Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/60b09832-f178-3081-b95a-4788d9046851.roa
File:                     60b09832-f178-3081-b95a-4788d9046851.roa (raw, json)
Hash identifier:          oESFuNNX5/H6OpET1fANPpc+o3PBGuCQdjBAKsd9FXA=
Subject key identifier:   68:CC:6C:7E:16:D9:1E:2E:D4:AC:9F:7E:53:06:FE:E1:00:F2:E2:20
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584CC56064B0C16D21E0A8F60C20
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/60b09832-f178-3081-b95a-4788d9046851.roa
Signing time:             Fri 06 Feb 2026 08:03:06 +0000
ROA not before:           Fri 06 Feb 2026 08:03:06 +0000
ROA not after:            Thu 07 May 2026 07:03:06 +0000
asID:                     29873
IP address blocks:        72.22.87.0/24 maxlen: 24
                          72.22.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c5:60:64:b0:c1:6d:21:e0:a8:f6:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb  6 08:03:06 2026 GMT
            Not After : May  7 07:03:06 2026 GMT
        Subject: CN=7cb12b11-0c6d-4ee2-b065-cd07ffbf827d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:d5:f0:41:0a:ac:cf:0b:30:80:b2:7c:4b:
                    84:52:98:ac:0f:2e:64:f4:15:0d:26:49:dd:cc:b0:
                    28:7f:05:d5:3b:5f:74:45:3a:91:51:f8:87:83:83:
                    8d:2b:77:6d:5c:61:7e:49:53:7a:45:8b:12:03:b2:
                    33:3b:2c:1e:fa:b0:c9:67:ba:6a:b0:b8:d9:03:f5:
                    93:3e:76:1f:03:5b:f0:72:32:20:1e:8b:c0:c8:ce:
                    26:3f:94:ae:66:31:a1:6a:b1:05:b9:15:10:73:3a:
                    e9:4d:c9:5d:7d:6c:d7:03:7c:5d:ca:23:c3:4b:8f:
                    d6:66:5a:83:39:26:64:84:41:53:bb:4f:3f:2e:f9:
                    9c:73:71:7d:c3:b7:8e:68:07:3f:2e:b5:11:4d:3b:
                    1b:76:33:22:10:68:06:68:bb:1f:c9:61:fc:ff:67:
                    59:36:92:3f:5c:5b:64:1c:1f:2e:29:5e:6c:a5:63:
                    4a:a0:ee:64:9e:ab:bc:aa:ee:1e:a2:92:47:7e:d0:
                    02:05:53:dd:d0:ae:a7:19:8a:7a:1f:35:1e:c2:5c:
                    bc:6f:e3:3f:f4:b9:e2:fc:9f:6b:88:09:e9:a4:aa:
                    7a:b1:55:93:8d:a1:01:c8:99:12:ce:08:cd:9c:9a:
                    87:76:36:dd:48:37:c6:5b:d8:9f:c2:0a:cd:70:a6:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CC:6C:7E:16:D9:1E:2E:D4:AC:9F:7E:53:06:FE:E1:00:F2:E2:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/60b09832-f178-3081-b95a-4788d9046851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.87.0-72.22.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:e9:59:46:ed:36:65:5c:69:8b:d8:ca:a6:ae:24:a6:64:
         6f:84:e4:64:1d:82:1e:17:ec:88:12:fe:67:26:97:2d:39:76:
         9e:01:43:29:72:d3:44:00:f3:a0:b0:4b:2a:5e:66:71:ba:8e:
         56:03:88:54:68:2f:1f:47:98:fa:7a:e2:cf:75:64:a1:5c:90:
         45:b1:1e:31:48:47:1e:90:ae:a6:73:4a:89:fc:4d:e1:16:37:
         0a:1d:e6:80:c6:14:6a:a1:5b:eb:0f:9c:03:73:81:00:a0:ab:
         65:dd:70:1e:a3:be:8e:8c:04:48:1e:d9:da:20:fe:f7:a4:8f:
         4f:40:07:e3:03:1f:1f:36:06:fb:27:17:44:a4:10:ef:06:aa:
         5c:f1:03:6c:63:f6:2d:9c:07:91:a7:c0:da:ab:e7:a5:38:cb:
         c6:4c:bd:92:0f:de:f0:15:fd:f9:b3:a9:0d:0c:75:4c:e5:e4:
         e6:ac:a4:49:60:20:5e:94:23:9c:10:ef:87:34:91:b2:09:82:
         ee:c3:d4:e2:52:bf:e7:c9:2e:43:06:8b:c4:48:81:01:9b:e5:
         31:a8:10:15:5d:f5:27:c7:3d:c3:26:28:30:9f:25:0a:96:e3:
         d3:5a:ad:7e:93:63:a3:61:e0:97:62:dc:58:eb:b8:2e:7e:5b:
         fb:01:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:26:44 2026 by rpki-client