Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa
File:                     f5c2204a-c798-3685-8995-a2829476ac78.roa (raw, json)
Hash identifier:          RT83rRHh2MbbNT5BRg2kY7GJvKCQqa6kCGwIsNysHew=
Subject key identifier:   90:ED:97:DD:5C:08:81:DC:1A:BB:CC:46:B7:86:0F:23:9D:8B:36:03
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584CE8F76DEC35C9BC8A8933B180
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     46606
IP address blocks:        72.22.87.0/24 maxlen: 24
                          72.22.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6d:ec:35:c9:bc:8a:89:33:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=c5241a7b-0572-4c69-b828-8d1edc0e4eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:66:06:78:f9:fd:09:3f:00:cb:64:ce:2c:
                    0c:96:fe:1f:b5:11:14:0e:f9:9e:07:64:64:31:68:
                    1f:e8:b8:5e:d2:7e:7d:ed:1f:37:03:26:65:1f:43:
                    85:03:a5:78:e8:ae:7b:ab:2e:42:80:f7:3e:cd:62:
                    2e:0e:ad:72:fa:38:8b:e7:a1:09:39:95:37:14:00:
                    08:36:12:69:18:06:12:a6:6c:a5:b2:6f:66:c2:86:
                    df:45:03:f8:d1:1b:b3:67:98:95:6f:f7:15:64:80:
                    f0:e9:c0:89:47:30:10:ec:2c:11:43:29:bf:11:2f:
                    77:f1:a4:dc:ae:c2:8a:16:93:4d:6f:8e:02:43:d9:
                    fb:d8:c4:25:0b:b6:71:1b:f5:0a:51:60:00:05:cc:
                    6c:33:60:15:0f:61:c8:0f:ce:0b:4b:73:00:09:68:
                    c2:79:17:09:99:99:a9:b2:7b:65:25:30:9c:e3:40:
                    a4:38:dd:d3:90:5d:58:40:d6:01:d6:8e:3d:d2:46:
                    f3:0e:f6:0a:37:c1:46:81:91:98:f7:b5:79:4a:c0:
                    8a:88:b5:9f:02:c0:1d:5b:ed:c9:66:36:22:e5:3a:
                    42:16:ee:35:f7:ed:d6:92:76:71:7b:d4:4a:c3:74:
                    0b:0b:d3:da:2b:a1:90:34:f9:19:17:68:6f:4f:aa:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:97:DD:5C:08:81:DC:1A:BB:CC:46:B7:86:0F:23:9D:8B:36:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.87.0-72.22.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:c9:ef:db:ed:01:6b:fb:f6:49:d5:3b:dd:25:3d:47:8b:
         3e:76:9f:06:b5:49:3d:50:40:ce:e8:bc:00:26:46:81:34:bd:
         b3:62:26:6b:a6:8c:43:23:30:0e:60:92:5a:24:9f:a1:82:f8:
         6c:e5:90:15:cd:4b:80:0c:81:f1:a6:48:e3:ed:9a:ad:81:13:
         91:56:11:04:0e:5f:c3:54:08:0a:fe:91:ad:68:f8:28:7c:3f:
         4f:66:1b:ce:c8:78:3b:e4:9d:a5:83:79:c0:64:3a:59:60:f8:
         6d:9d:a1:9b:95:e1:a7:c5:aa:fa:2a:b9:ed:30:20:8a:9d:3c:
         38:33:e3:db:9c:54:e2:3d:bd:14:5c:22:4a:1e:1f:79:f7:d3:
         64:36:1b:be:40:82:67:2a:f5:ec:3d:ab:6a:3d:d2:5a:c6:75:
         f5:47:0d:9b:8f:20:e8:73:5f:70:dd:d8:66:3d:3d:3b:dd:12:
         21:cb:2d:af:2d:6c:70:01:ec:4b:de:4b:68:1e:17:50:c7:39:
         ea:d4:d3:f6:ba:94:8a:1a:ec:07:62:df:3a:9c:f3:7f:d6:71:
         ba:27:93:0b:b2:86:20:3a:94:74:b0:8a:9c:63:4a:f3:67:2c:
         68:04:a7:4a:de:2a:2a:19:1e:c6:3e:83:cd:19:6a:63:e5:d1:
         b1:7b:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:39 2026 by rpki-client