Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
File:                     4940bb59-1840-3398-aa2f-52b23d3dccf1.roa (raw, json)
Hash identifier:          22uwvsbHeAKdE9Nk0FKPKPO1000CS+bLOE1ZodwAY5M=
Subject key identifier:   B0:48:68:09:0F:0E:78:8C:6D:A0:7C:FD:D1:63:2D:B5:92:AA:D0:80
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C7D7C5318212C47F19E2F8C40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        72.255.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:53:18:21:2c:47:f1:9e:2f:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=92869098-3a77-4d2a-a5bd-b37070dcf486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:23:9f:57:1e:0b:97:ac:5b:d7:ea:16:c2:
                    5b:de:63:e8:73:2a:76:1a:06:1a:f8:b0:73:f4:9f:
                    7c:11:8a:21:7a:0b:2f:5b:0e:20:49:13:29:47:13:
                    b6:ee:f5:62:b0:b5:af:57:52:70:1c:2e:80:fe:30:
                    61:c6:39:d7:8b:3e:7d:e8:88:4d:e9:c0:49:cd:dc:
                    66:c7:ed:5e:bb:f3:01:a8:d2:1d:95:d9:e8:8e:67:
                    96:1e:72:42:b1:f3:25:85:b0:c1:4c:79:11:9c:61:
                    53:1b:ff:e7:ff:e0:3c:0e:cd:81:dd:75:5c:6f:87:
                    1b:16:3a:d4:6e:06:02:38:03:15:e0:fd:88:aa:61:
                    3f:58:74:a5:af:a3:e0:0b:3b:5e:d0:94:e8:00:a1:
                    d3:df:2d:31:14:c3:8f:3f:de:fb:49:62:42:3a:c6:
                    45:36:35:21:96:91:62:83:81:d5:e4:63:74:1b:3b:
                    13:d6:86:38:bc:98:95:0e:18:58:75:98:9f:c1:ed:
                    f6:b3:c3:a7:fc:b8:b4:fb:06:98:60:24:12:e9:77:
                    4b:b2:c7:dc:ef:57:9b:42:d9:9e:3f:11:76:6c:6e:
                    7d:de:87:0d:b3:1b:81:f8:09:38:4d:46:c1:19:60:
                    08:55:6f:d4:79:85:63:79:f3:8b:f3:eb:7a:69:5c:
                    d2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:68:09:0F:0E:78:8C:6D:A0:7C:FD:D1:63:2D:B5:92:AA:D0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:13:af:41:3c:f7:17:fb:cf:18:00:59:cf:7a:8d:d0:64:
         49:eb:53:c1:9b:c0:c5:63:76:ef:2b:ea:5b:68:0a:4a:66:67:
         8e:ee:d1:63:04:8d:67:36:d1:28:f5:99:c6:43:37:53:fb:30:
         82:7d:c9:40:94:90:8f:07:cb:b8:99:c5:ca:33:4d:18:10:b5:
         12:d5:b1:73:97:f7:2c:4d:2b:be:45:43:f6:9a:2f:f0:56:a4:
         fe:d6:91:ec:73:57:98:e2:e2:e1:80:1f:7b:24:4c:f9:e6:46:
         a4:a9:52:4f:26:9e:f4:7b:fa:d5:16:0f:8c:13:e9:7e:d7:8b:
         25:12:eb:96:89:22:b7:ff:a7:57:5d:38:9b:9c:18:ca:4d:01:
         f3:98:1b:c6:b0:98:de:23:31:ff:fe:b8:ae:e3:01:68:94:5c:
         a0:92:3f:31:7b:35:cd:76:1e:e7:13:aa:65:13:b2:d0:2e:a3:
         cc:c4:10:5e:1b:f2:a5:88:62:14:8a:37:a7:13:77:7b:87:8b:
         31:3b:4b:d1:b6:2c:3a:2c:f6:40:87:ae:6c:f9:a2:81:73:f4:
         f4:5f:33:c8:e3:cd:f3:74:cd:cc:43:02:6c:92:f8:e5:71:f6:
         b8:29:70:e2:b1:5d:79:06:e7:1b:5a:15:8c:fa:29:1f:29:ed:
         d1:49:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:06 2026 by rpki-client