Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa
File:                     ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa (raw, json)
Hash identifier:          lYu0PD1oNYU2NPlXeYljnhuwUBuBP/ak1tGTDkFttaM=
Subject key identifier:   8F:47:7D:65:D8:4C:57:E6:93:55:68:59:E0:23:03:B1:A4:8C:0F:BF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DB1DACE7DE36B14B990237BC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     397630
IP address blocks:        72.14.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:ce:7d:e3:6b:14:b9:90:23:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=d263d65a-53e9-4f86-894f-6ab8d1cc381f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:c6:66:de:ca:4f:53:57:c2:ec:94:0f:76:
                    f5:96:62:49:08:d7:e0:0f:32:5f:32:99:0a:82:5e:
                    ae:02:63:19:16:73:fa:56:0b:59:1e:ab:ba:aa:7c:
                    d7:21:88:32:17:86:86:e2:1e:57:7a:8f:ba:63:c4:
                    a6:fe:85:f4:3a:9e:5f:41:75:9b:26:c6:33:37:53:
                    34:b4:cd:4c:4e:ab:de:f9:1e:5b:b3:ca:06:12:da:
                    3f:67:c4:8b:4a:2f:1f:3e:d6:4c:59:01:67:64:18:
                    fa:b6:9a:09:e4:1f:0a:01:62:f1:0e:d4:64:e9:0c:
                    75:ac:b3:8e:a2:8b:9d:a7:26:40:39:34:9e:5b:e5:
                    a4:6c:43:a3:40:e9:0a:44:06:94:10:93:50:16:69:
                    c2:97:6c:14:27:55:76:29:e7:cc:05:06:a6:56:17:
                    82:a6:00:81:5c:5c:eb:03:95:cc:ab:8b:d8:c9:92:
                    e1:81:5f:a8:5e:f0:16:aa:97:2f:34:a8:aa:78:69:
                    44:da:1d:4c:e7:f5:24:2e:34:1b:f6:7b:79:28:fa:
                    3f:bf:37:97:7f:7b:9c:21:b8:fb:a8:3c:4f:5b:d4:
                    f1:71:4e:fe:c3:a9:0d:36:8b:0d:fe:d0:77:3b:74:
                    c4:a7:47:98:89:74:ac:c0:03:f2:fe:c3:e9:1d:16:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:47:7D:65:D8:4C:57:E6:93:55:68:59:E0:23:03:B1:A4:8C:0F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:20:24:c0:ed:22:96:ad:c6:c5:28:ff:88:1d:9a:41:33:
         e2:62:63:29:b6:13:29:49:44:19:2b:45:ec:30:f1:af:69:17:
         9b:6d:fa:f1:4e:18:87:95:0f:22:ef:3a:3c:b3:cf:79:44:5f:
         65:22:80:5d:f3:47:d9:e9:ea:a8:dc:e8:5c:0a:d9:b3:f6:81:
         99:f6:dd:60:8d:38:b1:da:e2:b4:41:b7:13:a8:26:04:09:f8:
         15:d8:bb:24:16:bc:18:2d:dc:0d:10:a0:e7:a0:40:76:e1:46:
         70:22:80:c8:53:7d:6b:02:e2:d3:2f:2b:d1:cc:9f:f5:a3:80:
         48:69:8b:5a:95:47:52:d0:80:db:e4:0a:38:aa:1e:c6:90:7d:
         ed:05:96:59:d8:d9:79:e4:7f:9b:47:0b:a0:2e:88:be:0c:18:
         b0:b1:3c:67:f8:89:93:15:04:88:4c:0d:e7:02:73:74:50:5a:
         a0:b4:a5:a0:95:ce:c6:65:27:47:8c:3d:3f:43:59:24:b5:f5:
         c7:6f:74:75:23:ed:c8:ec:43:6d:30:72:4b:b3:a9:b2:51:85:
         fb:c3:67:35:37:6c:76:cf:24:39:1f:9c:d6:9f:1b:fe:cb:23:
         1c:7b:6c:9a:4b:14:24:ab:69:c4:c1:26:4f:a7:3e:70:d4:0c:
         a2:14:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:16 2026 by rpki-client