Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
File:                     4940bb59-1840-3398-aa2f-52b23d3dccf1.roa (raw, json)
Hash identifier:          0R2hKqdcbKPPIbVU75UDra269M3QdKIt9ZovIbCHKQE=
Subject key identifier:   89:E4:98:90:54:0C:1C:27:1B:4D:BF:60:D0:07:66:3E:29:C0:8D:A2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5E1A5E303CECB7DC3B3EE600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        72.255.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:5e:30:3c:ec:b7:dc:3b:3e:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=83f2ebf6-b716-4ca2-ab89-6a4eea43baac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:b0:03:16:97:bb:2b:6f:cb:0c:7c:3e:7d:
                    83:d1:b8:d2:2c:ce:a1:d1:7f:7a:9f:15:01:e1:ec:
                    9b:80:4e:33:f3:db:06:60:08:d3:1f:1e:3b:63:e7:
                    91:fb:44:8d:4d:91:92:a7:f2:9b:eb:52:6d:b1:6c:
                    88:f9:aa:27:df:dd:14:fb:cf:7e:c6:ea:a7:81:14:
                    c3:24:3d:ba:de:d0:60:15:6f:0e:b5:20:1f:18:d5:
                    57:cb:da:ed:27:35:31:42:f7:74:d4:45:81:1a:1d:
                    af:bd:e1:fa:e4:e2:3a:d5:f6:0a:e3:0e:20:5b:ce:
                    ae:f6:f3:cc:ff:3a:85:0a:b5:b8:96:12:28:64:c3:
                    d3:90:f1:08:d4:9a:82:ba:a2:8c:5a:b2:9c:b9:3a:
                    55:67:16:b5:3d:8c:ba:3f:60:9d:e6:96:a6:a9:d6:
                    d2:5e:00:a7:8c:bc:91:fb:92:48:09:df:a9:5a:35:
                    c4:ff:bc:8d:07:c1:47:e1:51:a2:58:7a:2d:d7:42:
                    2e:a2:99:d6:81:b3:93:11:34:14:1f:73:9b:b1:81:
                    9a:3b:c6:67:3b:07:4b:ce:71:5e:a8:a2:82:36:13:
                    d5:88:8c:b5:e9:fd:5e:15:ad:cd:06:9a:75:a1:54:
                    3e:2a:04:1c:ae:8f:06:c4:85:1c:20:d5:89:b2:da:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E4:98:90:54:0C:1C:27:1B:4D:BF:60:D0:07:66:3E:29:C0:8D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d1:b5:fe:75:25:8a:81:27:76:b0:2c:ab:f6:a6:ce:53:a1:
         83:f9:8b:be:97:b1:36:f6:4d:a5:f7:9c:25:ea:7e:bb:8d:81:
         bc:5b:23:94:85:07:05:31:cc:20:a0:58:b1:c1:bb:49:a7:91:
         a5:53:19:8b:09:8e:ea:02:da:ce:38:35:3f:88:97:7e:5d:94:
         3a:42:3d:74:7b:06:c2:38:d6:d8:a1:fe:56:3f:d2:b9:1d:ee:
         80:b5:56:d0:41:4f:e3:3b:1f:92:fe:36:53:99:4b:22:47:34:
         e4:6e:5f:7c:72:5a:87:a8:5a:50:03:92:29:0d:a2:5f:b6:94:
         80:d5:a1:5f:e5:ed:6f:b3:d2:d7:82:c6:ab:9b:48:23:d5:57:
         48:fe:d5:19:43:a5:43:14:ae:8b:53:5b:1f:2e:5c:a3:08:56:
         df:ea:71:40:3d:5b:97:ef:4d:e0:e1:88:be:e3:f0:bc:ec:08:
         ef:80:9e:5c:56:0f:16:14:6d:03:a7:aa:3b:c9:72:1e:50:fc:
         56:58:29:fb:94:c1:a9:f8:22:85:07:6b:bd:72:a6:69:10:1d:
         6f:c4:41:83:44:f0:31:cd:4c:c5:98:af:b2:28:f9:95:62:5b:
         d2:dc:13:e8:e2:38:b2:44:2b:7b:eb:ac:1a:7c:55:7e:c5:7a:
         92:03:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:17 2026 by rpki-client