Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/e5c63115-84e4-35ab-b382-7cf2153bc63d.roa
File:                     e5c63115-84e4-35ab-b382-7cf2153bc63d.roa (raw, json)
Hash identifier:          laEubR+Jn4xTW8vRd/1TlqjcG/m7wb1v+HUKLohzgg8=
Subject key identifier:   5D:A2:FF:FC:38:84:B7:5C:C3:85:FC:86:B9:6C:77:66:D2:F7:0D:63
Certificate issuer:       /CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
Certificate serial:       010D0C9F4328584CD185F5237D13B30795D53200
Authority key identifier: C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/e5c63115-84e4-35ab-b382-7cf2153bc63d.roa
Signing time:             Tue 10 Feb 2026 16:28:29 +0000
ROA not before:           Tue 10 Feb 2026 16:28:29 +0000
ROA not after:            Mon 11 May 2026 15:28:29 +0000
asID:                     979
IP address blocks:        72.172.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:85:f5:23:7d:13:b3:07:95:d5:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
        Validity
            Not Before: Feb 10 16:28:29 2026 GMT
            Not After : May 11 15:28:29 2026 GMT
        Subject: CN=f09618d0-85ed-46c2-88dd-e127fd9ce23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ba:f2:96:e0:46:39:95:69:aa:42:bf:c3:08:
                    ee:db:d5:4d:fd:ec:70:b3:80:49:49:bb:2f:bd:ee:
                    63:af:fe:00:bf:df:74:7e:5f:c8:5e:25:ef:be:be:
                    83:57:3c:c5:06:ee:83:f4:32:e6:62:43:de:5a:cb:
                    a9:cd:6d:b6:78:d5:cb:c7:af:30:43:44:b4:32:4f:
                    af:53:42:4d:a7:9f:2a:67:cf:84:18:19:98:9a:77:
                    bf:23:b8:3c:39:2e:8b:61:7c:62:bd:bf:17:e5:6d:
                    e4:4c:99:a1:e0:74:26:d2:e0:f7:34:19:31:09:bd:
                    90:ea:fa:c7:1b:a1:5a:eb:1a:b6:51:43:77:a4:e2:
                    22:f1:98:fe:49:57:c7:72:7f:b9:0d:4b:b5:0a:56:
                    4f:51:1b:e9:4a:54:c5:20:7d:f7:de:8a:93:03:04:
                    a7:22:20:59:d1:f1:7d:eb:5c:36:c9:0b:76:0f:0f:
                    92:63:87:6b:55:3c:ff:b0:9d:fd:a7:3d:18:0a:73:
                    5b:ec:eb:55:4c:82:5e:b1:10:73:e4:71:19:89:bb:
                    47:95:f3:12:01:c6:a3:a4:6c:66:fe:f4:4b:42:8b:
                    5e:05:71:4d:6e:8b:0d:30:d3:4d:16:6c:24:f9:d2:
                    8c:23:cf:19:d3:68:58:53:07:f1:ca:b6:8c:29:a1:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A2:FF:FC:38:84:B7:5C:C3:85:FC:86:B9:6C:77:66:D2:F7:0D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/e5c63115-84e4-35ab-b382-7cf2153bc63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:97:df:97:f7:f7:60:4c:ed:6b:0b:64:d0:38:13:91:1d:5a:
         c3:ef:0a:55:46:65:28:48:e9:be:7c:a9:98:5e:30:dd:81:03:
         21:3e:fa:c8:bc:78:d5:18:0d:8a:95:50:9a:26:3c:90:29:b9:
         98:3b:d1:87:48:94:82:6b:e9:1c:9d:ef:4b:81:9a:05:77:d8:
         e5:de:85:ff:d4:ec:4f:3c:86:6e:ce:74:28:05:52:68:d7:48:
         0c:1a:4d:19:70:7c:03:78:93:5d:09:f9:54:27:4b:d7:5f:ce:
         91:36:2a:c3:02:e8:ed:3c:df:0a:27:ae:49:b4:0e:52:b6:41:
         6f:70:fc:6e:c5:4c:ee:83:ad:6a:6a:0b:b9:20:84:f1:9f:7b:
         b0:3d:4e:b1:69:09:f3:57:01:9f:69:30:da:d8:1f:7f:09:bd:
         0f:be:82:a6:f2:48:4d:fe:d7:d8:b4:73:e4:a5:d7:b2:83:ac:
         35:e3:80:0f:23:ca:9b:2a:c1:31:15:07:0e:b1:a2:d0:83:64:
         4b:5f:5d:4d:95:ef:5b:4f:29:dd:22:96:72:28:0a:58:80:8a:
         dc:38:dc:33:1b:ab:f6:53:89:27:a0:42:66:cf:64:61:bb:ff:
         8c:94:58:19:55:83:dd:89:21:8c:3f:88:db:01:50:e5:e1:d8:
         32:ad:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:14 2026 by rpki-client