Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
File:                     9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json)
Hash identifier:          q+3kxvT9JvBXJXnp2rhkNgNthMzekDXI1W3gfg7HHNc=
Subject key identifier:   0F:12:4C:BA:98:F3:F6:35:10:6D:72:71:25:02:60:B5:0C:12:86:C4
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584CCD0CA36FCE784F9E5771C580
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     394437
IP address blocks:        72.20.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a3:6f:ce:78:4f:9e:57:71:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=67a5969c-f2bc-44aa-a2cc-2b49bd5e3d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8f:7d:59:23:ba:c9:d7:57:99:7f:c1:04:01:
                    a4:17:90:2a:df:1d:f8:d0:c8:50:f4:e4:fd:84:02:
                    fd:5a:22:79:d2:e3:0a:21:f2:d4:21:31:21:a0:12:
                    aa:6b:e7:01:be:67:05:48:63:42:69:22:7d:e8:27:
                    34:ba:13:3b:1f:d8:3b:44:0f:ed:7f:9e:a6:0a:d8:
                    86:bc:73:5f:9d:8a:fa:47:69:c9:30:9a:7d:94:e3:
                    87:28:ec:ea:8b:1e:a2:11:b7:e9:24:61:4a:2a:44:
                    36:ee:d8:ac:b2:4c:32:5c:76:94:8c:dc:b1:f6:9d:
                    e3:27:e0:b4:1b:4b:1d:8d:eb:ce:66:2c:f6:55:c1:
                    57:4c:f4:bc:7c:42:54:2b:1a:e3:b5:1a:f2:2b:9d:
                    6f:ff:eb:da:c9:85:25:76:1d:b3:8f:21:3a:24:88:
                    8c:81:2b:a0:a8:a5:92:7e:2d:c2:d7:ab:3c:6a:ea:
                    dd:6c:d7:49:28:21:74:27:46:b5:68:1c:23:51:de:
                    8c:24:0e:d7:f6:08:e9:fb:db:02:84:a1:d5:01:6c:
                    9e:52:0f:c5:42:ac:28:7b:04:53:5b:53:d1:7b:09:
                    8c:83:cf:3f:e5:59:e5:4a:2c:0b:94:4d:9e:8b:8f:
                    bc:a4:fc:33:0e:f8:c0:95:21:ca:66:ae:d1:06:ec:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:4C:BA:98:F3:F6:35:10:6D:72:71:25:02:60:B5:0C:12:86:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:57:d9:f4:6b:21:90:64:17:16:17:ef:ea:de:30:09:1c:fc:
         b4:5c:c7:3e:be:fd:30:9d:8a:51:7f:f5:a4:6f:fe:6d:6c:94:
         58:e8:2a:99:e6:8c:06:84:4f:ed:b2:82:d6:a2:13:3a:82:41:
         7a:bc:bf:59:b8:b8:57:3f:f8:86:59:db:38:03:a4:a5:a4:bf:
         c4:6c:a8:33:3a:8b:10:80:dd:e7:00:2a:40:47:11:56:f9:69:
         1d:d9:d7:62:22:0b:10:b7:a1:6f:88:0b:a9:2b:4d:5f:f5:cb:
         f3:8b:be:f9:39:e1:9d:c5:07:de:e4:82:d3:2b:32:59:3c:07:
         48:2f:7a:d0:39:17:67:b2:96:e9:45:e6:ce:cb:8a:8c:2e:22:
         a1:71:f0:f4:e2:86:e4:b2:22:e6:cd:49:a3:e1:38:02:da:cb:
         09:5c:01:a8:d6:27:c2:71:c2:8d:46:e1:7d:77:c4:4b:1d:14:
         49:c7:04:16:d1:4c:34:c2:7b:16:2b:16:42:a8:b6:cd:24:ed:
         5c:44:56:0e:8a:59:12:e5:f8:1f:90:8d:9e:b5:00:53:c8:37:
         48:a4:b0:4a:0a:e0:a9:18:9d:00:3f:7e:b9:67:2d:29:e8:ad:
         1d:1d:26:eb:50:96:9c:7a:3d:93:7e:2b:4d:83:2c:62:31:40:
         bc:3d:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:29:53 2026 by rpki-client