Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa
File:                     1c02e37a-f047-32b4-8323-635ce419cb78.roa (raw, json)
Hash identifier:          wivEL5DMpKDCex6K1Yi3iLW/m0rHm6S75+tp6Mbj07U=
Subject key identifier:   4A:34:BC:A8:CE:00:8E:B7:79:7D:A0:52:E6:21:21:5E:24:03:4A:B5
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584CA5F7513BAE54EA7BA0B1C500
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     400072
IP address blocks:        72.22.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:51:3b:ae:54:ea:7b:a0:b1:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=40aeda9d-cd87-4b9d-945f-e697577780e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:1d:1b:94:25:da:76:c8:51:16:2e:67:69:
                    45:5b:1c:f2:0a:d6:8e:cb:46:87:38:53:59:a2:c0:
                    fd:a5:cc:e8:9b:7a:39:34:7c:0a:35:98:ac:8f:77:
                    ae:42:db:f7:1e:73:f6:42:39:44:cc:70:92:21:a3:
                    05:b2:2a:89:a8:5e:65:a4:f7:33:5c:bb:a9:75:cb:
                    c1:fd:32:a1:2b:e2:a0:92:61:2a:8f:90:23:76:01:
                    5a:e8:3e:75:57:ee:b0:4f:69:f7:d3:57:1b:3c:b9:
                    8c:1f:78:57:ca:e6:8c:d1:07:5e:5c:bb:c9:d0:b7:
                    c8:c6:73:fe:0e:cc:e0:df:5d:88:fb:a7:82:6b:5d:
                    01:bb:7c:ae:df:6a:d0:38:da:99:29:7c:15:0f:03:
                    f8:af:79:83:0f:49:b2:05:84:a7:41:ff:e8:fa:8c:
                    9f:e0:1d:b1:4a:30:20:41:4d:04:3e:49:1e:9d:1c:
                    18:76:37:d7:54:f8:9f:c7:db:0b:35:a1:1c:4d:20:
                    75:70:3e:a6:91:f7:f5:93:d2:16:69:26:e1:f4:62:
                    38:2e:16:16:31:5a:c1:91:2b:e8:ca:22:a0:60:30:
                    6a:de:f3:3b:f0:e0:9d:02:7c:bb:67:d8:42:0a:7d:
                    fa:01:2a:19:cd:97:d4:cc:c1:58:c8:c7:83:80:f7:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:34:BC:A8:CE:00:8E:B7:79:7D:A0:52:E6:21:21:5E:24:03:4A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:85:d2:8a:8b:d7:e1:b7:7d:4f:33:85:7d:20:9c:fc:52:
         46:ff:46:b6:32:76:97:cb:89:43:f0:40:35:1e:f6:c0:34:37:
         c1:8d:9a:8b:88:7b:da:ab:c1:29:7c:fb:0b:bd:1e:da:ca:57:
         c0:37:e6:a4:84:99:bb:53:50:f6:3f:ab:4e:5c:0a:40:8d:1e:
         47:06:d0:15:b6:32:07:15:3d:4c:48:c3:9e:dd:50:57:73:32:
         ba:de:18:bd:aa:b4:68:ef:68:35:7a:67:4e:85:97:04:de:71:
         89:75:cf:48:d0:95:91:27:67:06:27:b2:b2:cd:84:4b:46:f2:
         c2:f6:2b:dd:df:e3:6b:da:77:78:a4:7d:0c:90:21:99:b6:63:
         12:39:b4:ed:79:41:85:44:de:18:b5:12:ba:17:cd:22:62:25:
         04:44:b7:3a:8b:c8:2c:3e:8b:c1:2a:55:84:47:9c:a1:71:6f:
         9a:35:ec:62:78:10:e9:cf:ba:80:6a:ae:7d:a8:d7:f0:72:eb:
         95:41:45:1b:94:21:d1:3e:bd:7f:77:1c:3c:ea:f8:a7:49:8d:
         10:d1:ad:5b:6a:02:5a:df:57:38:f1:f7:ed:e0:e0:5d:77:5d:
         85:98:63:6f:19:d5:af:6d:0a:6c:bb:30:ca:06:e9:bb:c1:45:
         d5:9a:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 20:56:01 2026 by rpki-client