Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
File:                     d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa (raw, json)
Hash identifier:          Q8aX959A4MjL2CQm5hgqqhSvE4VMIwGuSfCNMTNAJEQ=
Subject key identifier:   81:85:EA:EF:A3:AE:7F:76:87:44:9E:94:CE:87:3A:18:CB:64:45:D1
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EA7871981F5C54F1A204F7180
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19871
IP address blocks:        72.22.87.0/24 maxlen: 24
                          72.22.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:19:81:f5:c5:4f:1a:20:4f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0ed00591-5d7a-4f69-ac4c-78038c4dcf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a8:5a:c5:af:c1:0a:b2:ad:c5:6b:d0:d1:34:
                    49:54:81:23:7d:d2:65:35:4b:43:ec:46:89:88:61:
                    06:36:d5:8d:86:31:35:38:a9:01:fd:85:0a:31:82:
                    e3:64:9f:9e:33:b7:e8:35:f5:f7:2f:31:67:9d:00:
                    80:30:c9:af:78:b6:c2:a8:ae:45:fd:9b:f5:41:e2:
                    2b:1b:9c:dd:ce:e3:24:f8:40:9f:59:1b:96:30:d3:
                    e1:0c:65:4d:48:56:b8:a4:85:10:5b:e3:03:4c:5c:
                    2f:ba:78:d4:3a:48:05:5b:cf:98:70:a1:8c:36:b5:
                    a8:5f:82:d3:e1:04:d6:8c:b4:af:70:26:e3:19:1e:
                    12:d3:79:59:2e:5c:37:7c:06:0d:b7:56:49:58:af:
                    6d:bc:7a:2b:e8:36:62:34:11:bd:1c:49:ec:fd:46:
                    e1:a3:14:33:33:32:db:e0:b8:f1:5c:d0:a0:76:48:
                    5e:b6:3d:67:49:30:24:8f:78:f6:fb:cf:6d:87:c6:
                    a5:84:5c:02:5c:56:f0:ea:4c:6f:65:3c:be:8b:75:
                    18:42:00:e3:9a:90:59:b0:12:07:8a:ca:b6:29:9f:
                    1e:76:e2:c4:f2:3b:67:3a:99:77:0e:9d:d9:22:5c:
                    06:28:7a:a5:fe:d5:03:82:ca:a7:41:1f:d6:fd:1e:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:85:EA:EF:A3:AE:7F:76:87:44:9E:94:CE:87:3A:18:CB:64:45:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.87.0-72.22.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d8:1e:b2:24:55:75:46:3f:f9:29:f8:56:19:9f:fe:b8:23:
         a3:74:65:99:c3:9d:3b:33:bc:1a:3c:73:c8:93:8e:b5:62:ba:
         0e:f9:c0:91:e2:1c:68:7d:9e:96:a8:90:40:b2:38:e1:f6:70:
         af:ea:94:6d:3d:1c:cd:ea:7c:fd:c5:a0:c2:59:fc:c4:19:83:
         ff:61:ff:cf:68:3e:ad:4e:86:a8:58:d5:1e:e2:03:41:43:74:
         a0:80:32:34:c7:ca:93:75:53:c3:45:d5:ff:71:68:b9:e0:90:
         82:8b:8a:d6:eb:83:c4:d9:c7:91:dc:14:14:f2:9b:b9:7f:21:
         12:c5:30:b4:11:94:c2:91:be:64:d8:7b:1d:47:b7:11:7f:97:
         86:ae:69:e3:33:ec:f2:33:6e:a0:67:59:6f:7d:5a:19:b8:1b:
         53:db:cc:04:c7:61:fb:07:5d:42:a6:a2:cc:97:ec:fb:ed:15:
         13:96:dd:2e:d1:6f:62:e4:47:e3:04:d4:32:f3:d2:57:6d:fa:
         9a:6e:58:fe:53:25:53:28:61:b3:94:8b:18:fe:fc:5d:0a:6e:
         d1:57:9a:16:84:a4:7c:5d:53:5d:b2:22:78:20:e4:65:e2:72:
         7a:af:18:99:d1:72:81:d5:25:4b:32:b5:52:e0:fa:60:a0:31:
         1e:26:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:24:20 2026 by rpki-client