Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa
File:                     2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa (raw, json)
Hash identifier:          4EmBmfgeh6pz9OGes6CcChsp4Pg21DaEhJ58kInQb4s=
Subject key identifier:   D8:5C:22:91:92:E1:63:A5:7F:7F:A5:80:A4:C8:70:34:EA:5B:11:A8
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F4328584D80FFF6B76A1A3C8199E40280
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        155.72.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f6:b7:6a:1a:3c:81:99:e4:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=70c99bde-00e6-4aa8-9494-43d0de82f4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:49:89:35:87:f8:52:90:ee:cb:6c:76:4f:
                    24:20:d9:08:0e:6b:33:43:9d:72:44:4a:2d:38:96:
                    59:9c:b7:cf:33:44:af:18:0e:5e:70:83:a7:ab:63:
                    bc:08:2c:40:b3:6c:86:c6:f7:51:45:27:9a:c1:34:
                    23:68:a4:d7:d5:c1:98:a8:c4:90:f6:f5:96:d8:cf:
                    73:85:bd:39:be:a6:87:13:61:fa:4c:af:37:ba:8e:
                    98:bf:b1:39:db:d4:25:ed:6e:68:7d:15:0e:53:5e:
                    6f:0b:32:1d:fc:f4:55:3b:5b:37:09:c9:4b:f6:80:
                    5a:23:83:eb:c4:d2:7a:fe:84:55:0a:c9:c9:06:a3:
                    cf:30:b5:c2:42:c9:d3:92:fe:1c:37:1c:04:fa:a7:
                    75:d5:8b:31:91:27:a5:eb:59:2b:47:75:b2:a3:42:
                    5e:ed:b4:57:7f:19:e3:47:c7:9b:41:84:ce:24:54:
                    cc:55:52:90:4d:bd:13:6a:b7:1a:1c:d0:18:ba:53:
                    e2:f7:c6:a4:4d:82:20:43:01:d6:06:a9:0f:04:60:
                    45:94:96:56:34:8a:4b:9e:b9:f6:09:ff:fd:b1:9c:
                    90:74:22:3f:6d:26:a3:78:df:7b:9c:22:d0:8a:11:
                    9f:be:c7:95:f8:2d:3a:5b:bc:e3:6a:5c:7e:11:32:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:22:91:92:E1:63:A5:7F:7F:A5:80:A4:C8:70:34:EA:5B:11:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:58:81:62:f2:ec:49:c0:e3:14:73:13:1b:9a:3e:21:54:
         ad:21:ba:70:2e:7e:8d:db:41:11:3d:7a:9f:70:d9:ab:bf:9a:
         66:04:47:b6:8d:b9:d2:86:77:c3:9d:f2:31:c7:17:e6:6d:84:
         60:0c:dd:9a:a1:41:69:e4:35:47:74:12:c2:26:dc:1b:04:72:
         45:65:70:93:f8:d9:62:bd:5e:f1:f2:90:04:cb:65:a6:34:f2:
         6a:82:fb:b1:4f:22:ff:32:24:04:92:49:e9:5b:d9:76:7d:98:
         b6:d1:db:b8:7f:2c:85:5b:28:a4:20:84:b8:7d:c8:11:9a:d3:
         78:dc:5d:8e:f9:bf:f3:fe:0a:8b:1a:5b:0e:a6:37:7d:ea:62:
         ec:25:0a:21:fc:89:b9:c7:a1:34:de:c0:a0:6e:8a:af:e9:f6:
         f6:03:d3:bb:99:1b:72:ed:90:35:b7:46:d5:0a:8d:57:75:f3:
         44:2a:78:db:52:1a:1b:85:af:70:1e:83:e0:9c:50:75:50:b1:
         1c:e1:3a:db:39:43:d8:39:ff:4d:35:92:34:db:5b:c6:f1:be:
         20:27:62:45:ea:0e:fd:91:4b:f1:66:53:a6:28:cf:df:21:bf:
         e0:bd:be:23:f4:6f:86:8e:f2:5f:04:84:1b:00:2f:ec:81:a8:
         df:f9:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:04 2026 by rpki-client