Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa
File:                     e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa (raw, json)
Hash identifier:          /nR3UI27fYchC/LTHomOuYU40BM4jygjUT3Gpvbw//c=
Subject key identifier:   B7:EC:13:42:68:57:FC:D6:02:E8:9A:A2:96:A9:0A:E5:FB:0A:F1:0A
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584E4AEF348FBBD74ABA800BFC40
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     393233
IP address blocks:        173.0.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:34:8f:bb:d7:4a:ba:80:0b:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=92b08a50-175c-45b1-989b-d32f200e3e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:d6:a4:b2:0e:0a:ff:aa:aa:5f:7e:c3:95:
                    c0:34:fc:bd:84:0e:01:2e:bc:49:c6:be:39:9a:d0:
                    d6:2f:2e:86:77:ab:7b:9f:e0:de:46:73:df:26:9a:
                    b9:d2:4f:c8:24:ed:8d:f8:7d:20:ef:11:cd:ff:05:
                    98:73:20:e3:0d:34:b1:e6:7e:60:2d:7a:3f:2b:a3:
                    e6:68:27:dc:a7:51:e3:6c:7d:4b:34:1a:6e:2e:35:
                    73:8b:19:63:eb:d7:9c:b3:4d:e9:89:6c:03:0d:39:
                    55:f9:ae:73:38:c1:ef:b0:56:69:c7:3b:75:4b:14:
                    30:4b:52:d7:c8:49:63:01:77:8b:70:90:78:ec:8e:
                    1a:af:d1:6d:00:d3:32:62:c3:26:ca:26:fa:6d:08:
                    93:fb:0c:56:19:01:a7:b7:05:e8:f0:62:0e:91:d6:
                    d1:68:16:a4:64:f8:a9:d2:22:5c:40:d2:7f:9e:bc:
                    31:ab:86:44:42:c9:fc:c2:c0:32:4c:4c:1b:e8:ab:
                    a0:66:83:76:95:79:2e:22:46:13:b5:43:fb:7a:33:
                    5e:1a:27:87:3d:cb:f3:3f:9f:c4:d3:63:f5:12:37:
                    03:fa:e1:20:b3:db:32:29:c1:4c:b5:3f:0e:6b:99:
                    ea:bd:8b:bd:96:75:1d:6b:68:50:07:27:4f:7d:73:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:13:42:68:57:FC:D6:02:E8:9A:A2:96:A9:0A:E5:FB:0A:F1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:e3:5d:52:1b:5d:0b:d2:9d:33:c2:8e:79:18:2c:e7:1b:
         8c:39:09:19:ae:4f:b8:3e:61:11:3b:fe:e9:c1:eb:08:b6:95:
         85:7f:bc:86:63:c2:4e:48:be:31:52:5a:cc:cc:0b:d0:54:12:
         1c:3c:71:72:36:c3:48:92:6a:d2:58:34:6f:8a:96:bd:2d:3a:
         5c:ac:1c:c0:a3:1a:50:9d:61:f7:22:ae:36:39:49:b2:2b:b9:
         ea:0f:ad:c5:b9:00:27:16:91:ae:51:53:3f:09:09:9f:42:13:
         8e:35:ea:0a:00:3b:06:d4:7d:b0:1b:fc:1b:a4:5c:bc:d4:13:
         3e:9b:fa:77:88:e1:19:5f:e2:ae:dc:5e:2d:a3:76:ef:77:7f:
         d3:52:c3:5e:05:ed:b8:2c:b9:e6:9e:59:d2:da:08:db:a6:87:
         fb:31:6d:57:ff:1a:cc:27:fd:42:6b:d0:c2:c5:1d:b2:7f:7f:
         37:77:d9:51:9b:21:7b:27:65:5a:f6:a7:71:5f:da:e5:77:9f:
         ae:04:d7:d8:64:75:0c:96:fe:2c:03:93:a4:ca:fe:bc:15:32:
         2e:a1:78:9c:dd:4d:52:b7:0b:bc:c5:d3:3f:93:e8:c2:ae:cf:
         90:eb:ef:4e:97:96:cc:a8:61:39:b4:a8:48:47:fd:76:3f:ef:
         5f:c1:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:36 2026 by rpki-client