Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa
File:                     67ed9f3f-8163-30ed-adda-fa473db6d09a.roa (raw, json)
Hash identifier:          rFbEnEyxt5A4H+f+Ty4gEflHbMhw0U6S4QOIjwM3JDA=
Subject key identifier:   87:AA:F9:C2:03:C7:7E:E0:79:16:4B:DE:B5:BB:5B:FB:25:DF:D1:25
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D1B1A11596C98A88805B88A38
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     394437
IP address blocks:        72.20.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:11:59:6c:98:a8:88:05:b8:8a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=95356220-971e-4fbe-b2ab-4d936acfae46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:1e:1f:85:82:1e:e1:9b:d8:dc:fb:25:4b:
                    55:82:c7:05:75:2e:37:b9:34:a3:0c:2d:95:f7:b7:
                    79:39:0b:aa:da:df:9d:c3:06:02:ff:bc:93:4a:34:
                    5f:3d:17:a7:e2:bd:95:59:8e:f9:4e:a9:1c:6b:00:
                    14:18:e5:91:72:c3:c9:81:9e:bd:57:78:82:b4:65:
                    78:37:29:31:87:04:59:fc:42:bc:46:81:0c:bb:a4:
                    56:90:45:1d:a9:4e:6e:06:27:91:a6:40:cb:a2:4f:
                    d6:9b:f8:ec:9f:1c:3d:9c:da:1f:90:7a:1a:d7:0f:
                    b9:c7:30:1d:8e:67:f9:df:cb:0b:e8:46:fa:14:56:
                    f1:cc:f6:16:5e:4a:9f:56:d1:84:e2:c5:c0:51:78:
                    9d:e9:fe:2f:19:ab:ea:a3:de:f9:e3:ba:67:cf:6a:
                    ba:cb:71:ec:d1:c5:1b:39:60:e0:b3:4f:b3:03:dc:
                    82:86:e7:4a:b3:78:36:49:e3:e3:08:8b:1a:b2:92:
                    f3:2e:86:96:b8:69:ee:4e:48:98:ff:00:de:35:07:
                    17:de:f9:92:c9:5b:c1:aa:7f:80:2c:f6:a0:a3:95:
                    63:a2:9a:c0:74:c9:75:c0:37:9e:ee:9d:65:70:e2:
                    fa:98:45:13:25:1d:8d:e3:3d:75:19:f7:9c:92:70:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:F9:C2:03:C7:7E:E0:79:16:4B:DE:B5:BB:5B:FB:25:DF:D1:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:a5:9b:b7:38:0c:eb:19:fc:d7:00:5d:86:ed:45:f0:d8:b9:
         91:96:36:c9:8d:2e:aa:11:97:ed:8b:de:35:72:6d:1f:4f:28:
         38:83:e7:8d:5e:95:92:59:35:12:6f:5f:61:4c:79:1c:59:3a:
         6a:e6:a9:63:d7:e6:5f:ed:8e:97:0d:36:43:51:78:ed:9b:d0:
         77:e6:29:4a:a2:b9:97:d1:66:fc:dc:df:32:54:bb:e7:ac:f8:
         ea:68:77:d3:b7:6d:8c:72:7e:32:9a:ff:35:52:7d:38:af:d5:
         01:12:d8:81:bf:df:a6:fe:87:75:6b:50:e8:05:90:15:fe:e5:
         c7:3d:c3:3a:9e:43:97:25:b8:8f:3d:60:37:e2:3a:ce:68:83:
         ca:dc:3c:4b:2d:9b:7f:b5:eb:85:26:7d:cb:7b:f8:46:54:38:
         8e:05:3d:3a:46:e5:dd:02:72:c8:67:a8:53:84:b3:6f:d1:8e:
         59:69:74:b6:f9:d8:c9:7a:aa:7d:86:dd:8a:ce:b1:db:bc:e7:
         af:fc:a6:94:c8:ef:50:59:d2:94:db:c1:2b:0e:c5:62:c3:bd:
         59:ce:33:68:b3:37:8a:af:02:ba:dc:74:ea:a8:8a:65:e0:dd:
         21:7e:bb:6e:4d:df:39:c6:a0:31:6d:51:b7:57:ac:05:00:67:
         a4:ac:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:25 2026 by rpki-client