Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e45d3597-4509-3627-83c2-be5c2767a89d.roa
File:                     e45d3597-4509-3627-83c2-be5c2767a89d.roa (raw, json)
Hash identifier:          Zmbe5jP/0P5dPsY7ex1kbHbt+59521+lpTlWSGUiEcg=
Subject key identifier:   FC:C3:C7:23:2E:23:85:81:40:DA:05:DD:21:BF:65:3A:F2:AE:CB:66
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C7D7C7A5E7EC5BA4B75F06A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e45d3597-4509-3627-83c2-be5c2767a89d.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        72.255.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:7a:5e:7e:c5:ba:4b:75:f0:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=ed38460f-15e8-4fab-a00c-8193c0a01411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:d8:d2:f6:0a:12:bb:b4:c5:7f:54:b5:b4:
                    16:27:ea:31:77:7c:66:f6:5b:f9:22:a6:b7:ec:c7:
                    a0:35:09:ce:f4:60:65:2b:eb:9a:d2:61:a0:d5:b5:
                    34:f0:d7:a0:55:e1:01:19:81:2c:33:4d:6a:62:db:
                    b0:ae:b4:ab:37:54:00:b5:77:8f:13:45:73:e1:78:
                    7e:68:8e:55:06:13:31:00:5f:b6:93:2b:20:26:f8:
                    1c:b9:cd:c5:ea:74:c3:b6:82:0c:8c:07:61:5d:bb:
                    f4:de:f3:06:57:dd:fa:1b:be:88:5f:56:25:d1:c3:
                    8e:2f:18:87:98:d8:e6:66:b5:6e:70:b8:f4:da:b4:
                    40:67:84:c8:8a:fb:69:a2:c0:ae:a1:bb:8e:34:f0:
                    5a:17:27:d8:3c:7d:5c:a7:a5:02:74:62:6a:22:99:
                    02:c6:a0:23:9a:1a:36:b7:a2:da:c6:ca:7d:d3:45:
                    43:99:b7:a8:7c:05:fc:a2:0e:42:31:de:a1:6c:a4:
                    fd:bd:48:c3:86:e0:bd:af:56:a3:f5:3b:5b:fd:11:
                    d1:a5:03:00:5e:8e:63:c1:3b:c5:b0:bd:f5:6a:f5:
                    68:31:d0:86:a4:91:94:11:e0:03:2e:b6:a5:b3:bc:
                    9e:7c:a8:6f:8a:ba:a9:58:a2:d8:26:b6:03:d7:d1:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:C7:23:2E:23:85:81:40:DA:05:DD:21:BF:65:3A:F2:AE:CB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e45d3597-4509-3627-83c2-be5c2767a89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:48:93:31:3c:bd:6b:53:00:7d:88:b5:24:43:2e:1e:a5:
         18:94:85:ce:31:3b:2f:95:88:eb:6c:21:40:ea:27:8d:b3:bb:
         ed:3b:e2:d5:4e:5c:6b:66:47:c7:e8:99:e6:fd:1b:ea:bc:6b:
         81:5d:eb:f7:27:e8:7c:54:e9:60:06:d4:22:35:2f:fe:64:96:
         66:80:45:42:e6:58:d1:d3:f5:e5:6f:64:be:c1:b0:22:51:1f:
         9c:72:da:97:66:9e:a7:62:c1:59:fa:6f:b4:a3:ad:41:f1:75:
         4f:57:50:ba:95:58:bd:4d:76:9f:3b:72:d7:31:e8:cd:ab:29:
         2c:0c:c0:bc:a6:ed:dd:85:cf:9f:33:7a:de:73:7f:78:8b:29:
         b0:c0:9d:b7:48:fe:a0:6d:14:d9:47:87:17:c6:ba:f7:f0:0f:
         37:34:f9:8f:7d:46:d4:9f:c6:20:93:b3:05:f8:52:6c:2d:8e:
         f3:c5:2b:12:6c:23:87:a3:5f:0a:07:2a:dc:51:49:19:f2:b4:
         0b:34:ee:8f:bd:91:04:c0:de:bd:57:b3:ed:5e:5e:2c:60:c2:
         0b:40:aa:2c:13:e2:9c:3e:f6:53:58:9e:7d:f6:ef:95:51:fe:
         8a:ae:42:2b:43:d7:31:52:8d:f2:24:1a:00:ca:90:38:d4:f1:
         49:c1:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:45 2026 by rpki-client