Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1f5cab7e-66b8-3e8a-a772-161c18be81f9.roa
File:                     1f5cab7e-66b8-3e8a-a772-161c18be81f9.roa (raw, json)
Hash identifier:          otXK0H5KRzBs3UkjdlVcTKRoBTBqwg2rr5NYWslpJGM=
Subject key identifier:   3B:F6:37:67:6A:F5:20:89:79:95:EA:B5:C7:13:ED:10:11:9C:50:EE
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584CE62CBA582A32B43CFA81A700
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1f5cab7e-66b8-3e8a-a772-161c18be81f9.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     152586
IP address blocks:        216.180.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:ba:58:2a:32:b4:3c:fa:81:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=e1ca56f5-700a-4248-a219-de59d33dcee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:f1:0a:34:7f:ab:b0:d2:d9:2a:9f:44:bc:
                    a6:1e:3e:8e:08:c3:f2:3b:28:ab:59:b2:ff:98:1b:
                    19:fe:92:08:bf:e0:08:03:d6:cb:c9:85:3d:09:94:
                    02:e1:e4:ee:87:c1:6a:20:00:18:42:88:b2:75:01:
                    bc:50:95:64:ff:98:6a:3d:32:7f:e7:23:e2:ec:28:
                    35:5d:6e:46:da:40:ce:aa:d8:77:d9:b3:03:a4:d3:
                    bc:bf:76:a1:8f:b6:39:24:89:eb:dc:88:47:76:f8:
                    47:17:1e:a6:4b:c5:fd:a5:6c:06:85:cc:fb:79:7f:
                    fb:dc:4c:d9:67:22:f1:88:9b:a3:de:2f:f1:f9:bc:
                    36:b1:fc:d1:42:14:80:0a:76:fd:ce:3e:90:75:49:
                    47:d9:13:b4:38:05:d8:3e:43:4c:48:fe:2e:b2:cf:
                    5e:f3:35:79:49:26:e1:63:48:94:85:a0:5f:b3:aa:
                    af:e9:98:9c:45:06:e8:35:c0:6d:fe:8a:a5:27:0d:
                    5d:8e:03:a7:77:a3:d6:10:df:c8:fd:75:2b:3b:78:
                    03:5b:4b:6e:b5:fc:3d:97:72:ef:bd:01:6c:05:8f:
                    ea:28:38:2f:b0:7a:ca:16:9f:97:9e:2e:b2:c4:e7:
                    dd:2b:29:4f:71:2b:c2:b6:06:e4:27:fc:6b:c8:61:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F6:37:67:6A:F5:20:89:79:95:EA:B5:C7:13:ED:10:11:9C:50:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1f5cab7e-66b8-3e8a-a772-161c18be81f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:55:ee:47:9e:79:43:bc:e9:e8:62:05:25:58:76:00:11:
         52:45:7f:ee:3a:76:d2:e8:7a:22:3a:cd:ad:e4:d1:ea:dc:9e:
         fc:02:7e:f8:e0:af:8b:9e:10:7a:cf:84:a2:a9:6a:88:a2:ab:
         c9:dc:97:d7:77:41:83:39:f6:c4:fb:88:5d:bb:ec:ae:22:bb:
         25:f3:99:ee:21:d1:b2:e4:26:de:51:52:47:4b:05:50:2c:87:
         89:06:6c:58:a3:0b:08:ea:44:d3:15:fa:71:18:99:82:25:a7:
         05:ab:be:2a:1b:5d:51:e3:4d:0c:f6:45:6e:8c:a7:1c:c4:69:
         1d:a0:3e:b7:8c:98:29:a2:37:88:b1:49:e9:73:16:56:f3:d0:
         18:c5:dc:78:06:5b:f4:30:24:4e:20:d0:66:d1:35:5d:6b:17:
         0f:20:39:35:6c:cb:83:e2:ce:7e:4c:e8:01:4e:1c:2d:cc:95:
         90:43:00:73:ee:5d:da:02:4e:0c:16:e3:32:41:c9:16:ee:09:
         66:2c:cd:8c:f1:e6:ca:cb:11:77:ed:86:d9:ea:66:87:14:96:
         e2:05:23:09:bd:fc:09:d9:52:67:2b:06:b9:35:ec:fe:96:7b:
         55:cb:19:62:ad:17:c3:56:e6:e7:f5:3e:66:db:9a:1e:7a:07:
         3c:0f:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:50 2026 by rpki-client