Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a587aebd-d854-36ef-8d25-e8c5a8297f66.roa
File:                     a587aebd-d854-36ef-8d25-e8c5a8297f66.roa (raw, json)
Hash identifier:          x+TFFmsgT+MyjIl03oNYdsk9hFJ7/NVi0i9iXfUNeGA=
Subject key identifier:   E6:A1:CB:18:D5:F7:8D:91:CD:E9:46:FB:E5:05:6E:30:06:02:41:BA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32A1A1755C49F109DBC732
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a587aebd-d854-36ef-8d25-e8c5a8297f66.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.208.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:a1:a1:75:5c:49:f1:09:db:c7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=3c39f1f9-34a6-47ef-9f17-d1756f034996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:32:64:f4:7a:80:08:6e:5d:9c:c5:ed:97:
                    90:b9:0a:eb:6d:52:01:7e:52:e2:27:3c:a5:c1:d8:
                    1a:00:ff:87:f0:b0:8b:07:4d:d9:e1:3c:aa:b3:96:
                    b3:a6:7e:65:a4:b0:68:b4:33:b4:c8:17:2f:44:75:
                    97:a5:0a:d7:8a:84:bd:81:1a:22:78:70:44:0b:d9:
                    e6:9f:b8:08:c7:5d:4b:dd:2f:6a:ac:a0:2b:c4:a5:
                    33:19:49:c4:a4:30:48:72:28:ca:13:11:88:a2:c5:
                    e5:1a:a0:f6:f2:ca:f3:a0:d0:6b:75:3b:e8:ae:09:
                    a1:33:98:09:d8:55:9a:1d:47:1a:8d:6c:db:0c:f8:
                    94:52:89:3b:96:42:5f:41:49:69:d1:98:3e:90:ad:
                    72:cd:a2:8e:75:57:c0:44:dc:56:ea:c7:db:ac:bb:
                    49:99:09:14:c6:c8:2a:9d:92:90:a1:e7:5d:39:fc:
                    5e:bb:2c:f8:cf:1a:c2:c9:6e:bd:4e:b4:86:21:e3:
                    6a:14:64:b1:be:1e:5e:4c:41:f9:fc:64:81:c5:16:
                    34:25:df:88:a4:7b:e8:13:03:8c:ea:26:6a:56:79:
                    85:e4:a6:bf:54:e3:61:6f:d2:21:59:96:b3:11:c6:
                    68:20:5b:76:1d:ca:4b:e8:d2:02:f8:db:d5:13:52:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A1:CB:18:D5:F7:8D:91:CD:E9:46:FB:E5:05:6E:30:06:02:41:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a587aebd-d854-36ef-8d25-e8c5a8297f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.208.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:99:a6:09:3d:a7:82:58:cc:e3:b0:c2:61:e5:a1:49:a7:
         d7:b5:44:c5:5e:e9:ae:f2:38:5e:cd:09:41:1e:d9:39:68:f3:
         73:5c:b7:9d:9a:e5:85:5e:05:8c:7c:21:67:bc:07:b7:aa:b3:
         e2:37:c2:68:4b:94:e1:0f:33:97:71:3a:69:31:55:21:4c:0a:
         52:b0:8c:e8:51:f7:2c:dd:f3:eb:ea:0c:3d:1d:d0:8a:4e:24:
         da:de:e5:60:62:ed:4d:24:fd:14:da:94:e2:32:b2:42:73:06:
         4d:5b:cd:28:3c:50:36:ab:06:e3:3c:b3:62:f7:1d:2a:ac:2c:
         fc:b5:68:d1:ce:9a:e6:e9:1f:02:4e:91:64:77:2d:d8:34:e9:
         a6:c7:19:da:1a:9b:76:2f:d4:67:86:d8:99:e8:11:02:0d:61:
         e0:21:7f:a3:58:ac:ea:f2:7f:d4:b5:33:98:99:12:e0:23:49:
         1f:c4:bb:58:78:3f:c6:08:cc:f0:33:be:a3:21:61:a1:ff:c5:
         c2:c0:a7:2a:b0:43:9a:2c:a9:15:b9:02:5a:03:9d:60:24:1f:
         d9:e1:f6:72:12:35:cf:d2:3c:a4:c0:f3:dd:20:00:69:e5:01:
         48:02:37:76:65:b5:17:fe:ef:81:5c:dd:74:0a:6b:70:14:c2:
         3b:55:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:28 2026 by rpki-client