Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bed6d742-cf48-32c5-a9d1-50813727ce48.roa
File:                     bed6d742-cf48-32c5-a9d1-50813727ce48.roa (raw, json)
Hash identifier:          Q82HzRmnwArfQmF0gpRZuc2pOL8AqBV1XZ6BKaR5Htg=
Subject key identifier:   A7:6A:BA:A7:AA:BC:50:87:FD:41:5F:5C:77:EA:8D:64:8F:F4:61:FF
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E5A49EF9E2DB235B73D71D360
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bed6d742-cf48-32c5-a9d1-50813727ce48.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        72.22.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ef:9e:2d:b2:35:b7:3d:71:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=00ef8b92-58e8-4784-80ff-df7abf36c366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2a:5a:02:32:24:ba:36:a4:0c:98:b7:82:6e:
                    e7:69:e5:d2:e3:72:c5:40:2d:79:41:f6:3a:58:f7:
                    be:bf:a0:92:6f:43:90:60:a7:57:50:2a:d2:dd:08:
                    f8:c6:28:da:16:9d:24:26:35:f8:43:8e:33:b3:db:
                    a5:54:5b:37:ad:22:98:6c:67:7a:73:de:54:91:86:
                    9c:77:64:da:2e:c0:11:e0:39:79:01:38:9f:be:11:
                    8b:ee:3f:42:cd:62:9a:48:a2:df:3e:c9:66:1e:7b:
                    b7:d4:d4:ab:3a:6c:b0:08:c0:81:9a:9b:d6:74:c7:
                    45:c8:1c:71:01:30:da:4a:5c:d4:5e:a3:3f:a7:2b:
                    2d:4a:b8:60:0b:49:a2:4a:15:59:d9:bb:db:ed:07:
                    95:df:da:7b:9d:ae:29:6f:5a:0f:15:c4:c1:b0:72:
                    e0:a2:5e:f6:48:68:a3:6e:74:7e:c2:2b:e7:77:84:
                    9e:18:fb:14:15:21:34:e5:fd:be:a3:09:b1:03:a6:
                    03:dd:ae:69:b4:45:46:32:da:de:97:09:34:45:69:
                    c0:34:da:18:25:28:a5:ef:ac:7e:e3:e9:e8:b2:49:
                    7f:b1:83:52:8e:90:32:67:c0:09:60:e5:8d:a8:55:
                    cf:fe:c0:15:df:d1:2d:93:ad:47:f5:78:c0:13:91:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6A:BA:A7:AA:BC:50:87:FD:41:5F:5C:77:EA:8D:64:8F:F4:61:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bed6d742-cf48-32c5-a9d1-50813727ce48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1b:f4:18:99:b2:8d:ab:cb:9c:02:0d:62:07:ca:5c:dd:7a:
         ca:42:8d:f1:a3:a7:77:51:23:8f:f9:f3:4e:20:28:c3:e6:2b:
         f2:6a:10:f4:bd:d5:a4:63:ac:ba:c8:92:54:57:ed:c5:33:43:
         92:5c:1b:7a:60:df:39:a7:06:f2:a2:2b:af:74:07:fd:87:ad:
         a7:c4:d3:11:70:3a:70:50:07:8e:85:8f:19:46:ab:f2:8f:51:
         9f:a2:5d:54:2f:97:51:5a:b1:74:52:82:c2:04:e3:83:a9:92:
         e4:55:fa:fa:45:a4:62:5a:66:08:39:74:fc:7b:0c:aa:56:d4:
         b5:05:42:16:8d:3b:9c:2a:31:66:5f:b7:0f:d2:2f:42:d4:34:
         ff:40:f8:36:7b:00:a5:a2:36:0d:4b:ce:85:48:b1:78:d9:d5:
         64:f8:cc:eb:7e:71:0e:3e:a7:46:1d:f0:56:ca:0f:2b:4b:6e:
         84:3f:9d:82:20:47:8a:31:0b:81:33:45:7c:07:5d:39:a5:d2:
         12:ef:68:99:32:07:8e:68:3e:29:db:22:60:07:c0:2d:8f:b5:
         d3:b8:23:d4:6d:c1:07:90:cb:ad:e1:35:b5:be:cd:b2:66:93:
         14:84:d4:6a:bd:15:5c:b6:27:e6:13:79:fb:2b:8d:96:be:74:
         0d:54:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:05:41 2026 by rpki-client