Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/caf05cb5-b4b3-39b6-918b-154fa34fd329.roa
File:                     caf05cb5-b4b3-39b6-918b-154fa34fd329.roa (raw, json)
Hash identifier:          Tb6yaTpq4m8W+1qcBoXPG2EolxPg/K+1tCxGZOG2ouQ=
Subject key identifier:   C0:21:A9:53:5D:AD:79:8D:41:3B:68:D8:07:53:89:F9:63:64:D8:B0
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EFCACB9EBC567DDA09BEC9A00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/caf05cb5-b4b3-39b6-918b-154fa34fd329.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     26337
IP address blocks:        72.22.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:b9:eb:c5:67:dd:a0:9b:ec:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=bf92c199-9f9e-4913-b31f-40d4047e1c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:00:15:18:81:42:89:79:68:1c:26:61:ec:
                    23:4d:34:b4:2e:5d:d9:60:52:3c:eb:6e:0f:e0:f0:
                    38:cf:e0:08:95:e9:46:63:74:cc:ea:a6:85:bf:1b:
                    db:35:03:85:00:be:7e:18:1a:97:15:4a:92:5c:c2:
                    46:a2:d4:c7:28:f7:af:b4:d7:df:b6:2c:03:59:84:
                    02:12:f8:cb:c5:ee:ac:f8:55:70:39:6c:79:50:6c:
                    75:23:ba:56:b7:4e:9d:67:56:f5:b5:b2:ee:52:dd:
                    a0:0e:83:21:68:0f:55:74:d8:bc:99:2b:54:e7:17:
                    93:79:54:80:44:fc:09:bc:28:fb:ce:f7:41:78:db:
                    81:c5:5c:45:4e:8b:56:d1:03:41:0d:5f:f8:84:6f:
                    74:11:3e:d8:c5:9e:bc:ca:af:f2:e8:8b:ea:e4:2c:
                    b9:9a:84:f7:8f:fd:c4:b1:82:d4:47:8c:0d:a5:60:
                    78:69:ff:3c:96:35:6e:36:d2:fd:58:48:d8:b7:81:
                    96:09:c0:b6:cf:1e:fc:e4:c6:9a:83:bc:c9:ff:99:
                    e1:75:2c:00:5d:a2:94:26:7d:4e:4a:ab:31:dc:4d:
                    21:44:11:ed:18:83:b5:11:83:37:51:5c:f6:91:c1:
                    c4:36:41:2e:08:ba:62:2a:06:a6:1e:47:c6:ff:48:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:A9:53:5D:AD:79:8D:41:3B:68:D8:07:53:89:F9:63:64:D8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/caf05cb5-b4b3-39b6-918b-154fa34fd329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:68:df:b6:5a:5a:d5:d7:67:bd:3f:67:f8:18:f0:7a:76:c3:
         fb:02:ed:e8:c4:13:5a:bf:20:ae:d7:34:a3:33:41:dd:ac:6c:
         6e:a0:b2:92:6c:bc:f3:ad:fe:ee:e3:cb:7c:46:31:bb:f3:b8:
         c5:4f:eb:0b:ed:7c:9b:e6:b9:c4:28:de:b3:c1:46:4e:d4:03:
         a0:06:07:07:7c:e5:ad:1c:60:61:ef:4c:ed:b4:a0:38:65:95:
         77:1e:4c:c7:f5:dc:8a:cb:08:1a:6a:08:44:3e:23:32:8c:ae:
         a9:17:a5:42:0c:a4:1b:5c:03:6e:0d:ca:45:13:1e:70:1e:66:
         fb:00:ee:86:35:e8:fc:9a:af:4a:aa:d0:24:1f:f9:5d:2a:e7:
         3e:c5:fe:c4:ac:42:f7:c9:7f:85:87:77:e9:a7:e4:7b:8e:a4:
         ff:60:e9:ed:68:98:b5:87:b9:72:42:3d:57:1b:b5:e3:b2:61:
         69:1a:e7:73:db:c1:23:c8:ae:c9:8b:e6:ad:53:ff:2c:e5:1b:
         e4:ae:5f:68:be:28:0f:87:a2:fe:52:ff:4a:4e:3b:2c:f7:ab:
         34:14:25:33:fc:b9:a8:18:c7:6e:4f:63:3e:d8:02:8d:1a:d9:
         22:a7:37:d3:51:a1:49:24:97:74:70:be:2e:4e:be:b4:63:b6:
         48:26:ca:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLnrxWfdoJvsmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
YmY5MmMxOTktOWY5ZS00OTEzLWIzMWYtNDBkNDA0N2UxYzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghkAFRiBQol5aBwmYewjTTS0Ll3ZYFI8624P
4PA4z+AIlelGY3TM6qaFvxvbNQOFAL5+GBqXFUqSXMJGotTHKPevtNfftiwDWYQC
EvjLxe6s+FVwOWx5UGx1I7pWt06dZ1b1tbLuUt2gDoMhaA9VdNi8mStU5xeTeVSA
RPwJvCj7zvdBeNuBxVxFTotW0QNBDV/4hG90ET7YxZ68yq/y6Ivq5Cy5moT3j/3E
sYLUR4wNpWB4af88ljVuNtL9WEjYt4GWCcC2zx785Maag7zJ/5nhdSwAXaKUJn1O
Sqsx3E0hRBHtGIO1EYM3UVz2kcHENkEuCLpiKgamHkfG/0iSvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAhqVNdrXmNQTto2AdTifljZNiwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvY2FmMDVjYjUtYjRiMy0z
OWI2LTkxOGItMTU0ZmEzNGZkMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBZCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRo37ZaWtXXZ70/Z/gY8Hp2w/sC7ejEE1q/IK7XNKMzQd2sbG6gspJs
vPOt/u7jy3xGMbvzuMVP6wvtfJvmucQo3rPBRk7UA6AGBwd85a0cYGHvTO20oDhl
lXceTMf13IrLCBpqCEQ+IzKMrqkXpUIMpBtcA24NykUTHnAeZvsA7oY16Pyar0qq
0CQf+V0q5z7F/sSsQvfJf4WHd+mn5HuOpP9g6e1omLWHuXJCPVcbteOyYWka53Pb
wSPIrsmL5q1T/yzlG+SuX2i+KA+Hov5S/0pOOyz3qzQUJTP8uagYx25PYz7YAo0a
2SKnN9NRoUkkl3Rwvi5OvrRjtkgmyj8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:42:54 2026 by rpki-client