Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa
File:                     ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa (raw, json)
Hash identifier:          0G17y26u+FdccubdgrUDcZtcljaFnsbKXv5l6Ol4MtY=
Subject key identifier:   52:8B:0B:39:96:AD:0D:7D:2D:14:7F:1C:AF:D9:DA:B9:2F:25:D8:5D
Certificate issuer:       /CN=727f5e3c-17f5-4284-ae37-06cc8cada272
Certificate serial:       010D0C9F4328584F9FFDC9F4F68D5923635A8D00
Authority key identifier: 6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa
Signing time:             Mon 26 Oct 2026 01:00:13 +0000
ROA not before:           Mon 26 Oct 2026 01:00:13 +0000
ROA not after:            Sun 24 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        74.112.80.0/22 maxlen: 24
                          199.58.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:fd:c9:f4:f6:8d:59:23:63:5a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727f5e3c-17f5-4284-ae37-06cc8cada272
        Validity
            Not Before: Oct 26 01:00:13 2026 GMT
            Not After : Jan 24 02:00:13 2027 GMT
        Subject: CN=3a2e7b6a-a3e3-4993-bcda-55ec144be806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:1d:80:ee:9b:60:fa:f2:c8:b7:45:e2:d3:
                    cf:6c:65:fc:4b:af:14:3c:3a:8d:c2:52:92:c8:d5:
                    fb:4b:1c:79:96:4f:16:bd:53:e7:19:ea:82:2f:33:
                    dc:5c:3d:df:50:05:86:25:c6:b1:b9:ad:8c:c8:9c:
                    1b:d3:7e:83:28:e9:7b:e0:6f:00:f8:c4:d0:da:4e:
                    5d:83:2b:ef:54:65:04:b9:16:45:1a:eb:a2:9c:60:
                    43:2d:ee:8c:92:3c:13:a5:ae:65:7e:53:87:d8:c4:
                    19:ae:d7:8f:ed:64:fa:d7:55:63:0d:75:47:43:49:
                    53:4f:eb:b6:38:8e:33:47:ce:55:f2:6a:e4:75:e0:
                    ad:b9:cd:e8:5b:22:74:73:4a:11:ce:a3:35:76:c8:
                    68:4d:9d:65:ea:70:0e:67:2f:a2:22:9a:69:a2:59:
                    11:2b:56:9c:a0:7d:3f:75:5b:38:95:0a:fb:e2:04:
                    8d:fc:ef:35:a9:72:26:b2:63:8c:54:7e:58:19:1d:
                    54:49:2c:c1:d0:6f:aa:d8:77:7c:a4:fd:f0:72:65:
                    3a:11:fd:80:6f:ef:6e:b4:07:bd:da:94:71:df:a8:
                    a7:a6:f6:2f:24:84:70:a8:6f:ad:e4:39:35:27:4e:
                    fe:0c:47:f7:4b:54:5e:f1:60:3c:63:59:04:b3:3a:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:0B:39:96:AD:0D:7D:2D:14:7F:1C:AF:D9:DA:B9:2F:25:D8:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl

            X509v3 Authority Key Identifier:
                keyid:6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.80.0/22
                  199.58.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:2b:cf:4b:b0:17:66:c6:2e:78:b6:1c:64:d6:80:88:64:
         5e:89:fa:31:5e:f2:18:b0:f7:fb:41:b8:04:a8:ac:b2:58:7a:
         4a:d1:85:42:b9:3f:35:62:59:11:eb:a0:ad:bc:30:10:03:47:
         5e:80:0f:2d:2a:7e:5b:1e:60:22:9a:17:c4:a2:8d:8e:df:8f:
         84:89:e0:fa:2e:43:e1:42:02:f5:ef:9a:79:69:b8:53:8f:e6:
         ef:5f:92:c7:20:62:96:98:c8:ec:ca:b2:a2:4a:fe:39:92:b4:
         2f:fb:36:2c:3b:ef:67:88:a0:fa:80:2f:09:93:44:d4:9a:30:
         af:9c:ab:8b:5f:24:c0:07:6b:71:17:69:ac:94:39:3f:42:e7:
         cf:d4:75:83:6d:ff:ee:0d:2a:ea:9c:90:ab:a7:f4:ab:7f:8b:
         21:53:56:f8:8d:59:c4:75:18:76:59:e3:b4:a2:4d:07:92:7a:
         d7:b0:44:63:49:27:17:3d:69:1b:e4:8b:6a:8e:09:1f:d5:1c:
         7c:54:80:62:d0:27:b1:cc:60:8f:10:84:ed:e4:e0:47:0c:ec:
         e2:e8:f5:6a:a3:34:5b:83:1b:f0:22:f1:af:74:c4:b3:4f:45:
         b9:cb:70:66:34:10:c7:ea:15:6a:20:5e:75:19:9c:00:70:07:
         2f:9c:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:53 2026 by rpki-client