Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa
File:                     fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa (raw, json)
Hash identifier:          jRVkA5mZq7WQKv52oceMjmJQhdrECzrnXGZ3JD1tQLM=
Subject key identifier:   43:51:9E:6B:82:9E:78:93:55:AF:94:DA:6F:81:54:34:4B:5E:A9:9E
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CC61207F6E990288BD7C3D420
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     4922
IP address blocks:        72.46.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:07:f6:e9:90:28:8b:d7:c3:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=7fa2fe1a-d05e-484d-a144-74865a477e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:50:b9:10:46:67:ce:1a:ff:7f:06:f0:80:
                    27:7f:32:69:7d:bd:c9:82:22:ae:48:8f:c2:11:cf:
                    b3:4d:bc:ca:e3:44:e7:c5:fa:c7:e9:91:b3:54:52:
                    d0:03:46:b3:7e:d4:9a:a2:98:8a:e1:cc:9f:66:4d:
                    df:ae:e2:f0:05:68:32:86:30:b6:21:18:58:78:d9:
                    9f:9a:44:2a:26:29:48:0d:f1:04:53:10:19:0b:2a:
                    5f:c0:42:ae:b3:21:f3:76:35:36:64:ea:34:da:1d:
                    51:96:d6:e3:ba:e9:18:1e:e4:57:5f:4d:6e:aa:74:
                    3b:42:b9:51:4c:01:85:f8:fe:aa:06:11:86:cf:0d:
                    ce:9c:e7:4d:5a:a6:d6:f7:f9:de:f7:0a:83:37:c1:
                    2d:1c:9f:57:66:cc:28:42:f5:d5:99:30:e0:5c:e7:
                    58:d6:89:b2:9e:ee:98:68:4f:bc:78:d5:0f:c8:0e:
                    58:ab:cc:ea:62:33:de:e6:11:e5:fe:5d:36:75:64:
                    cb:af:da:8c:bd:17:da:ae:92:34:ef:98:9a:01:e1:
                    74:7d:c0:3b:18:3e:36:81:76:b0:6d:41:87:4d:94:
                    b9:b5:21:9c:73:7a:22:ef:ca:6a:47:19:d5:76:3d:
                    a2:ba:e4:33:10:5c:2c:50:4e:82:28:8b:6f:ff:9d:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:9E:6B:82:9E:78:93:55:AF:94:DA:6F:81:54:34:4B:5E:A9:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:04:c8:d2:a6:02:e3:0c:13:61:90:34:a1:0d:73:c1:b3:08:
         86:28:1c:38:a2:d4:7c:8e:76:c1:1d:0e:3c:71:f5:92:51:fa:
         7d:9c:38:c8:88:91:88:4c:d3:73:d2:ec:0e:50:68:37:12:7b:
         8a:93:5c:60:a5:4f:d4:22:27:2c:52:f0:9d:b1:58:ad:da:e1:
         a4:f4:3c:b4:3a:1b:c0:21:2c:fd:1f:1e:3c:a3:a4:ce:52:54:
         26:2c:bf:5e:d0:ea:28:a0:0d:4a:a9:e9:73:a0:15:f0:38:0f:
         8c:fb:6d:01:e8:a5:14:ff:91:8e:71:38:83:8b:76:89:a5:7b:
         04:e9:66:7a:74:e8:be:66:52:a9:26:85:12:f8:44:49:d5:e3:
         ef:1e:2f:ba:cf:68:e8:ee:4f:97:c7:ee:b8:9c:2e:5e:68:84:
         03:51:77:10:6d:2d:59:b8:ba:03:51:d7:2e:08:bc:f2:da:42:
         f1:fc:95:6e:d5:f3:60:ae:7b:2c:60:12:08:67:ba:5b:b5:21:
         71:c1:c1:b5:ba:1e:c4:1b:0b:3d:8e:ee:00:b5:88:d6:e3:df:
         8e:a3:e5:e8:14:69:9c:90:98:93:89:48:4e:e7:eb:99:b5:cf:
         c4:59:e1:31:63:67:0f:d0:52:5a:4d:5f:02:2f:0e:4e:77:80:
         2f:bb:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:22:03 2026 by rpki-client