Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/aeba8515-648a-3957-a31c-45514a42cfc7.roa
File:                     aeba8515-648a-3957-a31c-45514a42cfc7.roa (raw, json)
Hash identifier:          HSDQX5+1I3BfL14dDYVIaQsQUeR7e35JK3lgbUuKIoI=
Subject key identifier:   13:75:A5:54:C3:43:E6:4E:62:69:E6:A6:A3:1A:28:29:F2:C6:E5:2B
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EFCACC63502FB2A1294BBEE00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/aeba8515-648a-3957-a31c-45514a42cfc7.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        72.22.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c6:35:02:fb:2a:12:94:bb:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=a1809913-2bdb-4a59-846b-47db3bc54909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:40:1f:71:bf:b1:0f:fe:9e:89:b9:8b:63:
                    e6:84:2e:35:a6:55:1b:db:c6:42:75:12:77:06:80:
                    99:95:d5:3a:88:fd:bd:44:da:fe:41:f6:94:89:80:
                    9c:63:fd:af:74:79:30:03:e8:1c:3c:36:cd:7b:3a:
                    d2:26:34:3b:cf:cd:c7:66:9e:70:e7:95:1a:c6:0a:
                    19:92:54:6f:86:93:fa:c7:c5:9f:23:d7:a7:36:20:
                    15:82:5c:e9:67:b6:ff:66:6a:1a:d4:5f:34:e6:ec:
                    10:07:c2:6a:c4:11:65:52:ae:9b:0e:9a:5e:48:3c:
                    fc:71:94:c5:7a:9d:19:e4:2b:02:3a:a7:49:37:cd:
                    84:cf:d0:8c:d8:b3:a0:c1:91:87:29:98:1e:6a:83:
                    0b:2d:ab:e9:e7:09:d1:5b:87:07:ff:c9:b8:58:e4:
                    bb:59:c8:ba:14:3d:50:93:a0:18:fb:b6:ab:e4:36:
                    3c:9f:a7:65:7b:a1:25:1e:4e:37:63:60:3d:fa:ce:
                    79:7a:6c:45:c5:98:c6:81:59:86:ac:92:73:e3:ee:
                    9d:71:da:c2:3e:f4:89:11:36:31:ee:1a:d3:9c:b8:
                    95:c6:df:a1:04:ed:58:a2:ae:7f:b3:ea:6f:97:e2:
                    f2:59:4d:d6:36:30:7e:69:9b:2e:b8:32:3a:23:7a:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:A5:54:C3:43:E6:4E:62:69:E6:A6:A3:1A:28:29:F2:C6:E5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/aeba8515-648a-3957-a31c-45514a42cfc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e4:de:2a:1b:ed:d9:8f:88:c6:db:8b:3e:a0:91:b8:6b:30:
         7a:8a:b2:6d:59:61:9f:4d:39:3d:84:b0:d0:7d:52:50:00:52:
         8c:03:c9:48:82:3c:34:82:f2:ee:96:cc:ea:62:79:be:98:a8:
         ac:d4:b1:ed:aa:04:c1:37:e3:6f:0c:67:04:89:e9:fb:dc:86:
         f2:a2:f4:d9:96:6b:f2:ce:93:1d:43:2a:9e:9e:63:76:bb:d2:
         ec:07:2c:f1:1a:d5:9a:b3:8b:2e:a2:0f:b7:b0:59:3f:d5:f4:
         41:f7:32:57:43:65:32:e4:a3:c7:32:d3:a1:81:39:9c:de:a3:
         a8:c9:14:e0:4f:90:6c:b6:83:a3:85:ce:e8:b6:90:82:8d:db:
         90:f9:49:6f:7f:bb:0f:db:1d:bd:13:cc:70:a8:8b:13:13:01:
         9d:7a:e5:f8:b6:65:36:b0:b0:3d:f3:f6:38:45:e9:30:ee:d2:
         3c:77:e4:db:06:98:48:ab:b1:8e:c1:23:01:b0:11:55:62:ca:
         41:4c:26:24:84:3d:ed:4d:f7:35:0f:a6:d6:62:76:11:59:50:
         a9:df:9b:ae:00:c7:4b:f5:d1:71:9b:62:c0:a0:89:fa:81:bb:
         e0:b3:de:95:2a:ae:a6:79:34:fd:ee:5c:40:c5:12:8e:b2:63:
         e5:ab:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:03 2026 by rpki-client