Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
File:                     d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa (raw, json)
Hash identifier:          fFoWhKSWKU2R81Bum7JWzkSpB9hbaEqGh23zuVcDRrs=
Subject key identifier:   08:F1:E8:A7:FB:12:7A:78:19:F3:81:EA:F7:B3:81:ED:8F:DD:CE:2F
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584DC995B35A123B5B080F820260
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     19871
IP address blocks:        72.22.87.0/24 maxlen: 24
                          72.22.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:b3:5a:12:3b:5b:08:0f:82:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=4bf1274a-1203-4acc-83d9-e2f9b88997a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:04:c5:ca:c0:97:43:74:b0:8b:2a:f2:3d:8c:
                    5d:4c:e3:0c:e9:4f:3d:ee:78:ca:2e:fd:41:2a:8e:
                    cb:94:44:f7:47:30:21:c9:98:13:60:3f:a5:a0:e9:
                    03:d0:55:f0:ff:dd:50:44:29:14:b9:19:ee:64:06:
                    b7:d1:96:14:73:ca:51:d2:ab:4a:22:04:7c:41:98:
                    4c:11:db:3f:fc:0a:3b:b1:6a:e0:97:94:78:f9:24:
                    7a:ea:fe:2a:34:01:e3:95:df:24:e3:e2:05:07:ae:
                    4b:5a:c5:61:82:bb:35:41:a5:f0:6a:27:f1:fb:e9:
                    63:a1:88:fb:4d:f0:bd:4e:26:38:b4:ff:68:ab:d3:
                    fa:93:ae:d9:ee:65:52:84:18:e1:c3:e1:43:ac:71:
                    2e:8f:0e:af:a8:db:97:77:c4:27:dd:3d:66:bd:45:
                    2e:a9:b4:9c:19:15:3d:a1:c6:2c:9e:60:1f:04:13:
                    c2:a2:74:34:cf:80:1e:db:fd:11:ca:4b:3f:74:09:
                    ab:e2:b7:1c:31:b7:a0:51:9a:28:9e:fc:5c:df:83:
                    10:fe:9e:20:6e:15:c2:1e:13:5b:f4:95:24:25:ae:
                    25:f3:87:96:cb:24:ad:8f:ef:29:61:8f:42:3c:2d:
                    0e:7c:86:49:41:08:7e:3c:40:0f:a0:19:d7:38:e5:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:E8:A7:FB:12:7A:78:19:F3:81:EA:F7:B3:81:ED:8F:DD:CE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.87.0-72.22.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:a1:c2:1e:a5:0d:05:ce:c3:60:82:ce:43:89:38:af:7a:
         1b:c3:59:1b:16:cc:2e:0a:d4:d9:85:04:a2:5a:42:21:92:ec:
         a1:81:68:48:8d:d6:90:99:73:3b:a7:5b:de:30:bf:36:96:b6:
         18:df:b3:e5:8c:25:f9:74:ef:c3:7b:54:ea:f2:2e:d8:80:6b:
         0c:e4:38:c6:fd:56:e1:5f:c3:cc:6d:b2:20:45:a3:98:4c:35:
         01:0f:b8:8e:55:f4:f9:1d:30:84:75:f4:51:63:33:7c:fc:48:
         93:9d:72:ff:e9:21:5b:1d:70:23:bf:d8:e7:ee:0c:53:c6:76:
         01:fb:4b:c1:22:26:28:fb:c8:ef:d4:f1:d2:81:9d:70:b8:33:
         ee:90:11:d8:96:d0:f5:89:43:9c:a1:3e:5b:1c:6a:0f:ca:46:
         77:50:20:28:f7:d8:ff:06:34:ce:fd:0f:0a:31:b2:42:41:79:
         17:50:ba:c8:e0:3c:8f:93:01:4f:b8:55:fb:85:3a:b1:b8:42:
         6b:ee:f7:18:16:24:5e:87:59:f3:59:f5:ae:7c:0d:1c:7f:aa:
         e4:c1:01:c3:06:44:85:da:c3:7b:23:8d:89:74:ce:35:be:b6:
         99:7b:3e:8d:55:28:ab:73:a6:37:d8:33:54:0b:e1:1e:43:72:
         e6:f6:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:20:20 2026 by rpki-client