Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa
File:                     f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa (raw, json)
Hash identifier:          U7dRmjYqeotU82EJoGeDYD1MekRZeybEsP9ilCsbunM=
Subject key identifier:   4E:AC:F0:2C:46:64:FF:0C:38:F2:55:EF:77:04:FB:85:EA:E9:66:37
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EA787198D5C2CA755B3B34300
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26337
IP address blocks:        72.22.87.0/24 maxlen: 24
                          72.22.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:19:8d:5c:2c:a7:55:b3:b3:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f38e7743-0634-40f5-b9d5-b7309f3cb0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:ad:f0:51:5d:83:d3:e7:b9:e2:f8:fa:6c:
                    61:8c:4f:ff:32:e8:c8:a9:ab:1a:e4:0d:69:60:81:
                    44:dd:37:55:a8:86:2f:86:be:7a:80:89:5a:f2:fc:
                    a6:8c:ac:95:77:0c:a1:8d:2c:77:b3:b0:d8:b8:d5:
                    7e:83:6d:6a:9e:be:0f:39:53:d2:74:bd:18:c6:de:
                    8c:3a:3d:af:f7:b0:38:b4:fb:87:33:27:10:d8:68:
                    17:31:a9:0d:76:b2:6e:b7:f4:60:a9:0c:65:c9:22:
                    76:3c:33:da:11:e6:fe:c3:53:70:1c:1e:cd:6f:16:
                    f0:a4:41:0c:cc:f3:7e:12:56:2d:da:e0:c1:0a:cc:
                    81:8e:99:1d:37:b9:d8:81:49:bc:c7:53:de:a0:2c:
                    8b:f6:9a:9f:7d:3c:f9:18:32:ae:5e:6f:53:b2:f4:
                    3a:2b:fc:95:4b:68:83:37:bf:3c:0a:f4:d2:9e:6e:
                    b6:59:78:87:05:40:34:d1:29:8c:f5:bc:32:86:41:
                    05:63:14:24:5d:53:bb:25:4e:b8:23:41:2b:9d:eb:
                    f7:eb:76:a3:46:c3:b7:92:9b:e8:52:f9:c1:3f:35:
                    32:47:82:0a:83:d0:42:79:ae:d4:a2:32:dd:cf:cf:
                    85:3b:43:94:df:68:61:e9:45:1f:df:a7:9b:9d:32:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:F0:2C:46:64:FF:0C:38:F2:55:EF:77:04:FB:85:EA:E9:66:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.87.0-72.22.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:e7:26:22:f4:23:6e:66:78:94:25:8a:5e:cb:8f:5c:4f:
         e7:85:9e:b2:a6:c5:2a:37:72:56:64:38:ed:3e:af:61:f2:eb:
         5d:d6:e0:86:72:f3:61:c8:ec:cf:2b:e7:e2:86:84:cc:97:fe:
         96:d7:7a:70:eb:a0:fe:8b:4f:c4:77:19:e0:40:59:c4:33:06:
         c4:d5:42:b6:e5:b9:21:17:6d:34:eb:8f:4a:6a:99:67:80:d8:
         84:60:4c:0d:8f:35:0d:a2:26:55:02:b2:e8:e6:8b:3c:4d:b3:
         ed:1c:30:7d:08:02:0b:b1:fe:f3:0c:44:ae:6d:d3:5a:ae:c9:
         23:f8:0f:64:0f:64:09:88:e5:ad:d7:84:71:e3:fe:c3:f2:98:
         e1:1c:1f:78:de:9f:25:bb:de:78:b8:17:14:ca:a1:f2:8d:37:
         d3:ac:e2:91:29:60:c4:d7:bb:58:1b:bf:07:ab:06:7d:33:29:
         d7:03:fc:46:8b:b4:2d:12:62:ae:a3:d1:ed:59:01:76:4e:c1:
         b1:d8:c1:0c:72:d0:85:c4:99:74:a5:98:98:df:20:03:b3:26:
         71:bb:15:32:ad:e1:61:ff:cf:82:b0:08:6d:e7:7c:dc:74:e5:
         50:86:08:b1:55:01:79:2f:e9:f2:ee:73:56:9f:25:72:f8:b5:
         3c:73:fb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:27:04 2026 by rpki-client