Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/c54f7843-bc33-3764-8a12-276b5939ca94.roa
File:                     c54f7843-bc33-3764-8a12-276b5939ca94.roa (raw, json)
Hash identifier:          +M9cTqMhUsNp0wMZzmjhFFzMwZ/BS2AqTcXTETMjlsc=
Subject key identifier:   A8:20:4A:AF:E5:8D:54:07:03:78:EE:4D:7C:C4:57:2D:F6:9D:6F:91
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584CC54A8BEC2A0443E7E5DC7340
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/c54f7843-bc33-3764-8a12-276b5939ca94.roa
Signing time:             Fri 06 Feb 2026 07:19:05 +0000
ROA not before:           Fri 06 Feb 2026 07:19:05 +0000
ROA not after:            Thu 07 May 2026 06:19:05 +0000
asID:                     46606
IP address blocks:        72.22.69.0/24 maxlen: 24
                          72.22.70.0/23 maxlen: 24
                          72.22.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c5:4a:8b:ec:2a:04:43:e7:e5:dc:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb  6 07:19:05 2026 GMT
            Not After : May  7 06:19:05 2026 GMT
        Subject: CN=5c19e805-88d1-4ef9-b598-cb04e0aaade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:a3:90:87:35:30:a7:79:e8:c1:f8:57:fd:
                    52:99:3e:38:02:f5:7b:fe:22:e0:1a:c8:be:ee:58:
                    65:dd:cb:e0:28:b6:5d:2d:8f:cb:08:63:93:37:4e:
                    d1:4f:ce:3f:71:ef:29:fa:10:66:1b:d2:bb:b8:16:
                    a1:ef:24:c4:dc:db:76:a0:83:cb:e2:55:2c:d2:38:
                    59:dc:cf:65:c9:53:66:15:32:f1:1d:1d:19:91:7e:
                    6a:de:88:01:71:c4:a2:9c:4d:e6:dd:ac:74:19:9b:
                    3b:53:94:aa:d7:91:56:ab:f5:75:21:a3:06:18:24:
                    28:e4:ae:24:fa:e4:f8:16:4a:4f:06:e6:3c:5d:6c:
                    30:31:bc:2f:37:53:c9:ab:6d:66:b7:b7:43:fe:6a:
                    40:a0:75:7f:93:e8:36:c4:45:ec:3c:fc:5b:26:96:
                    a4:ad:0f:c9:53:35:26:0c:0d:fa:0c:1c:6b:a1:28:
                    1c:99:2d:43:6b:ec:e0:dc:f7:78:ca:45:63:26:01:
                    cf:d0:e0:60:84:78:49:4f:97:cf:12:84:a1:66:80:
                    ab:48:fb:60:60:14:ee:ef:66:e1:00:88:ac:b1:7c:
                    38:17:50:3c:0d:69:6c:9c:e7:1f:ea:4c:1b:e6:32:
                    08:57:d5:34:f7:e1:b6:96:a0:df:d0:ae:03:f0:0f:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:20:4A:AF:E5:8D:54:07:03:78:EE:4D:7C:C4:57:2D:F6:9D:6F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/c54f7843-bc33-3764-8a12-276b5939ca94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.69.0-72.22.73.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:36:9e:8d:6b:e5:49:fb:45:a8:25:00:65:15:fc:a3:1d:89:
         04:a5:ae:9f:4c:2e:7e:94:ae:ae:dd:2a:ef:78:0a:10:9d:ae:
         80:61:23:f6:97:ed:95:ed:7f:8d:29:21:9c:d5:dc:29:24:cd:
         26:c3:94:08:4b:bd:b1:fa:ea:ce:86:4b:b1:c5:8c:46:ae:59:
         fd:df:b0:1c:d6:6d:0d:52:c5:40:cd:d0:45:23:35:90:d8:2d:
         81:1b:2b:0a:86:72:51:43:d6:e0:99:f1:8a:ae:92:3f:b3:79:
         e8:f7:06:9d:6f:37:4d:fa:a4:2d:bb:0e:e3:61:c8:fe:b7:d4:
         04:73:6d:6f:4e:3d:8d:f0:b4:1e:f6:9a:61:78:05:ab:41:be:
         1b:e9:3c:b1:e1:2d:cd:13:ff:9c:f2:84:6c:1d:91:05:e3:3a:
         87:85:79:95:50:ed:75:10:06:25:07:c4:b9:7f:2a:9e:5e:4a:
         63:b2:e5:b5:95:ff:de:f4:f7:a8:b4:a7:de:40:d1:ca:db:b7:
         70:20:06:22:7d:3f:5b:49:c3:8d:b1:a3:b3:eb:98:52:32:14:
         19:68:1f:86:ca:88:d8:44:07:01:4d:4e:64:ed:2b:f4:69:65:
         4e:07:f3:c7:11:dd:db:5a:eb:b3:6d:60:1e:e5:20:5b:50:cc:
         51:c5:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:58:16 2026 by rpki-client