Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa
File:                     daba5534-f075-3304-b7ba-2bc53bbd08cc.roa (raw, json)
Hash identifier:          gSGUpoPsE/MS3gj3uTeBCtU2wBUl5becH1k2VsTaXgo=
Subject key identifier:   F3:17:17:AF:8F:D1:35:6D:AF:24:C5:E1:39:6A:72:72:90:52:83:97
Certificate issuer:       /CN=91d07432-fb87-439b-b14e-e063470edfd2
Certificate serial:       010D0C9F4328584E4AEF479E20A462D779ABAC80
Authority key identifier: FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        72.18.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:47:9e:20:a4:62:d7:79:ab:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d07432-fb87-439b-b14e-e063470edfd2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=fa5f6d2d-335b-4835-94c8-ee11a323f228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:92:9e:d8:d6:af:08:26:c1:4c:e0:0e:0a:
                    9a:9b:08:5c:a8:9a:58:27:30:9c:a7:75:81:6a:d1:
                    5a:e2:89:fa:16:8a:de:c8:95:19:e5:75:ab:47:e8:
                    c6:6b:f3:22:09:75:0d:5e:a3:f6:7d:d7:b9:fe:41:
                    95:4e:e0:61:91:00:a0:18:13:16:d0:d1:d1:ba:b8:
                    a1:7e:b5:ad:05:75:04:b6:9f:eb:3e:b9:48:a8:12:
                    35:ec:89:f9:1b:e6:b1:8c:b4:81:2f:43:cf:32:32:
                    10:9a:8f:1a:f6:7d:9d:0a:a3:f1:0e:a8:1d:ca:fc:
                    c4:72:52:49:09:66:7b:f9:9f:4c:8e:5f:d3:92:08:
                    f9:0c:fd:21:c6:0b:9c:dc:5e:bd:0d:9a:dc:2d:52:
                    ce:22:62:60:66:95:15:32:f2:c8:8f:78:f2:c8:84:
                    c6:fe:fb:a1:13:c1:cb:de:7e:87:23:02:b4:49:f1:
                    77:21:34:45:94:dd:85:ab:68:e2:21:7e:3c:1e:75:
                    ef:37:09:6c:33:b2:bb:80:2e:f8:0f:31:44:49:74:
                    72:9d:0a:2a:a1:83:bf:af:7f:0a:75:f0:f0:45:a0:
                    d9:6a:6f:a1:05:63:61:7d:f3:25:4b:e2:18:e5:f6:
                    23:b2:e4:40:83:d2:1f:72:e5:4d:a5:9f:f2:63:d5:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:17:17:AF:8F:D1:35:6D:AF:24:C5:E1:39:6A:72:72:90:52:83:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:d7:20:06:56:c5:5c:09:e6:85:bd:68:8d:19:60:9b:5b:
         ad:f9:c0:a8:e0:9b:a1:14:27:b3:08:1a:5c:dc:f7:e1:71:4a:
         81:ce:2e:e0:28:75:98:90:48:18:41:a5:b5:1b:65:b3:c7:db:
         81:f8:e7:79:83:7a:72:92:c1:a0:1a:4e:88:77:93:fa:45:d8:
         53:e2:a3:39:53:9d:04:12:9e:69:2a:19:d2:bb:9b:97:cc:57:
         05:11:9e:25:4f:4a:7d:97:b2:8e:b9:97:93:53:0a:52:00:fb:
         87:56:6c:39:d8:a6:7e:5a:43:60:d5:c0:0e:ae:04:98:e7:c8:
         f2:f1:c5:0d:b2:11:4c:75:be:20:c4:75:67:7d:79:83:0b:4a:
         50:02:01:a9:7f:03:e3:f9:d3:f8:f4:38:7d:88:99:1b:b0:63:
         14:5c:ca:1e:9c:5e:0d:99:26:b1:ab:00:ff:f8:87:ae:43:65:
         77:c0:b4:5a:e5:d7:ce:c9:1f:34:e7:14:95:51:fa:5b:dd:9c:
         12:e2:4d:df:8e:71:52:9c:46:e0:a4:5d:ef:06:ba:12:58:bd:
         e3:9a:3e:6c:c8:29:c2:cf:3f:e5:d7:15:1e:b9:84:cf:5b:24:
         35:2b:e3:25:9f:ac:08:17:09:56:bc:0b:4d:57:74:27:06:0f:
         26:b5:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:30 2026 by rpki-client