN7l+0U/TLZgMM9ZyVBqIcKYN2iAP1ZJ0meIIys=
Subject key identifier:   31:A4:8F:01:61:C8:86:73:C4:51:A3:41:2B:58:87:F3:28:57:37:80
Certificate issuer:       /CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
Certificate serial:       010D0C9F4328584E5FDF4E628843BA37460F3A80
Authority key identifier: C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     979
IP address blocks:        72.172.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:4e:62:88:43:ba:37:46:0f:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=cf5e6d22-c5a9-4bdc-a2c1-d692c0073260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:34:7b:b9:c4:93:f2:aa:24:cd:07:b9:58:
                    8d:f0:a7:56:4c:2f:01:cd:81:73:42:9f:f0:ae:e4:
                    fa:ec:06:a6:28:8e:a6:fc:16:40:83:33:b3:9a:9b:
                    9f:b9:bb:cd:e6:84:bf:34:c2:d7:9d:10:1e:07:58:
                    36:a0:f1:e7:c0:dd:5d:ae:97:c0:a3:6b:d8:b0:e9:
                    49:1a:95:c9:eb:0c:54:d6:24:d7:b8:b0:d1:28:cf:
                    35:3b:e4:f8:76:f6:79:0d:4d:2c:e8:ea:10:7e:90:
                    f8:75:ec:46:e5:7d:ff:b4:cb:10:a5:ec:1e:b1:3d:
                    3f:3d:60:89:c8:17:03:84:5b:76:6c:f5:90:91:e3:
                    3d:d9:24:20:e9:56:3b:88:d2:45:bd:a9:20:52:ec:
                    23:cc:96:6b:97:11:61:28:80:da:e8:4b:f0:45:af:
                    5a:af:75:65:bc:e8:6a:14:0e:ef:60:96:10:d4:c0:
                    df:cc:f7:bf:56:7a:64:aa:f6:e5:d8:e4:8c:4e:42:
                    8b:9d:f9:41:e5:82:91:38:38:92:08:49:78:5c:6c:
                    9d:0a:20:70:b2:65:96:45:28:55:82:13:9a:9f:8b:
                    10:37:44:57:06:90:49:4c:ed:9d:05:a9:cb:95:4f:
                    74:9d:3d:14:b1:27:80:e9:4c:2c:10:02:45:8c:75:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A4:8F:01:61:C8:86:73:C4:51:A3:41:2B:58:87:F3:28:57:37:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/ae6b9f9d-78b8-3bf6-afcc-f93634b40d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:55:2c:e0:b3:72:be:ae:c6:3b:6a:3e:e0:33:c4:8e:21:10:
         79:b8:d0:74:6e:26:4d:ad:4d:7f:63:21:6e:83:e2:8b:37:c4:
         50:55:3b:bf:03:f8:96:ca:a3:cd:76:81:77:32:ba:36:07:48:
         c9:78:69:07:dc:43:5e:d9:0f:79:98:88:3f:bc:6d:db:3a:b0:
         70:d7:1d:31:f2:f3:75:77:b2:49:99:7a:27:48:d6:33:d2:94:
         83:f1:c7:e6:0c:a3:3b:a3:3d:93:97:4c:2a:5a:fd:f8:3f:51:
         22:19:b3:fb:a2:e0:b7:58:44:86:69:0d:67:7e:9b:25:e1:9e:
         f4:ab:41:e1:92:dc:7c:5c:35:03:dc:36:ae:2a:3c:f2:09:42:
         07:bc:e8:d8:dc:e7:8c:ff:3d:30:c7:6c:19:28:a7:e6:f3:86:
         f9:28:d4:40:33:29:a6:22:8d:b7:4c:fc:eb:9b:57:97:eb:28:
         95:7e:2a:aa:9a:76:92:d2:92:9b:84:b6:dc:a2:43:af:9e:4d:
         ce:7e:5c:96:dd:98:a8:99:1f:92:c8:5e:6c:70:8b:95:58:66:
         6a:29:ca:4b:4d:16:64:fb:9d:91:28:57:67:d4:c1:86:c1:6d:
         aa:b6:95:48:f1:45:13:c6:d0:b4:4c:8b:c3:54:86:36:37:b4:
         40:ee:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:34 2026 by rpki-client