Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
File:                     4f57b72f-fafb-32a5-8dd0-753f1f879774.roa (raw, json)
Hash identifier:          JWEY1sNRRH8xXf/a5Z95POOeiUmJfoJ0uvJB+Wz7mMI=
Subject key identifier:   02:97:02:01:C7:E9:F4:61:22:F9:19:67:B0:B0:6D:19:22:D7:20:29
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584C8476ECA5DE149A79FC9B5C80
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     395425
IP address blocks:        72.42.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:ec:a5:de:14:9a:79:fc:9b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=a46d26e9-328d-4efb-8cb6-1444b2c1a8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:ae:f4:fa:68:b9:81:63:7d:93:2b:ef:39:
                    32:5f:2d:05:e9:71:63:aa:9e:73:62:c2:82:84:82:
                    55:36:4a:5e:78:06:18:2c:d0:9c:f1:bc:f2:bb:03:
                    ad:38:ef:2d:8e:70:ca:b9:dd:9a:c6:fc:c5:61:77:
                    c5:27:86:eb:de:7a:9e:22:48:7f:85:8c:7c:ef:88:
                    40:0b:f0:76:2e:b7:d6:fa:d9:6e:ce:a8:92:d7:72:
                    96:0c:f1:8c:3a:c9:61:e2:ff:8f:cc:fd:57:4e:8a:
                    2d:5e:76:e6:f2:8d:fb:c4:78:24:43:b6:d7:81:29:
                    86:f8:3b:34:46:bb:40:1c:de:51:ba:d4:36:60:57:
                    04:fc:34:28:ae:ad:3b:47:6d:64:79:b3:1d:ef:20:
                    f7:64:3e:37:da:3a:f3:b9:cf:8c:c9:3a:e6:e6:9a:
                    62:af:96:0b:c4:35:fd:ea:a3:a0:c3:2e:93:f5:ed:
                    90:ae:00:13:bc:06:b0:c6:cf:f6:a2:a1:f0:6f:6c:
                    a8:73:b9:a0:f6:e2:5b:10:18:51:a4:6a:18:8b:02:
                    1b:2d:8a:a8:57:18:54:e2:4a:71:1f:ce:fb:8b:91:
                    63:54:bc:3c:a7:a7:b8:c7:83:b6:ab:f1:fc:ce:45:
                    0a:f7:a9:f9:57:05:32:49:95:41:3d:83:8c:e2:ad:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:02:01:C7:E9:F4:61:22:F9:19:67:B0:B0:6D:19:22:D7:20:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:d8:02:5f:23:71:4c:1d:46:d9:dd:a8:ff:92:81:4a:12:
         42:a2:8e:cd:07:46:de:60:2d:07:3f:c0:3b:76:74:fc:52:f1:
         75:8c:cc:d8:17:8c:71:45:cf:06:56:ce:1b:74:0d:ca:b1:5f:
         46:19:39:cc:e2:da:84:43:fd:d4:d6:ec:8e:6b:5a:59:7f:d1:
         56:e7:ee:97:4d:cf:c7:54:ed:9a:0b:04:69:79:9c:7c:ae:ab:
         d5:00:65:ed:e0:3f:5d:c3:d9:6e:1e:1f:33:ee:25:4f:0b:51:
         95:af:ee:a6:87:f4:1a:ad:a7:bd:e2:23:79:b9:65:c4:42:44:
         b7:ed:00:fa:8e:b8:bc:1e:1b:6f:dd:51:aa:0d:12:58:82:f4:
         73:9c:62:d6:23:cd:61:d9:5d:4c:42:0c:37:85:ef:df:71:e6:
         f7:23:57:94:12:10:57:7b:ef:03:80:89:67:d9:5e:aa:92:a8:
         68:29:92:06:3c:03:b5:3e:49:8d:2a:b9:92:10:7e:be:f9:90:
         a7:28:2d:d9:8e:b1:96:7b:fc:74:2f:f7:0b:ed:87:26:9c:70:
         95:78:3f:42:26:d1:e0:33:2b:21:db:d6:4c:87:3b:75:28:1a:
         b9:e1:85:10:5a:e9:89:ae:20:a5:e0:56:10:70:e3:9e:41:3a:
         ea:76:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:14 2026 by rpki-client