Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
File:                     8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa (raw, json)
Hash identifier:          3UBTYDX1D7wO14V4qBZKzLpJxfKLAb5KpMXJExtGNhI=
Subject key identifier:   7C:0E:10:41:16:04:39:CA:E9:88:85:BD:08:31:C7:86:E0:DC:61:7B
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584CB121CFC5599602151C40C160
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     22362
IP address blocks:        72.20.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:cf:c5:59:96:02:15:1c:40:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=d574e2ee-010c-4c0c-9c23-77d157084311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:52:e0:a9:53:76:b3:ad:6e:fc:19:47:f4:
                    96:e6:63:64:92:90:c9:7c:ce:aa:da:1c:fd:9f:54:
                    08:70:a3:4a:b4:8e:4b:c3:3d:6f:d2:96:3b:a2:d0:
                    3e:4a:a0:2c:ad:2b:dc:c9:06:81:e7:92:9d:c2:eb:
                    70:11:a9:aa:df:8b:93:fd:9c:32:a0:9e:72:fb:7d:
                    fc:2b:b8:d9:ce:47:8c:b6:ad:f7:ba:2d:41:3b:27:
                    83:80:f8:b6:c5:ba:5d:75:7c:00:ff:c4:ff:e6:06:
                    77:04:4b:ae:5a:17:81:ad:0e:34:8f:5d:90:fa:e1:
                    c8:cc:06:1d:40:3c:cb:c0:8a:e1:47:a6:a3:5c:67:
                    e0:ce:0c:18:1d:ae:16:bc:fe:8d:6f:1a:c3:7f:b5:
                    0b:ad:1b:f0:17:2f:d9:d9:ac:b2:b9:e6:dd:1d:4f:
                    b1:c9:b1:15:90:ed:3f:f1:36:1e:90:9b:34:d4:07:
                    49:fd:4e:10:8b:7d:88:b2:90:d7:8f:fc:20:80:01:
                    6f:eb:30:66:51:3a:c2:6f:2b:6e:7f:06:8e:2a:d0:
                    72:a4:d3:43:bc:fc:89:7c:06:43:6e:f1:65:25:bd:
                    9e:b3:3a:c0:81:1e:1a:1e:76:23:72:39:c9:d0:fa:
                    6e:fc:6f:42:e2:9a:df:c5:22:07:f7:18:9e:8d:d0:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:10:41:16:04:39:CA:E9:88:85:BD:08:31:C7:86:E0:DC:61:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:51:2c:ae:a8:f7:22:4b:37:be:08:e1:82:28:f9:47:5f:
         fd:77:91:1a:e6:3f:08:c2:4b:34:d7:f8:a6:e5:00:99:cf:df:
         0d:9a:ac:a9:ef:fd:01:8c:18:41:dc:44:97:e8:53:20:03:f3:
         a1:9e:5b:de:58:8e:1d:16:d6:eb:a1:d3:88:b8:10:f6:4c:8a:
         43:dd:02:a1:be:87:16:87:09:2c:e5:f8:ae:78:91:2a:eb:4e:
         3b:7f:16:e4:64:f7:80:14:f4:ab:99:37:d3:5b:cf:b2:62:8f:
         8a:08:ad:6a:74:f8:f8:20:53:9c:f5:5a:a1:dd:7c:bd:9c:49:
         bd:48:ec:07:d6:7e:09:d5:1d:15:ac:78:83:59:f0:4c:d7:a2:
         41:cc:4a:bf:ba:66:a3:dd:fd:07:74:19:d2:96:53:6a:3d:a7:
         69:42:18:31:a0:6b:a7:40:fd:b3:60:4f:13:dc:44:fc:b3:e8:
         62:35:c9:b5:23:d2:da:ef:17:06:b2:34:11:8c:9e:25:e7:ee:
         30:59:ab:9b:3b:d2:7b:a4:45:2d:2a:57:53:82:0d:1e:a4:82:
         28:ac:52:8b:94:11:54:39:ee:00:57:b1:f2:d0:2a:78:90:9b:
         c7:19:35:cb:64:3d:89:59:87:cc:8a:a1:90:0c:72:b7:5e:ac:
         4b:74:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:20:09 2026 by rpki-client