Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa
File:                     72a09a28-e7b1-3e90-b42d-bbab33e58352.roa (raw, json)
Hash identifier:          pIf6VMqFQgAwCVqfmrGyKAeed8KbCGNyFNM138ZcNew=
Subject key identifier:   FD:86:6B:28:57:AF:76:98:A2:FD:15:B2:0A:51:E4:0B:A4:39:F0:E4
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584F5A330953490144414BDA5380
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.186.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:09:53:49:01:44:41:4b:da:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=54c7dbce-4f0e-45bb-8182-88b367fa546a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:43:7d:7b:fa:a5:7b:ae:ac:26:ce:d6:12:
                    f6:63:f7:92:c5:31:9c:a8:8f:28:fe:32:9b:ac:5d:
                    24:ab:51:ef:15:f8:95:b3:31:dd:34:e1:1d:57:6f:
                    cc:59:dd:d2:a5:00:79:dd:42:24:88:86:50:97:ca:
                    8c:b6:3b:e5:63:52:f0:4e:7d:b8:18:a1:64:7f:5c:
                    ca:60:43:e3:b4:45:68:23:ec:7b:26:d6:f8:d3:42:
                    28:9a:00:11:b4:e2:d7:9b:4e:01:18:9f:93:23:c7:
                    36:57:41:dd:88:18:95:6a:da:4e:8b:26:66:82:34:
                    94:9f:4c:9c:0a:b4:70:53:a4:c5:94:fc:1d:e9:43:
                    4e:9e:bc:19:be:04:e5:bc:ef:14:35:37:17:c2:3d:
                    5f:b2:de:83:a2:21:f8:a1:04:85:05:7d:54:d5:7c:
                    81:3b:6d:74:40:af:ed:66:04:3b:69:49:97:72:c1:
                    07:05:8b:73:f7:92:fd:e5:b5:8b:c9:1c:dd:7d:7c:
                    c6:0a:2c:cc:e9:2e:63:d4:51:2b:76:6a:92:04:7a:
                    f4:b0:cc:31:c2:c3:3e:fe:20:09:8c:21:c4:2a:4b:
                    aa:0f:08:df:e3:45:9b:35:96:d9:60:04:40:b4:32:
                    26:e0:32:5a:6a:c0:cb:f5:c1:44:11:d7:a6:39:92:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:86:6B:28:57:AF:76:98:A2:FD:15:B2:0A:51:E4:0B:A4:39:F0:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:10:83:e4:7c:f4:c2:aa:fa:fd:6f:b4:7c:4a:ef:b1:4e:78:
         a4:07:2c:85:9b:53:72:2d:8d:8d:df:2d:78:ed:b2:f9:f5:02:
         8d:12:31:32:80:62:6f:ca:36:da:45:31:44:18:d6:ff:3a:ef:
         eb:9e:f9:3a:d4:8d:d1:f1:bf:b6:23:c6:86:63:cc:36:a9:20:
         df:f9:f0:4a:87:64:b6:da:6e:cc:7e:bd:f4:b3:86:bf:5b:66:
         cc:b3:75:74:c5:41:20:07:79:22:7a:04:10:8b:6a:7c:a7:7f:
         9a:b2:ba:09:b5:10:af:1d:31:6d:21:e3:10:5d:0d:6d:bf:55:
         8f:86:72:bc:0d:ac:fb:1f:92:45:a6:51:09:bf:b2:42:4e:dd:
         f2:30:2a:41:d3:87:9f:6b:3c:99:a2:c1:44:3a:a3:7e:31:d9:
         d2:0c:66:de:e1:30:2c:1a:80:c0:57:0e:b9:40:58:9f:d4:0f:
         ae:bf:60:07:77:a1:09:24:8a:77:34:da:f0:88:56:e1:4f:89:
         71:5b:b0:88:cc:79:d9:69:ec:2e:49:82:7b:11:c7:8e:ac:39:
         66:43:f3:0c:fe:ac:70:42:8f:77:bb:bd:bc:95:cc:09:07:c3:
         a6:83:ed:ea:14:0d:7d:3f:2b:ed:b9:b5:59:25:78:4f:ac:d6:
         04:1f:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:54:32 2026 by rpki-client