Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8f131c90-42de-3c64-a439-0262a963f769.roa
File:                     8f131c90-42de-3c64-a439-0262a963f769.roa (raw, json)
Hash identifier:          gUPuBnLCi2yXIaXX7mgZOwR68csymB854XlcogDLfI4=
Subject key identifier:   4C:37:7B:9B:E6:8A:4B:9E:C3:39:83:BF:F7:B2:62:8F:DE:71:DC:54
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584CC560FE0E6C0625B889075990
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8f131c90-42de-3c64-a439-0262a963f769.roa
Signing time:             Fri 06 Feb 2026 08:04:19 +0000
ROA not before:           Fri 06 Feb 2026 08:04:19 +0000
ROA not after:            Thu 07 May 2026 07:04:19 +0000
asID:                     31898
IP address blocks:        72.22.87.0/24 maxlen: 24
                          72.22.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c5:60:fe:0e:6c:06:25:b8:89:07:59:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb  6 08:04:19 2026 GMT
            Not After : May  7 07:04:19 2026 GMT
        Subject: CN=12646deb-4cc0-4740-9699-cc3784cb1ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:95:f6:9a:ba:17:a2:5c:14:c9:3b:92:53:
                    63:ac:10:be:d9:2c:36:df:33:23:bd:d9:83:a2:9c:
                    76:40:10:a0:3a:09:7d:68:65:67:78:d0:ed:64:18:
                    d6:0b:eb:de:c4:43:e8:78:33:e3:2a:c7:67:7e:e8:
                    d2:d4:81:c6:e7:07:bb:58:6f:17:eb:df:e9:d4:93:
                    a6:68:21:33:ef:7f:5c:4b:79:e3:bc:e7:19:3d:c4:
                    09:b4:92:e8:ad:76:29:76:a2:40:3c:9c:02:09:1f:
                    5b:fa:49:e7:de:9a:68:02:6f:59:9c:75:25:b9:66:
                    ae:1c:a4:b5:28:f5:47:3d:4c:f7:37:1b:5e:79:b4:
                    96:62:4b:19:bf:1b:b7:06:26:94:fb:06:54:c4:72:
                    0e:a1:fc:1c:9b:c4:a9:d5:80:88:b1:2e:7b:99:4d:
                    c9:96:ad:75:fd:ef:e6:59:15:2e:f8:63:1a:e9:2d:
                    fb:78:fd:27:be:18:4d:73:9b:20:bc:2c:17:f9:06:
                    0e:33:76:2c:93:93:a5:98:43:ec:a8:58:08:1b:30:
                    a7:8f:02:3c:b9:fc:d3:57:0d:58:49:8d:1b:a7:e3:
                    c9:b1:02:6c:6c:09:68:bc:d4:e1:9b:f1:22:15:82:
                    8b:84:a3:a5:57:9e:25:c9:89:eb:74:28:f6:63:b9:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:37:7B:9B:E6:8A:4B:9E:C3:39:83:BF:F7:B2:62:8F:DE:71:DC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8f131c90-42de-3c64-a439-0262a963f769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.87.0-72.22.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:94:bb:54:41:90:09:71:4c:5a:b2:f5:47:8a:14:85:93:
         bb:71:92:13:bd:65:df:98:a8:d0:2c:e2:39:00:31:38:a2:b3:
         fe:7a:5a:43:54:5e:d3:0f:39:df:d9:ee:64:63:18:f5:91:05:
         1d:20:2b:2e:af:52:ae:c4:c7:3e:35:ca:92:0a:e6:d2:ce:f2:
         9e:66:12:ca:8e:19:91:b8:ff:64:76:cf:32:d9:b7:44:cf:7d:
         2e:01:1f:ff:6d:79:d1:22:17:bc:51:03:49:2a:4d:04:62:35:
         12:5e:e4:65:27:7d:39:5e:28:03:75:74:e6:72:18:a8:fa:5d:
         21:74:dd:fc:a4:8b:0e:57:60:58:3b:68:54:87:ad:c2:ad:43:
         cd:a4:b5:03:7d:c8:30:28:d0:73:ae:f8:ef:9a:42:82:96:3f:
         d2:63:de:6f:8a:3c:f4:1a:fd:96:97:5d:34:f3:75:83:12:c7:
         8b:1a:a5:d0:d9:76:9e:72:19:e0:17:00:44:91:b9:48:9f:8f:
         ff:92:09:a6:d0:66:d4:a4:81:53:2a:aa:08:ae:4a:db:1a:6d:
         a0:0e:9a:bd:83:24:db:06:c4:07:5f:b9:34:6c:d7:7d:2e:52:
         ee:36:30:f7:47:18:d2:3c:61:a4:7c:50:0c:99:67:9e:37:90:
         ba:ac:7c:67
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEzFYP4ObAYluIkHWZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI2MDIwNjA4MDQxOVoXDTI2MDUwNzA3MDQxOVowLzEtMCsGA1UEAxMk
MTI2NDZkZWItNGNjMC00NzQwLTk2OTktY2MzNzg0Y2IxYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNOV9pq6F6JcFMk7klNjrBC+2Sw23zMjvdmD
opx2QBCgOgl9aGVneNDtZBjWC+vexEPoeDPjKsdnfujS1IHG5we7WG8X69/p1JOm
aCEz739cS3njvOcZPcQJtJLorXYpdqJAPJwCCR9b+knn3ppoAm9ZnHUluWauHKS1
KPVHPUz3NxteebSWYksZvxu3BiaU+wZUxHIOofwcm8Sp1YCIsS57mU3Jlq11/e/m
WRUu+GMa6S37eP0nvhhNc5sgvCwX+QYOM3Ysk5OlmEPsqFgIGzCnjwI8ufzTVw1Y
SY0bp+PJsQJsbAlovNThm/EiFYKLhKOlV54lyYnrdCj2Y7n+gwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEw3e5vmikuewzmDv/eyYo/ecdxUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvOGYxMzFjOTAtNDJkZS0z
YzY0LWE0MzktMDI2MmE5NjNmNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABIFlcD
BAVIFkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAiAqUu1RBkAlxTFqy9UeKFIWTu3GSE71l35io0CziOQAx
OKKz/npaQ1Re0w8539nuZGMY9ZEFHSArLq9SrsTHPjXKkgrm0s7ynmYSyo4Zkbj/
ZHbPMtm3RM99LgEf/2150SIXvFEDSSpNBGI1El7kZSd9OV4oA3V05nIYqPpdIXTd
/KSLDldgWDtoVIetwq1DzaS1A33IMCjQc67475pCgpY/0mPeb4o89Br9lpddNPN1
gxLHixql0Nl2nnIZ4BcARJG5SJ+P/5IJptBm1KSBUyqqCK5K2xptoA6avYMk2wbE
B1+5NGzXfS5S7jYw90cY0jxhpHxQDJlnnjeQuqx8Zw==
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:47 2026 by rpki-client