Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa
File:                     ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa (raw, json)
Hash identifier:          1mYw8pkBuCJNPAb0FozQ5h1BJz93Kf7SOBy/uXoXAFQ=
Subject key identifier:   52:76:7B:AB:04:20:CD:AC:DC:12:CF:8F:4E:15:F5:AB:4B:94:BD:7B
Certificate issuer:       /CN=727f5e3c-17f5-4284-ae37-06cc8cada272
Certificate serial:       010D0C9F4328584C9ACC3A1D7AA971EFE77DE3C0
Authority key identifier: 6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     20115
IP address blocks:        74.112.80.0/22 maxlen: 24
                          199.58.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:3a:1d:7a:a9:71:ef:e7:7d:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727f5e3c-17f5-4284-ae37-06cc8cada272
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=90f6e63a-bec4-4f7e-907d-cda63b238d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:49:a1:cf:1d:77:88:02:3a:09:c8:66:9a:
                    55:17:e3:37:58:4e:78:9b:5b:fa:09:ea:44:01:6b:
                    5a:d8:1a:64:40:03:29:4e:88:49:6b:83:d9:4b:9d:
                    19:41:38:56:71:0e:3d:37:d5:0c:9f:ce:72:06:aa:
                    d1:7b:08:f6:b6:a4:0a:fb:50:17:37:f7:60:39:4a:
                    70:c3:47:be:d4:58:2f:45:85:ac:e1:83:f3:b5:b3:
                    19:ba:70:4a:64:2c:78:94:60:bb:2d:72:91:dc:b1:
                    3d:8b:3b:36:6b:36:be:34:f2:37:8a:65:0e:9f:77:
                    b1:d9:9f:67:23:94:c8:c2:49:f1:94:05:2c:00:5f:
                    2c:30:5a:83:0c:93:00:79:02:be:ed:49:bd:95:1a:
                    97:19:05:61:4b:f3:f3:4f:da:07:82:5c:f6:d2:f1:
                    4e:eb:0c:87:80:a5:04:1d:24:a4:2a:6e:2f:67:1e:
                    34:91:cb:75:92:bf:ce:45:e3:6d:91:67:1c:71:d3:
                    f0:2a:5d:ff:b7:cd:61:dd:7f:dc:1b:03:23:d9:cb:
                    32:b4:b9:dd:5a:57:77:ed:24:60:25:c0:d0:41:0e:
                    42:ab:e1:c0:b9:7b:7f:67:03:0c:74:81:33:3d:d4:
                    10:09:42:d8:08:b4:f5:0b:4c:75:fa:1c:74:15:ff:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:76:7B:AB:04:20:CD:AC:DC:12:CF:8F:4E:15:F5:AB:4B:94:BD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/ffb5e0db-8a8b-37e5-83ef-0efb0edb7c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl

            X509v3 Authority Key Identifier:
                keyid:6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.80.0/22
                  199.58.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:de:31:ee:f1:26:74:dd:4c:16:7c:c8:65:f5:74:f2:13:
         6a:f2:a1:97:2d:db:48:ff:f9:da:dc:87:d4:2c:f6:28:66:d0:
         b4:ff:70:24:16:46:f0:7c:bf:0c:ae:06:05:db:ea:af:cc:13:
         0c:ad:fc:82:22:c4:c1:3a:44:3d:47:29:41:cf:6c:f4:a8:a5:
         c9:f9:46:44:7f:6d:d0:37:32:55:71:84:67:0d:ca:e0:5f:15:
         ee:de:46:53:f9:cb:37:28:b0:62:00:ef:3f:75:64:b1:24:73:
         6e:ec:52:39:05:ea:d1:8b:33:11:00:95:e3:86:4d:d3:9c:18:
         a5:ec:ce:a4:de:94:95:52:6a:39:06:b0:41:79:d0:b2:9b:99:
         c2:ed:2c:60:66:49:80:1d:36:c1:ea:c6:ff:0e:3e:51:f8:6e:
         63:fc:61:dd:74:51:68:5d:d0:4a:81:9d:a3:3b:79:93:1f:44:
         73:fc:c6:85:d7:e1:e7:c9:61:1a:35:31:f0:fc:de:91:c8:5d:
         72:93:74:90:59:e6:60:8f:77:08:58:bc:84:45:d7:36:16:44:
         e0:55:34:8c:97:88:19:35:b8:66:ca:ce:09:f2:7d:18:29:d1:
         0d:7f:aa:6d:61:12:41:05:75:8e:00:29:61:59:c7:60:62:5a:
         81:8d:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:05 2026 by rpki-client