Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1203184d-ac07-39fd-921f-09ae3466ceac.roa
File:                     1203184d-ac07-39fd-921f-09ae3466ceac.roa (raw, json)
Hash identifier:          NuoLG6NqTHe98Kx2ezhVd0+NiCKBLfa/Vyxnai0tP6I=
Subject key identifier:   F4:35:66:02:6C:C6:EB:C9:5E:0E:43:65:BE:83:B8:19:1C:97:4F:3B
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584E66DA40914C4EECB7F60B9EE0
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1203184d-ac07-39fd-921f-09ae3466ceac.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     38854
IP address blocks:        72.37.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:40:91:4c:4e:ec:b7:f6:0b:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=eff8a3ba-990a-4f92-8b5e-489c6c923093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0d:19:59:66:44:a4:fb:6a:55:e3:82:ef:63:
                    6a:68:35:7a:77:f6:b7:21:7a:f6:6d:df:33:ed:43:
                    e4:2f:07:c1:5c:d0:ac:82:47:9b:f5:79:cc:c2:17:
                    0f:71:95:2a:c5:83:63:29:25:cd:8d:dc:16:65:46:
                    c6:64:97:5b:8e:c4:50:54:39:f2:72:2a:d5:eb:10:
                    c9:2a:73:ec:3a:32:25:5c:20:22:8b:01:b2:fb:49:
                    df:cf:06:49:8f:ab:76:b0:fb:c0:a2:e7:86:41:b9:
                    f5:0c:c4:3c:81:06:de:df:f8:1a:01:72:79:4d:4c:
                    0c:68:20:31:1a:ae:f9:c0:5b:2a:56:de:f0:43:0a:
                    cb:3a:91:ff:79:45:0f:0c:44:c3:63:25:c8:85:18:
                    76:74:fc:76:51:d0:f9:18:45:63:6f:2b:d9:af:be:
                    17:8f:2c:01:d3:e7:cb:4e:2f:bf:35:7c:26:3d:f3:
                    be:71:70:1c:f2:b8:ef:20:b4:f7:35:31:70:01:11:
                    29:46:1a:e5:77:d7:c3:85:6b:de:a5:85:53:01:62:
                    e7:98:75:02:80:07:d1:21:85:8f:b9:96:4e:fa:b1:
                    f2:79:2b:d5:b5:35:f8:b0:5c:8a:42:af:63:b3:9a:
                    9c:6d:69:f6:e3:37:93:18:2f:53:cd:96:13:82:14:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:66:02:6C:C6:EB:C9:5E:0E:43:65:BE:83:B8:19:1C:97:4F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1203184d-ac07-39fd-921f-09ae3466ceac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:42:4e:f6:2e:f6:44:e9:f4:d1:b3:bc:44:5f:d6:de:ac:54:
         06:9a:bb:ee:1d:4d:bb:f7:68:23:39:ac:a5:f0:7e:a9:21:8c:
         e0:8f:45:cc:e6:7f:43:3b:ea:a1:63:03:27:49:6a:e7:3d:81:
         a6:b6:10:4f:99:ea:81:48:ac:8a:44:60:c8:4a:59:ad:ed:00:
         2a:34:eb:6e:21:a0:5a:6e:21:93:0c:0e:be:c5:9a:53:4e:6f:
         93:83:41:80:7c:39:68:1a:55:0f:7b:57:b4:75:0c:c1:e0:a3:
         2d:af:bc:d3:8e:df:80:83:9a:86:e6:03:91:52:d4:20:b4:97:
         f4:d2:79:b6:71:cd:a9:da:e5:fa:b2:54:cb:f5:3e:26:42:e1:
         25:79:b4:48:87:62:a0:4e:aa:47:f0:b4:88:25:b4:e5:d0:8d:
         74:75:e6:ad:2a:8b:cd:67:c3:d5:db:81:39:3b:92:bf:e4:cf:
         66:ea:37:e4:db:8d:2a:b9:46:6f:4a:15:fe:e8:92:8b:93:6e:
         ff:4e:a9:d0:d7:0b:e8:b2:16:cb:bd:71:cd:35:2c:1f:c5:43:
         2e:f4:e1:23:1d:ba:25:c2:e4:f8:8b:07:dd:05:2c:b9:da:30:
         9a:65:52:5f:73:eb:d7:4f:55:24:4c:a5:cb:f7:6c:26:5a:18:
         2e:d3:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:13 2026 by rpki-client