Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba0699ad-3508-3e4f-8761-0d45fe134466.roa
File:                     ba0699ad-3508-3e4f-8761-0d45fe134466.roa (raw, json)
Hash identifier:          7LOEc1ONjCy3gHINB9wHRdbNHyYdYuDWyiX4Qs5cOTI=
Subject key identifier:   EE:ED:23:0C:A9:CF:09:CD:67:F4:F2:2C:4C:58:61:BF:29:E0:DA:2E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0975704208DB93DBC60F8A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba0699ad-3508-3e4f-8761-0d45fe134466.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        72.193.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:57:04:20:8d:b9:3d:bc:60:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=ca7b68e1-3dad-40f1-85f7-8b6098413bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:3e:5b:52:cb:7e:c0:90:34:04:c6:15:d3:
                    69:10:c3:cf:3b:45:71:7f:15:65:2a:5c:9f:3e:dd:
                    4c:27:f1:80:44:3b:d2:07:da:32:f7:90:f3:d8:b2:
                    e3:e5:ff:a8:92:f4:3a:91:bf:2a:01:fb:aa:8f:fb:
                    48:29:f9:6f:6e:9a:36:b3:bf:6d:e7:f6:87:c8:a1:
                    91:56:da:dc:cf:19:1a:88:ad:da:98:7c:0a:4c:ca:
                    6c:25:2f:0a:ed:a1:d0:e4:81:94:9c:2f:5a:a5:15:
                    65:77:17:e1:74:b5:a8:8c:ca:95:1b:47:1a:6b:e9:
                    37:3c:ba:c5:dd:e1:b7:b2:b8:1f:26:39:a4:c9:5d:
                    d1:df:1d:c4:b7:96:7b:2b:84:90:2b:b4:ad:0b:79:
                    40:95:46:18:66:46:49:c1:62:e9:a8:b5:24:4e:6f:
                    e5:b6:11:f7:3b:ef:e6:2e:67:19:ca:bb:b9:5d:33:
                    22:f4:08:15:2e:ab:99:5a:87:1b:15:9f:b0:1b:6d:
                    fa:b7:1d:9e:dc:43:f2:cc:37:3b:b7:61:5b:31:c8:
                    a5:9c:37:39:f4:23:90:c4:6b:65:0b:17:86:d6:d3:
                    d4:ea:12:02:26:57:c4:ad:8c:8a:26:c9:c3:79:11:
                    99:33:42:8b:a8:cb:03:de:d8:37:b0:ec:9b:7f:1d:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:23:0C:A9:CF:09:CD:67:F4:F2:2C:4C:58:61:BF:29:E0:DA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba0699ad-3508-3e4f-8761-0d45fe134466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.193.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:47:d6:b7:c4:20:a4:b4:a1:62:f5:eb:63:cb:2e:d4:60:
         37:17:a2:3d:18:58:de:e8:83:61:ef:6b:6f:45:7a:1b:a1:14:
         8f:6f:85:66:bd:09:29:21:15:82:31:ed:9a:26:d5:7a:f6:b2:
         9d:b6:4e:af:70:27:69:bd:9f:ff:fc:95:af:e8:2d:9a:6f:c5:
         a6:d5:18:8e:dd:ed:29:f0:70:ad:3a:85:84:f3:93:19:0e:09:
         e5:cf:4d:64:c1:90:f6:a6:ae:70:3d:ba:a3:64:0e:c2:10:12:
         36:40:0e:37:3a:36:b5:1f:4f:b6:4a:63:e4:14:87:04:69:df:
         04:65:15:d3:17:42:48:88:ed:5e:ef:11:4b:9c:35:83:08:a8:
         b4:e4:6e:db:b0:f0:a5:18:f7:db:76:a1:3c:7c:a0:f7:20:de:
         88:a7:54:23:e0:21:c9:c2:a9:c8:96:a1:e1:60:66:63:50:d8:
         af:82:f2:aa:4c:1a:f1:ad:cb:c9:5c:89:2d:56:7b:ed:03:f0:
         b7:e7:0e:38:39:69:8e:a2:18:e2:72:2d:3f:b7:6c:30:74:22:
         bb:36:07:e3:89:3c:b4:7a:f0:40:ae:d9:e3:5c:e0:a0:df:2d:
         10:14:b5:b3:74:50:93:0c:43:ec:a7:01:7e:40:97:15:38:3e:
         a2:a6:fe:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:22 2026 by rpki-client