Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
File:                     893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa (raw, json)
Hash identifier:          JiFfcQswBSNEMRhBaE2xyM6IlzUSNzCAqFNJQsOsTrk=
Subject key identifier:   50:59:F0:0E:EB:DE:05:E3:D2:65:68:79:09:64:5B:2A:D5:42:91:5B
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584D8EF990494ABE1C00B5875AA0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     834
IP address blocks:        72.9.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:90:49:4a:be:1c:00:b5:87:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b4720ed4-aa46-417e-b3da-994897a116a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:91:ff:9c:52:63:6d:cb:98:ca:d9:d1:b9:
                    68:90:e1:45:7a:8f:81:42:69:f2:6b:21:89:73:3b:
                    5c:64:84:16:dd:6a:38:e9:67:e9:24:f1:1d:34:76:
                    80:88:94:c6:06:cb:22:ad:68:4e:4d:85:ff:b9:3d:
                    9c:ad:f2:cf:91:1e:40:e0:91:f4:41:f8:79:c4:8d:
                    44:27:47:ec:24:18:e0:9d:8f:08:eb:ea:9e:b9:6a:
                    40:72:2c:5c:22:5e:e6:fc:68:d1:8f:4a:90:36:cf:
                    5b:5e:32:e8:05:4e:47:f2:80:cc:3b:bb:44:4b:53:
                    ab:45:5c:67:a9:55:fc:81:cd:2a:ec:38:1f:8c:72:
                    07:e2:23:2a:5d:8e:38:e4:ef:63:73:a0:20:7e:85:
                    b1:db:32:cf:ef:8e:8a:a2:61:20:40:d2:8f:49:44:
                    9c:81:0e:52:7a:ad:08:b2:77:b7:2f:79:0b:f2:86:
                    63:77:b2:c9:11:35:3b:e9:e2:50:08:8c:8b:76:0e:
                    f6:f7:8e:db:e1:ea:d3:d9:30:e0:ef:78:8c:e1:69:
                    8d:67:9a:b5:ba:63:29:e0:4e:f8:1e:b0:9a:3a:60:
                    ed:bc:21:a0:df:30:26:61:ab:45:71:55:7e:cd:fa:
                    31:87:31:99:08:11:f1:1e:17:56:04:e5:45:43:bf:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:F0:0E:EB:DE:05:E3:D2:65:68:79:09:64:5B:2A:D5:42:91:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:f5:d5:19:20:ea:12:c5:05:39:fb:ff:17:cb:6c:77:99:
         31:49:af:95:b0:54:3c:d4:be:27:cd:27:57:b8:26:4e:dd:54:
         43:dc:87:95:79:0a:15:9e:f5:9f:50:62:a3:b5:fa:ed:3d:82:
         e2:86:5e:fc:53:42:42:28:d9:a6:30:bc:67:1f:43:6e:55:70:
         e3:5a:d8:f3:63:bb:84:0d:ee:67:14:7f:a3:30:1d:82:a3:85:
         d5:de:1f:5e:94:b1:e3:15:81:5d:19:b2:c7:ad:d6:16:2b:f9:
         01:54:b6:4c:bf:00:40:1e:24:b3:4b:51:5e:38:5f:68:46:76:
         84:b7:db:7f:2c:10:c6:29:2e:46:25:4c:9f:c5:78:aa:e7:cf:
         5c:b8:3f:64:0b:7e:e8:86:7b:dd:95:5c:91:3f:10:d0:56:87:
         e2:56:d2:d3:a2:3c:08:85:67:e3:d4:a5:80:ff:51:41:7b:d0:
         b5:e1:5d:c9:18:40:07:69:03:d7:b3:2b:98:94:cc:88:1f:c5:
         09:fe:0d:c1:ff:14:48:9a:e2:a6:e9:bf:fd:fb:55:6b:23:8f:
         f2:d8:cb:5c:34:5d:ff:ac:bf:1c:c0:f9:4c:80:f4:ca:7e:02:
         62:0c:93:83:d8:f2:08:ff:bd:04:30:a7:93:88:31:d9:0d:43:
         9e:51:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:26 2026 by rpki-client