Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/72b46b51-844a-3dea-9901-38bae2fa2877.roa
File:                     72b46b51-844a-3dea-9901-38bae2fa2877.roa (raw, json)
Hash identifier:          pZfBixY9s8NKkecNDi9mFX2PGkvZoOJqhzwD2Q0kmec=
Subject key identifier:   FC:54:A7:B6:FC:3C:4F:FB:EE:CF:BA:D4:73:71:32:4B:37:40:55:8B
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584DB4A57916DE1E280D7E3ABE59
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/72b46b51-844a-3dea-9901-38bae2fa2877.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     47050
IP address blocks:        173.224.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:79:16:de:1e:28:0d:7e:3a:be:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=a9fc0804-e489-4510-98a4-2b02c3997130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:38:b6:5a:e9:c0:92:5a:c8:f1:d2:c2:68:
                    70:1c:34:2c:57:aa:46:62:d7:9f:4b:29:63:f1:c5:
                    e5:37:b1:3e:77:3d:4e:d3:0a:34:6b:d9:47:00:7d:
                    ce:27:15:1e:aa:cc:3b:74:2c:8a:0d:f5:0e:af:13:
                    c1:1a:83:09:97:77:6d:a8:7e:72:9e:78:98:88:ce:
                    3b:1d:17:a9:18:27:4e:d2:61:5b:fc:35:d8:a8:7b:
                    35:7b:ec:eb:2b:b6:5c:dd:3b:4f:64:01:e0:3a:bf:
                    52:68:8b:ed:8a:05:e0:cb:8b:d5:86:4d:75:7c:3b:
                    64:28:9b:8e:5d:de:79:88:fe:96:3f:f3:7c:9f:dc:
                    2e:2a:7d:91:f5:f7:a4:84:be:4c:2a:0c:36:43:e0:
                    58:ca:f5:eb:68:10:6b:a0:a7:76:3e:36:f6:60:bc:
                    29:fc:23:de:8b:80:f7:b0:52:a9:36:f2:73:6b:b5:
                    25:3e:de:c4:4c:be:92:24:d1:71:7d:4d:ac:54:aa:
                    f3:9c:e6:e5:29:bf:23:1a:ed:ec:5e:5e:15:14:86:
                    51:0c:8f:40:ad:3d:31:f5:c5:68:86:23:30:ef:bf:
                    b6:48:4f:78:6b:32:27:a3:60:c5:55:a9:25:c1:11:
                    26:fd:66:5c:01:34:fd:26:18:ba:9f:1e:64:25:58:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:54:A7:B6:FC:3C:4F:FB:EE:CF:BA:D4:73:71:32:4B:37:40:55:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/72b46b51-844a-3dea-9901-38bae2fa2877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:15:9c:41:7c:72:96:f4:e8:46:e2:16:2a:8e:df:46:57:7b:
         60:ac:10:18:61:35:71:be:97:79:ff:b4:7e:29:11:32:d7:2b:
         10:a6:61:25:21:37:63:6d:72:99:77:87:35:cf:46:15:c6:6f:
         a4:8a:9b:52:62:9b:8d:a7:51:fd:34:a0:c8:18:a1:f4:86:47:
         c6:30:fd:a9:31:a8:8c:b3:f1:e5:5c:52:69:0e:12:62:ed:b4:
         07:6a:d2:fb:5f:06:f4:ea:52:cd:85:f0:05:64:15:21:59:2a:
         b0:4f:94:3e:ac:84:eb:d7:33:eb:3b:da:4f:65:c2:ca:30:0e:
         8b:4f:8f:79:46:15:b4:a4:83:81:83:a0:ec:ec:72:a6:82:02:
         98:71:12:c4:d6:6f:1e:05:3e:9f:28:ec:da:25:ed:35:7d:09:
         ca:40:bc:94:bc:3a:b4:c8:b4:a5:6f:3a:82:cd:37:8c:a5:45:
         c0:37:c9:67:92:28:23:ef:87:1f:f7:45:9c:f2:60:55:00:df:
         80:fd:e1:31:a0:59:5f:bc:5b:42:aa:1c:9a:af:40:2f:7e:5f:
         c8:43:40:b7:9f:29:31:2a:1d:01:0e:ba:1a:1e:56:8f:ab:d6:
         2e:3d:33:ee:71:8b:c5:c9:bf:62:61:ff:38:0c:0b:24:57:20:
         9c:81:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:42 2026 by rpki-client