Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/2e5034f0-1175-3f06-a025-beb1b11c424a.roa
File:                     2e5034f0-1175-3f06-a025-beb1b11c424a.roa (raw, json)
Hash identifier:          VaJvbGD1IVUMWN8+JyIQ5nJRoeLT2OvEbuO/yrjkWy0=
Subject key identifier:   79:26:07:7A:01:1A:12:7C:EF:BF:BB:97:51:CD:DA:55:53:B4:B3:33
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584CD3F5519C2BC5508AA578B5C0
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/2e5034f0-1175-3f06-a025-beb1b11c424a.roa
Signing time:             Wed 11 Feb 2026 13:24:29 +0000
ROA not before:           Wed 11 Feb 2026 13:24:29 +0000
ROA not after:            Tue 12 May 2026 12:24:29 +0000
asID:                     393238
IP address blocks:        72.148.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d3:f5:51:9c:2b:c5:50:8a:a5:78:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Feb 11 13:24:29 2026 GMT
            Not After : May 12 12:24:29 2026 GMT
        Subject: CN=d13afe3f-e15f-4dd5-9f76-eda311ed5b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:ec:7d:2e:46:3c:93:07:d8:ec:d3:5f:cd:
                    35:d4:83:f7:09:65:6a:5f:0b:3f:07:84:0a:70:4a:
                    1c:f8:62:36:f5:35:54:cf:47:60:26:e9:1a:1b:4b:
                    27:f4:74:59:71:5f:b2:fb:9a:e1:64:6b:16:4d:30:
                    d3:6c:a9:84:e4:99:9f:c8:a5:93:ee:4e:89:95:03:
                    74:17:8e:ac:f8:c7:3d:2c:c7:fa:a5:7e:4b:58:8e:
                    fb:fd:fb:de:24:4d:c1:5e:77:76:eb:59:25:16:a9:
                    9f:f3:50:97:68:b7:d9:46:cb:79:93:f6:88:60:74:
                    fd:1a:66:95:3b:6c:c1:a3:c4:7a:d2:ad:63:5d:a8:
                    43:bb:77:3f:79:e7:fe:1f:38:6a:f3:79:9b:07:6e:
                    8e:21:85:d8:6b:c8:b5:59:9c:02:ea:8f:d9:24:10:
                    57:2b:03:49:79:8c:ad:56:ee:dd:21:81:71:fd:e8:
                    00:8b:02:ea:22:b1:2d:1e:4a:de:d9:14:bb:87:ff:
                    84:58:3b:0a:a1:99:8d:ac:27:7c:83:e7:63:e7:29:
                    c5:33:ca:59:67:81:77:f1:1c:dc:cb:6e:1e:e1:7e:
                    79:e6:77:da:dd:64:fa:c3:35:d7:7e:cc:dd:71:1f:
                    e0:d2:7a:57:70:3c:6b:4e:62:c9:3a:0b:c8:13:ba:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:26:07:7A:01:1A:12:7C:EF:BF:BB:97:51:CD:DA:55:53:B4:B3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/2e5034f0-1175-3f06-a025-beb1b11c424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:67:49:a5:ab:e8:43:8c:ae:99:d7:d5:f8:3b:34:5c:f9:
         45:18:ad:06:02:05:41:b1:5b:63:53:a5:91:7f:e4:d0:9b:b6:
         dd:ae:b4:e4:0f:44:a2:6b:b4:b9:44:3b:59:3e:59:b4:a1:5f:
         d4:1e:da:0d:c4:ae:78:e7:66:7f:22:3e:4e:18:7b:d5:a3:ac:
         87:a1:2a:f0:7d:2c:a1:85:2c:fb:05:95:67:63:05:d3:1b:a1:
         df:4c:76:0d:33:ae:c7:6c:b7:12:c3:ba:60:d1:ba:ce:97:5a:
         49:94:57:16:26:4d:4a:b6:df:e7:f2:ee:96:de:f1:56:ab:cd:
         92:4e:11:80:ad:93:19:40:89:ec:57:cd:9c:07:16:9c:39:7a:
         17:82:8e:13:69:03:ca:12:61:b7:e7:a3:a9:29:63:d7:0c:c4:
         2f:bf:84:32:2c:b9:61:91:1b:85:2c:f9:1d:2f:f5:40:0a:bb:
         d4:eb:fc:b7:b2:74:23:f1:c3:7d:fa:c1:b2:f2:f4:47:bf:38:
         61:05:8f:ca:26:e1:91:10:aa:ad:6e:db:f5:c4:0a:06:eb:3b:
         94:f6:ae:66:07:da:19:ff:b5:06:e8:dd:10:e1:4e:a4:aa:5e:
         3f:8c:32:2b:a5:08:65:62:cb:a2:82:20:79:3b:0a:08:c4:16:
         37:de:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:24:05 2026 by rpki-client