Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
File:                     5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa (raw, json)
Hash identifier:          N1qIwgkJ9/176qiuxc72vuv8LvAxEdGephMxqaNUQlE=
Subject key identifier:   51:A2:99:7F:8E:2F:46:F3:18:3C:02:09:5F:D9:09:F4:5F:59:85:C3
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584D00B26E9FF54E2FA31F81C780
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     399122
IP address blocks:        72.172.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6e:9f:f5:4e:2f:a3:1f:81:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=42fc27bb-665b-4876-bcac-50d84ceed03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:31:71:6b:06:b5:92:8d:60:46:0c:5f:ae:9a:
                    73:85:28:0e:b4:d2:0c:e1:b2:40:97:03:47:ad:cf:
                    64:e4:0f:25:c8:6c:86:73:45:1e:74:88:ce:66:30:
                    4e:10:e4:45:08:10:7d:36:40:ff:4f:3d:9a:5d:81:
                    3c:e4:ae:d0:ca:83:1e:9a:35:86:de:de:19:0a:68:
                    02:74:7a:ad:04:ff:0d:99:ce:47:f0:23:05:0b:a5:
                    8d:8a:fd:1d:d0:53:20:e9:3f:d0:15:16:ee:95:69:
                    03:f7:9d:fd:5b:b8:e7:dc:9a:24:3e:8d:e5:61:00:
                    65:2e:4c:79:a1:b3:50:20:4b:07:96:cd:8d:b8:5a:
                    be:da:ab:c4:84:9d:9f:b6:75:05:86:f2:a4:58:6b:
                    c5:41:05:b9:1b:9e:01:ea:63:28:19:d0:1f:9b:c7:
                    a0:bb:75:3d:3f:15:97:ae:70:bf:30:87:81:9c:5d:
                    e4:4d:cc:8d:37:b7:46:d1:77:7e:97:2b:79:5a:4b:
                    97:d3:6c:87:98:51:50:6c:6a:57:76:b2:26:4b:cb:
                    aa:54:db:59:6d:11:bc:a3:a8:e8:c5:a0:17:4f:3d:
                    51:95:2f:d5:35:09:60:9e:e3:d7:2f:f5:44:44:c2:
                    b1:71:3f:3d:fc:06:47:59:0c:7a:b1:08:9a:bb:51:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:99:7F:8E:2F:46:F3:18:3C:02:09:5F:D9:09:F4:5F:59:85:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:78:b9:da:50:eb:8d:55:cf:b6:4d:48:d4:ef:a8:60:ca:d4:
         b8:04:be:6d:d2:38:61:b8:ca:ad:0b:cb:dd:8d:6d:7b:17:b1:
         13:b7:82:85:b4:f5:24:74:f4:f3:74:f9:d7:6a:eb:f7:ed:b5:
         11:e5:31:9b:4c:52:db:aa:b8:f7:a5:bc:33:61:58:b3:fc:bf:
         82:f2:19:07:ff:0c:74:d8:de:08:a1:f9:db:5d:48:52:4d:e0:
         c1:d2:b6:73:f2:0b:bc:40:fe:ef:b7:78:53:8a:e2:98:ae:41:
         17:97:2c:95:15:57:1b:1e:5c:48:a2:5f:57:8c:19:80:2e:a9:
         cd:65:24:f3:d3:a0:55:61:57:64:da:b1:bb:62:0e:cf:3a:61:
         e3:99:aa:a6:b4:9a:96:19:fc:a4:de:6c:66:fd:cc:7c:dc:12:
         10:8e:3e:26:5d:5d:cd:66:41:37:17:ed:43:76:28:7c:99:18:
         25:1a:cd:a4:9d:cb:e1:49:e4:51:90:bc:96:6a:30:87:98:0a:
         7a:4e:93:f3:ec:99:7d:01:54:1c:31:41:c6:7f:f3:4b:10:ef:
         bc:89:f9:67:ff:53:bb:e9:07:a4:e2:70:a0:66:c1:bf:9c:29:
         1f:ab:5f:21:4f:b5:f7:cd:e1:b1:93:76:2e:ba:eb:0f:d3:46:
         ff:27:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:41 2026 by rpki-client