Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f09b3a87-00d5-34ec-9f6c-68a7a99ef59d.roa
File:                     f09b3a87-00d5-34ec-9f6c-68a7a99ef59d.roa (raw, json)
Hash identifier:          mIY2vb920kZzsvu4F+LqDOuqdzq95d80hp92SvVdiZc=
Subject key identifier:   70:55:59:BE:A1:EF:98:5D:D9:5C:A9:73:A0:51:DF:9F:6F:4C:E5:80
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584DA54AC3ED1B15952B4DAC2700
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f09b3a87-00d5-34ec-9f6c-68a7a99ef59d.roa
Signing time:             Mon 27 Apr 2026 13:00:30 +0000
ROA not before:           Mon 27 Apr 2026 13:00:30 +0000
ROA not after:            Sun 26 Jul 2026 13:00:30 +0000
asID:                     198949
IP address blocks:        72.22.75.0/24 maxlen: 24
                          72.22.76.0/24 maxlen: 24
                          72.22.78.0/23 maxlen: 24
                          72.22.80.0/22 maxlen: 24
                          72.22.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:4a:c3:ed:1b:15:95:2b:4d:ac:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Apr 27 13:00:30 2026 GMT
            Not After : Jul 26 13:00:30 2026 GMT
        Subject: CN=9b3ef787-4be2-40e8-b1b8-397d86132f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:1a:f8:74:90:79:03:98:a2:5c:a2:e5:b9:
                    51:aa:fe:1b:ff:b1:19:68:96:e2:09:46:03:db:5c:
                    c3:1f:41:52:6f:9d:62:fa:9c:55:b1:f1:8a:5b:ed:
                    9e:3a:2e:3b:41:8d:45:1b:6b:90:c1:2f:3d:1a:c9:
                    13:25:88:90:78:b2:f7:f1:be:a0:b6:66:bf:df:43:
                    5d:02:f3:5a:fd:b6:b8:d5:83:dc:b7:b8:4a:85:44:
                    2c:ff:58:01:73:83:07:57:05:9c:e2:68:69:7c:f3:
                    fb:1b:1b:40:44:eb:c4:01:d5:7a:12:75:4f:45:10:
                    57:26:b8:3d:c5:5b:a6:68:ff:dc:27:21:1d:85:24:
                    bf:cb:e1:00:73:6e:9e:da:45:78:2f:c1:55:ef:b6:
                    15:97:42:9c:23:27:f5:ea:b7:76:54:f7:2a:db:d8:
                    4b:fc:fd:85:03:3a:9b:9e:42:6d:3b:40:e1:b0:06:
                    c7:41:12:98:1c:7f:af:94:10:a7:fe:2d:0a:c5:0c:
                    e2:04:81:a4:0d:5f:42:67:ff:5b:5b:f3:89:84:a7:
                    b4:80:cd:94:1d:d8:5e:c1:9d:23:20:b1:68:c2:d0:
                    00:e1:b1:ff:bc:9f:28:5c:e8:26:33:51:31:41:84:
                    84:be:b7:b3:48:ec:2e:7e:0b:68:c1:1a:2e:8f:b9:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:59:BE:A1:EF:98:5D:D9:5C:A9:73:A0:51:DF:9F:6F:4C:E5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f09b3a87-00d5-34ec-9f6c-68a7a99ef59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.75.0-72.22.76.255
                  72.22.78.0-72.22.85.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:75:84:b8:52:8c:50:11:dd:d6:53:53:02:21:c9:c8:68:
         7f:20:90:ac:f4:e1:32:fd:4d:79:e3:8e:90:49:cc:31:5a:ac:
         fb:e4:ec:9b:7b:d8:56:ca:6a:1b:07:fc:7a:d9:17:31:c9:a0:
         e5:1d:dd:2d:3e:51:1b:db:df:de:28:97:83:81:24:c0:f7:af:
         70:69:93:cb:fa:3f:4d:13:b1:12:47:5d:ce:40:98:b3:e3:82:
         c0:59:e3:5b:70:b4:69:ed:53:6d:36:f0:87:89:f8:6c:31:26:
         0c:79:2c:08:57:63:e1:33:a7:73:4e:e7:86:35:11:2f:90:53:
         16:49:42:8e:34:16:ff:91:e0:de:a9:fd:a0:dd:fc:a5:5c:c5:
         9f:7b:b8:56:35:8d:d5:6a:5e:77:1d:9d:8f:0a:4c:92:eb:54:
         eb:98:48:c2:73:fb:70:86:bb:b6:9c:17:2f:c1:f0:26:ac:11:
         c9:b8:cd:11:b3:21:ce:20:58:8e:9a:38:04:ff:9f:30:92:57:
         55:2b:ef:e7:f9:ae:5f:47:39:c2:87:a1:de:cc:ae:bc:c5:a2:
         81:06:b3:48:2c:31:54:44:91:82:9c:80:aa:60:a8:b4:89:f5:
         2b:a5:45:0c:5f:76:2f:0f:a0:70:23:b7:60:12:98:9a:c5:70:
         46:61:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:37 2026 by rpki-client