Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffd1d3bd-6e25-3d46-b24e-be5d693e7363.roa
File:                     ffd1d3bd-6e25-3d46-b24e-be5d693e7363.roa (raw, json)
Hash identifier:          PHHEU39NfEVLWRSZl1YwcChBuPw/woD0/yb0R4J4XHg=
Subject key identifier:   1D:A8:42:83:8A:B1:95:E3:0B:93:C4:08:01:AE:FE:17:E9:50:1A:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CC611E10FFBFD0C95F9A600C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffd1d3bd-6e25-3d46-b24e-be5d693e7363.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     213120
IP address blocks:        72.52.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:e1:0f:fb:fd:0c:95:f9:a6:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=399c51f5-68d5-4bb6-b7a7-b32fe84ae828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:5f:b6:97:5f:49:28:64:cb:7d:d3:8c:56:
                    bd:7e:3a:1d:61:fa:e3:c8:ae:63:d4:85:9f:c0:ec:
                    96:28:5a:3b:b4:d5:48:a2:d3:f2:ab:0a:6b:ba:7e:
                    a2:6e:6b:a1:da:c2:52:e6:ea:5d:01:23:da:37:11:
                    bd:e2:4a:7e:c7:5f:e5:74:03:ec:22:3b:b8:1d:e9:
                    20:56:a4:4d:48:c4:39:78:61:82:e8:c4:97:aa:7d:
                    29:d9:70:32:ce:5c:60:5a:a2:4e:30:cc:4f:7b:00:
                    67:4a:7d:32:c7:40:a0:1c:de:98:53:28:13:38:a5:
                    c0:a3:2e:bf:5a:0f:23:88:df:b5:80:3a:13:71:a8:
                    96:02:63:61:9e:30:4d:28:db:f6:e6:de:f1:9b:a9:
                    66:2c:d8:6c:d5:3f:bc:5a:7e:3f:2e:81:d1:92:cc:
                    23:fa:c6:06:6c:93:fd:64:31:99:8f:b0:f0:12:be:
                    db:35:2e:14:98:e4:5a:77:70:cc:1f:3f:b5:c1:16:
                    0b:66:2a:39:37:27:4c:25:cb:b6:ea:77:b4:4e:8e:
                    5e:a3:8e:5d:6b:09:c4:b6:bc:f8:7e:b6:5e:65:37:
                    a7:38:d3:df:75:dc:3a:66:4d:f5:c1:1c:1b:b0:cb:
                    37:01:cc:31:a0:57:c7:5b:b0:ce:1e:69:9d:9e:2f:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A8:42:83:8A:B1:95:E3:0B:93:C4:08:01:AE:FE:17:E9:50:1A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffd1d3bd-6e25-3d46-b24e-be5d693e7363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:2c:ed:d8:6a:90:96:fe:0d:65:80:23:b2:5f:1e:47:f1:
         4d:c6:09:2a:c5:24:45:d1:ef:7f:8e:8c:36:96:3d:4d:b6:aa:
         eb:fc:56:14:1b:bd:77:31:7e:04:58:21:b1:c9:e5:15:14:f4:
         d5:d8:63:8b:05:4b:bb:a0:16:a9:31:2e:3a:0a:8c:c6:e6:56:
         11:cd:3a:59:79:30:b9:7b:d6:00:9d:45:89:60:8a:f5:27:2f:
         d7:21:81:1f:43:fe:70:a8:3c:d9:87:c4:92:a6:85:15:11:f1:
         34:8b:cf:fb:14:3f:b4:fb:3e:ed:d2:39:fa:22:86:dc:ee:b2:
         d1:82:70:e2:c1:d8:4e:24:f6:cb:e2:91:12:c3:9f:be:45:60:
         4c:19:b3:cc:5d:7d:6a:60:47:1b:57:b2:76:92:81:64:1b:4c:
         a8:a8:5a:57:f2:1e:34:9e:d3:a1:c2:62:00:8f:e3:da:40:43:
         77:15:4a:f3:b4:9b:5f:06:ac:e1:f4:ad:0d:cb:92:af:e5:c3:
         ef:55:8d:bb:83:59:d5:c7:ea:94:cf:59:06:b0:d0:c5:c1:36:
         6f:c0:66:d0:af:ac:63:6d:b1:7e:bb:30:cf:05:6e:44:b0:83:
         7a:d8:9b:e4:9e:f6:31:4d:22:d6:ee:b9:5b:2d:41:30:a4:76:
         1a:3e:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:26 2026 by rpki-client