Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/c1d57301-5b8e-3f2a-a23a-954c9fb3d651.roa
File:                     c1d57301-5b8e-3f2a-a23a-954c9fb3d651.roa (raw, json)
Hash identifier:          yoLwRHloLUSMtZAwRPfu+1s4AeQIgV62n5CB1RQU2Ss=
Subject key identifier:   59:CC:83:0A:5B:5B:F1:20:E0:34:D5:56:05:AE:B9:03:50:14:5A:1B
Certificate issuer:       /CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb
Certificate serial:       010D0C9F4328584CFC8225A2B9F6D24CFD949F00
Authority key identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/c1d57301-5b8e-3f2a-a23a-954c9fb3d651.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     22898
IP address blocks:        192.69.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:25:a2:b9:f6:d2:4c:fd:94:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=4e6b9830-854d-454f-a94b-f3ddb5ecc946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:aa:5c:b6:c7:86:d3:58:62:cf:1e:ea:d5:
                    77:2d:b7:66:ce:43:97:ea:64:7f:26:54:49:bd:c7:
                    e2:69:e9:a6:70:09:1f:e7:5c:48:e2:28:ef:b0:db:
                    8e:be:fe:f5:40:4d:2e:bf:37:fd:c0:db:46:5d:3b:
                    59:e0:98:52:2e:ec:24:9e:eb:3f:e8:b8:9d:fa:1a:
                    d8:9b:fa:6e:ea:b6:98:79:2a:2e:5f:de:ff:91:8f:
                    e9:81:e1:9d:85:26:14:87:da:55:b2:f9:55:91:71:
                    90:99:6d:9a:cb:fa:9a:a8:a2:90:ca:28:57:01:2a:
                    6c:45:32:ac:ef:63:f6:3a:6e:73:b5:a1:aa:36:8b:
                    43:25:35:8b:d2:03:0a:fc:9a:f9:11:ca:3f:24:61:
                    b0:89:92:59:96:40:1b:46:b9:35:93:99:5d:92:e1:
                    53:33:43:fd:e1:3f:a9:66:44:16:b7:32:c2:d1:bd:
                    ce:3f:44:8f:41:6f:6b:b9:d1:82:0e:b4:a5:cc:9e:
                    c1:60:5f:b3:e2:88:73:41:2d:14:81:16:75:94:f3:
                    85:4c:b5:00:b4:ca:a2:7a:83:f0:68:ee:0e:da:01:
                    de:d2:9d:06:91:a2:9b:d8:2c:ff:e3:5d:a1:e4:6a:
                    c3:bc:d6:a4:f1:55:62:1c:75:70:fb:2f:be:d0:61:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CC:83:0A:5B:5B:F1:20:E0:34:D5:56:05:AE:B9:03:50:14:5A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/c1d57301-5b8e-3f2a-a23a-954c9fb3d651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.crl

            X509v3 Authority Key Identifier:
                keyid:BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:e1:90:94:5f:9c:c2:13:66:07:e0:2c:80:42:94:59:d8:
         0a:3b:c9:0e:3e:69:54:f3:8c:8c:ec:08:75:89:68:11:db:8e:
         54:25:08:cd:9b:af:86:8a:3e:3b:91:ca:83:35:7d:ec:10:4a:
         c4:44:f9:70:16:00:65:74:5e:49:90:d8:55:fd:e1:b7:ed:d1:
         b0:57:8f:5c:70:7d:50:5f:cb:85:e5:5b:ae:c4:39:64:76:6d:
         16:74:a0:0c:d8:15:f6:f9:00:c7:34:a8:f7:a3:c4:1d:6c:f9:
         c2:9b:0a:a2:80:de:bc:9d:df:ec:ed:5c:53:7b:60:f0:d4:e1:
         5e:ab:71:bb:bc:90:70:52:99:b8:df:1c:dc:0c:b0:9b:87:ac:
         d6:15:9f:52:45:8c:a6:00:f3:52:fd:07:2e:56:b7:85:be:78:
         d2:a0:8d:17:8b:2f:21:86:b6:75:0b:5d:6f:c3:38:6a:ac:36:
         dc:2a:84:51:70:5d:26:79:a9:90:58:7c:5d:a1:c9:3b:0a:9c:
         8d:ff:d3:8d:c6:c5:bf:c3:31:f5:20:08:8c:ba:60:56:43:45:
         77:fa:1e:f2:38:a5:ec:7d:e8:ea:90:23:dd:fb:8d:b1:4c:99:
         d1:92:e1:98:c7:5e:0b:ec:ae:66:05:d0:6d:ac:9b:9e:23:13:
         2a:18:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:43 2026 by rpki-client