Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa
File:                     72a09a28-e7b1-3e90-b42d-bbab33e58352.roa (raw, json)
Hash identifier:          L4dJ6ZX5nrkDNvYYAb4LkkQ4g2VDm6bSP1MHJZVVYZI=
Subject key identifier:   E3:27:1D:B7:21:B0:53:C6:5C:B5:C2:61:D3:00:8E:8D:B7:A4:C5:7A
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584D359FE50222282CCAD13B5300
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22079
IP address blocks:        64.186.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:e5:02:22:28:2c:ca:d1:3b:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=cab0accf-d03b-4c1b-824c-d5a34009314d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:5c:24:73:57:e4:d3:61:87:78:58:6e:d6:
                    46:40:f9:63:3c:a3:d8:3c:46:14:68:12:88:15:1d:
                    83:c4:4e:6b:80:51:a2:84:0a:38:dc:90:fe:a7:77:
                    54:93:03:30:79:80:5d:ef:41:57:fc:0d:b8:c5:b8:
                    aa:bf:64:94:ee:84:48:45:18:c6:88:e4:a4:8b:3e:
                    54:df:59:1c:3c:4a:e5:26:54:56:cf:1a:bf:aa:c0:
                    fa:16:41:b0:b5:da:37:5d:df:ea:d0:2a:c4:d2:d0:
                    b8:46:b3:16:93:a4:bf:2f:03:56:59:ea:02:86:21:
                    a3:3a:4f:6b:c7:83:71:35:a0:9e:cd:47:78:e4:f1:
                    43:c5:9f:1e:d8:a2:a9:ec:18:75:3c:54:47:be:4d:
                    b6:44:d3:d2:31:a5:ef:b1:b0:58:6e:ce:ae:6f:56:
                    28:17:d3:6c:23:34:91:30:5a:00:98:cf:ea:39:a3:
                    fe:0a:5e:52:71:63:23:fd:b5:19:38:26:c3:15:fa:
                    3f:79:7b:10:73:0d:94:26:a7:f0:cd:cf:c2:dd:18:
                    ac:ea:17:49:0f:5b:89:8f:3e:b9:99:e8:f5:dd:7c:
                    62:e8:3f:20:f0:64:73:83:35:16:cd:70:72:a6:b1:
                    a5:99:b1:7b:0b:6f:40:e5:78:72:00:67:d8:34:70:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:1D:B7:21:B0:53:C6:5C:B5:C2:61:D3:00:8E:8D:B7:A4:C5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:d2:d9:09:89:e0:c6:81:f3:13:66:af:49:c6:c1:4a:01:
         03:f8:cf:3a:6e:8e:ee:82:89:db:ca:7c:9f:7c:ba:ba:d5:73:
         cc:71:e1:a1:bf:ef:d8:3b:bf:5b:7f:b3:f5:c0:34:b3:d0:ef:
         b3:fc:27:eb:b4:de:8b:50:7f:fc:a5:c0:44:6d:fb:37:cc:5c:
         c4:70:ad:05:c3:e4:80:e6:5d:50:a4:e8:00:a1:51:b2:d9:20:
         c4:42:23:1d:1b:a5:49:3d:e0:68:19:73:c5:24:7c:3b:85:5b:
         e8:73:be:fb:b4:11:85:d3:87:c4:5a:7e:a6:5b:c0:3c:ff:54:
         9c:19:5c:96:58:80:8e:36:51:23:81:50:d6:05:69:51:4e:79:
         55:bf:d9:30:5d:cd:0a:4e:1a:fb:57:7f:32:b8:9e:d8:a5:cd:
         e1:fa:19:68:d4:ee:51:2d:13:59:53:e6:53:43:7a:ef:a9:0b:
         80:b0:75:1b:28:96:a2:38:da:fa:b7:a7:71:c6:6e:22:31:24:
         6f:ee:0d:24:de:56:80:e3:e7:cd:b8:19:36:fe:b8:88:61:a9:
         de:ae:d5:ad:74:c4:39:4c:cf:6b:81:09:38:2f:16:d3:be:de:
         a8:78:46:d5:62:b7:56:0c:d1:56:07:f6:e3:e6:66:bb:ce:5b:
         55:3e:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:19:39 2026 by rpki-client