Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa
File:                     4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa (raw, json)
Hash identifier:          iATFOqfkjXjLi2NX0Yt61+tI3OHJeBmpXiCVoIELRH8=
Subject key identifier:   2F:13:D2:15:81:74:26:DC:8A:FA:F4:00:16:93:E0:0F:20:8B:0A:B9
Certificate issuer:       /CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
Certificate serial:       010D0C9F4328584D39EA15EF5A0D46233AAB0100
Authority key identifier: E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa
Signing time:             Fri 20 Mar 2026 01:50:54 +0000
ROA not before:           Fri 20 Mar 2026 01:50:54 +0000
ROA not after:            Thu 18 Jun 2026 01:50:54 +0000
asID:                     36086
IP address blocks:        72.28.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:ea:15:ef:5a:0d:46:23:3a:ab:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
        Validity
            Not Before: Mar 20 01:50:54 2026 GMT
            Not After : Jun 18 01:50:54 2026 GMT
        Subject: CN=44ec82d0-c845-4baa-94d8-5f1f4b959465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:4f:5a:fd:2f:1f:39:32:a1:a8:7f:f2:b3:
                    92:18:f3:25:99:c7:04:83:b1:27:1d:b1:c7:1e:93:
                    25:23:a4:6a:44:3a:81:ea:79:e0:72:23:0a:e6:98:
                    e3:9c:46:04:16:ff:64:96:c2:ee:11:6f:f3:9e:3e:
                    20:86:bf:19:39:d1:a3:e3:e1:18:3d:12:ac:2e:3a:
                    dc:e3:dc:70:82:88:f7:e1:49:a6:58:af:6e:38:11:
                    ed:80:73:bc:96:ef:e1:96:a3:cb:64:d7:d1:83:c2:
                    f0:78:10:3d:0d:cb:b3:23:22:00:9f:5b:09:60:87:
                    f2:ae:f6:b5:bd:a0:90:bb:34:94:ba:79:fc:69:7f:
                    e5:28:08:e4:d5:f7:73:85:6d:ad:a0:ae:5a:a4:89:
                    bd:75:e2:ed:f7:78:66:0e:dd:c0:89:fa:a3:0e:11:
                    a5:79:bf:0b:b6:e6:f0:75:72:fb:21:58:47:09:11:
                    d6:51:6f:12:b3:e7:fb:f8:db:2e:32:c1:76:83:3c:
                    75:d3:b6:9e:fe:30:2e:9f:ba:08:3d:44:0b:a5:d1:
                    25:df:70:e0:80:53:61:ec:c6:cc:57:b8:ea:96:85:
                    26:bb:f2:07:55:d7:2b:93:89:e6:2a:20:86:3a:73:
                    cc:95:4f:e6:06:49:0b:c0:52:81:ea:1f:19:b1:23:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:13:D2:15:81:74:26:DC:8A:FA:F4:00:16:93:E0:0F:20:8B:0A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/4ea6cab6-3bf5-37d7-8560-10b12a5b38fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl

            X509v3 Authority Key Identifier:
                keyid:E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:46:5e:78:17:5b:0b:00:87:6a:64:94:59:45:8c:61:31:7b:
         f5:99:28:cf:76:96:57:0c:28:6c:c7:cb:5b:cd:03:07:71:36:
         14:7c:0f:59:14:85:e7:24:94:64:84:28:a4:c8:ec:61:22:c8:
         2b:57:0c:f4:75:aa:81:e5:d4:49:82:6d:12:95:d0:cd:73:7d:
         3d:12:1e:1d:96:89:0f:57:f8:d5:c3:7e:b0:4f:b4:98:1b:4d:
         0d:7a:46:26:c2:cc:b8:01:2b:13:f2:dc:20:1d:ce:0c:6f:bd:
         37:ea:dd:48:e6:5b:6b:5a:67:af:d3:a4:1d:a6:57:7e:d7:c7:
         fd:60:c8:47:df:4b:98:9d:51:08:70:a7:06:91:90:30:4a:68:
         2e:0a:49:30:0e:de:90:21:20:4b:32:8f:66:a2:87:e8:3f:3c:
         0a:72:28:7a:bc:b9:6c:c9:8d:db:ec:a4:f6:4b:dd:68:8f:f0:
         43:b9:ef:bb:de:fb:a1:52:ba:5a:f6:55:63:63:d0:7c:d3:36:
         6e:d2:79:dc:a1:46:80:2a:79:cc:f5:8d:66:55:88:48:0a:4e:
         35:9c:94:7c:76:82:08:64:98:cb:eb:c4:c4:a8:e3:8e:27:e0:
         57:b8:22:54:62:51:a4:d6:76:b4:50:24:95:87:d9:a4:99:07:
         d1:86:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:46 2026 by rpki-client