Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
File:                     9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa (raw, json)
Hash identifier:          DgJQUahrdv4Cmenha+esASJH2jtahYm4Cp949f88M60=
Subject key identifier:   07:0C:EA:6E:6F:E3:47:0F:C3:8D:B0:E8:01:14:40:06:08:ED:FF:5B
Certificate issuer:       /CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
Certificate serial:       010D0C9F4328584CE1FCD3D556EAD4B7DDB8A100
Authority key identifier: 96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     62648
IP address blocks:        72.22.192.0/21 maxlen: 21
                          209.172.16.0/22 maxlen: 22
                          216.245.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d3:d5:56:ea:d4:b7:dd:b8:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=90aa35e8-ae37-4886-aed3-d2c0fe6896b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:c2:1c:cf:80:ce:61:20:98:49:4d:d3:e5:
                    19:3d:35:19:24:5a:67:28:bc:ca:53:7a:99:ce:b0:
                    bf:c6:79:2b:ee:59:11:1c:3c:25:9e:8a:41:bb:93:
                    d8:de:25:13:09:de:35:5a:19:8c:0f:81:e6:cd:db:
                    6d:da:60:3f:80:51:29:c9:80:37:ea:4c:84:41:7c:
                    f7:83:cf:62:a6:d2:11:9d:4b:24:b0:70:80:29:53:
                    e5:ed:5e:6e:14:68:aa:a8:89:45:ac:99:6b:64:a2:
                    62:6b:12:78:95:d6:b2:fa:b3:6b:15:31:c0:7b:c2:
                    2b:15:10:09:3d:03:25:07:b9:61:9f:aa:b3:62:27:
                    d9:eb:ac:0f:bf:fd:7e:fe:6b:1a:62:c5:c2:ac:df:
                    dd:97:5e:37:c3:f5:55:86:44:30:2e:e9:db:8c:dd:
                    c6:c4:25:3b:2e:88:37:74:d4:6a:fd:85:2a:1f:cc:
                    9b:8b:a5:b0:ab:07:eb:74:ec:77:76:ad:f9:f7:07:
                    7f:fc:d4:19:83:2d:9e:8d:13:06:87:f6:a5:af:e2:
                    e9:38:a0:05:34:0c:58:96:c5:9e:fe:0e:47:c8:c9:
                    ff:31:c2:55:97:4c:e1:86:01:28:92:e5:e9:fa:f6:
                    b0:b6:5f:e8:19:0e:58:60:f0:4f:8c:4a:d0:31:69:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:EA:6E:6F:E3:47:0F:C3:8D:B0:E8:01:14:40:06:08:ED:FF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl

            X509v3 Authority Key Identifier:
                keyid:96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.192.0/21
                  209.172.16.0/22
                  216.245.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:60:c7:e9:1b:59:70:c2:33:50:7f:c6:bd:b4:1a:ab:ce:
         af:b9:2d:be:b5:70:79:e3:57:ee:b1:fa:ad:b6:70:52:da:5b:
         25:3b:ea:d4:a6:ea:95:11:ec:33:7d:c6:4d:ad:71:0d:4f:4d:
         25:f9:a2:89:32:a7:5b:c6:1c:dc:07:1d:24:da:a6:a2:43:0d:
         ec:09:9c:a6:45:c7:be:d7:a7:eb:d3:12:3d:80:e6:c7:a9:93:
         e2:da:92:ad:ab:68:9d:f9:47:f9:a9:df:93:43:09:5b:13:46:
         0b:44:ca:e0:6e:5d:a1:0b:a5:fa:35:d7:a4:0c:55:40:70:a0:
         e3:e0:6c:d9:8a:18:46:ea:02:dc:93:0f:81:04:7c:7b:b3:0c:
         c0:49:86:e5:69:a5:b1:07:25:d8:95:5e:c0:3d:7e:70:b0:a0:
         e2:0c:5a:be:c9:7a:88:2e:6b:69:94:c2:2b:a4:51:4f:a6:20:
         82:ea:8a:9d:61:4d:f2:36:02:c1:39:a3:7a:74:e5:d0:c2:24:
         20:8d:a3:19:ab:b3:56:51:5b:e5:b4:17:80:3b:31:2b:f9:32:
         80:92:84:d1:07:8d:22:de:fd:67:5d:f5:0a:62:7a:9c:bb:26:
         cc:d6:9a:a8:4a:18:7c:e6:48:74:69:71:ff:19:c4:50:80:e3:
         e3:c9:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:00 2026 by rpki-client