Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa
File:                     daa4fef1-8408-30c9-a731-41665d183354.roa (raw, json)
Hash identifier:          s6KKmmRTqFbCQp+awSfFzAg/al9z1bPk/Z19wAEfPoQ=
Subject key identifier:   87:F4:2E:CA:C5:65:E0:88:8B:D4:B9:67:EA:23:D6:4C:C1:5E:4F:4A
Certificate issuer:       /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial:       010D0C9F4328584DD8F082E07D90A1B246C7C500
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     14618
IP address blocks:        72.57.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:82:e0:7d:90:a1:b2:46:c7:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=ec73efc9-cf21-4d19-a243-008bce7f1bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:d9:23:15:2f:6f:ee:07:be:5e:fe:10:2a:
                    8c:7f:d7:c2:dc:87:dc:e1:d6:ee:d6:d4:37:61:c3:
                    a8:66:a3:50:79:f0:ff:a7:38:e3:21:9a:94:d2:1f:
                    ce:98:0d:40:34:9a:b3:b9:07:d1:80:c1:27:fa:d6:
                    ce:24:1c:a7:1f:f0:f3:e8:cb:7c:7c:4c:dc:da:4f:
                    5e:72:6f:98:99:68:86:45:c8:55:0b:0e:80:27:a8:
                    5c:d8:59:f2:5e:8c:f5:72:fc:e0:44:5d:ee:73:41:
                    60:3f:a1:32:7b:6e:09:a8:f3:b6:89:09:b8:1c:c5:
                    d5:9c:62:79:24:a1:ce:fe:c8:2f:19:8a:5a:25:1b:
                    95:bc:a2:cd:21:e5:08:cb:ff:8a:b4:12:97:db:94:
                    52:bc:23:be:3a:e4:3e:51:b9:93:68:5a:48:f9:2d:
                    e1:9e:39:92:1a:cb:bb:ec:18:e6:f5:7b:c2:e2:93:
                    54:ca:f1:3d:71:08:84:1f:59:03:93:63:7a:74:3a:
                    0e:2a:ac:69:1a:fe:29:62:ff:44:74:e0:0c:d5:2d:
                    56:72:d6:05:f8:ec:44:94:fa:f6:f0:cf:ec:e4:3c:
                    79:94:bb:76:a8:5c:65:3a:a8:d7:94:11:76:be:14:
                    a6:7a:47:b8:06:a1:29:fb:b7:f4:ca:65:45:35:18:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:2E:CA:C5:65:E0:88:8B:D4:B9:67:EA:23:D6:4C:C1:5E:4F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.57.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a8:f0:b9:58:eb:b3:11:6c:e2:fe:ab:97:0e:c2:93:41:00:
         40:e6:20:4b:5f:6c:46:fd:ed:b8:ac:88:55:69:32:3f:17:d2:
         0a:5d:2b:ba:6e:f5:9f:37:f5:b9:aa:56:de:dc:86:5b:22:47:
         5a:80:c3:51:a8:d2:4b:ac:ee:b0:9a:43:4e:63:5f:77:99:b5:
         3d:c9:c3:31:8e:c9:b7:c0:0f:02:af:1e:75:b8:9a:11:6e:e3:
         c2:65:6e:0d:ab:19:e1:da:d8:75:8d:b3:49:f4:ae:fc:1e:27:
         2a:ac:d1:fe:9c:9d:46:5a:93:ca:4b:77:05:23:6a:60:90:7c:
         bb:57:f0:f0:ea:72:07:94:b0:a3:54:9b:b7:ed:eb:3b:9c:99:
         e9:85:ae:8a:74:66:3c:16:e7:d1:d9:02:a4:5d:4d:d5:74:4f:
         ea:4a:79:5a:e2:43:27:1d:ff:d0:96:92:25:94:24:4b:3f:6a:
         e2:72:23:d6:26:b0:25:0b:5c:c9:5c:e4:96:2e:c1:e8:b8:fc:
         f7:9b:92:ef:44:98:3d:76:d5:eb:86:5a:18:c3:d7:e3:9b:92:
         65:49:4a:da:77:ed:33:ff:ff:64:98:5b:e3:7e:13:1a:73:ea:
         9e:e7:1b:7d:54:55:10:2a:83:62:2c:5e:de:78:eb:84:1d:8d:
         97:19:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:08:36 2026 by rpki-client