Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d0e058c6-b4f2-39fa-8167-2cdb1cbc9e1a.roa
File:                     d0e058c6-b4f2-39fa-8167-2cdb1cbc9e1a.roa (raw, json)
Hash identifier:          hMjvkREzAkYTKBxHJFvQ9YMQwlMO+NKOY8WJ+VxHb9U=
Subject key identifier:   90:3F:35:F4:9A:24:9B:F9:7B:5A:89:ED:96:B7:C9:F6:C6:F7:E7:D8
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584CA491B07A8298F89EDCD68FC0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d0e058c6-b4f2-39fa-8167-2cdb1cbc9e1a.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     199737
IP address blocks:        72.14.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:b0:7a:82:98:f8:9e:dc:d6:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=0d71a67b-ffbd-4af1-a074-44c6b1a30462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:48:3b:0f:70:b7:1b:4f:96:c3:98:81:dc:
                    c5:56:f4:07:51:dd:b7:23:8b:d2:4c:b5:34:5f:2b:
                    8d:0c:86:07:a2:46:5c:e5:28:68:9e:8f:fd:26:b0:
                    9a:8c:44:aa:cd:85:f5:a2:fe:8f:7d:b5:59:d6:5b:
                    fb:da:10:c0:05:2d:15:f9:33:7f:a9:7f:4f:ba:95:
                    22:41:0b:d3:af:4e:cf:65:54:65:ae:e8:7d:64:be:
                    fa:5a:a8:4f:fa:1b:d3:d1:3a:95:3d:09:be:8f:1c:
                    97:32:73:0e:d5:53:fc:c6:91:12:b8:ba:a3:28:02:
                    f8:c4:c9:ef:be:f7:f8:70:38:14:ca:18:b5:76:82:
                    8d:4d:48:bf:b8:c4:e2:0f:7d:b1:30:b3:9c:1b:f8:
                    9c:d3:c2:80:f8:27:51:9e:c4:58:85:4e:7a:d0:c0:
                    e1:5a:68:8b:73:3a:55:29:df:56:fc:d2:b0:bb:a1:
                    9e:c5:27:aa:1e:57:9b:bf:29:90:ac:49:6d:9a:3d:
                    3e:00:cd:5b:2b:ed:80:8f:54:67:17:2a:03:c2:29:
                    10:fd:36:0f:c1:c2:db:df:79:60:b1:3e:db:c8:1f:
                    4a:02:7f:f8:7d:fa:f5:d3:21:d3:64:81:be:74:90:
                    bb:70:70:99:b6:51:c9:e8:06:32:a0:12:c1:58:fc:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:35:F4:9A:24:9B:F9:7B:5A:89:ED:96:B7:C9:F6:C6:F7:E7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d0e058c6-b4f2-39fa-8167-2cdb1cbc9e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4e:5a:d4:af:d5:5f:d5:b4:34:61:21:a2:d0:f1:bb:de:29:
         24:6e:b7:05:1c:86:32:bf:8a:44:44:a9:c6:e0:3e:60:fe:3c:
         5c:be:ef:ba:a0:34:90:bc:48:33:a7:df:90:33:73:f3:90:91:
         d9:61:04:d3:90:6d:52:ab:48:2f:d5:9d:2f:e8:60:5e:73:57:
         e1:90:35:4e:86:95:ab:1e:a3:78:0a:37:3a:b3:9b:cd:7e:bf:
         12:71:e2:4e:12:f8:14:db:94:47:29:e4:b4:36:16:8b:60:6a:
         e0:45:37:60:55:b1:0c:0f:41:0c:65:34:38:31:c2:45:8b:30:
         76:e0:38:b0:ad:cf:1f:bc:7f:48:6e:db:44:5c:2d:86:29:c4:
         24:35:9b:82:01:e6:f5:13:0d:c5:7a:32:1d:5c:cd:25:bd:a8:
         8b:53:43:27:84:1b:5c:8b:d4:31:6a:be:df:03:2f:3f:70:a0:
         c7:bd:14:9f:b8:fa:f7:a5:a9:d4:0e:f4:f1:8e:01:7f:19:40:
         cc:cc:74:62:61:d6:d6:3d:2d:f6:04:f3:8d:60:18:ab:a1:07:
         02:b2:9f:35:ac:67:c7:db:1b:93:15:90:c3:0d:0f:d7:e3:84:
         ce:68:97:cb:70:89:06:28:d8:9c:45:7d:21:49:57:38:98:a4:
         58:c8:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:19 2026 by rpki-client