Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
File:                     10f9106f-38d7-334c-be0c-2e81c68cb772.roa (raw, json)
Hash identifier:          JNRPGNsfcyFSZy83ouxucFPSdW4j3J4im06AwCf09mQ=
Subject key identifier:   4F:BD:EE:54:D2:DB:97:8A:7B:B1:3F:73:B4:92:5F:53:99:F4:11:10
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E577F536584D4FBF798A49000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     3257
IP address blocks:        72.245.192.0/21 maxlen: 24
                          72.245.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:53:65:84:d4:fb:f7:98:a4:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=db4c01e4-52da-43f9-ab72-5a8cc78ed76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:4e:4c:69:f6:87:6b:6e:9f:23:ec:af:4f:
                    86:da:c5:02:b3:5a:be:4c:ce:71:cb:22:09:1f:33:
                    72:f4:ba:60:44:91:8d:5d:f9:a4:8c:37:82:cb:6f:
                    b3:ec:ee:eb:80:16:c5:45:dc:02:c8:bf:8b:93:4c:
                    47:74:8b:7b:fe:44:1c:20:6e:b4:5e:63:2f:0e:87:
                    79:1f:07:45:a7:81:7e:c9:4b:12:fe:db:2f:10:64:
                    26:01:cc:47:3b:00:60:31:62:de:e3:dd:f5:36:02:
                    79:0e:f9:17:9b:59:5b:52:88:f2:a5:bb:fc:57:88:
                    28:15:03:4a:39:a1:a0:7f:51:b9:cb:6d:50:69:78:
                    c0:3d:64:78:38:75:94:c5:da:c0:ad:c3:5e:0c:15:
                    03:b3:ad:1b:33:91:38:7c:7a:c1:7c:dd:c0:5c:e0:
                    76:64:4b:b8:97:6b:5d:62:6f:d8:78:56:54:88:6a:
                    73:27:30:94:6b:bb:e5:4a:57:77:73:21:46:40:76:
                    ad:8d:ed:32:25:b7:ec:c9:07:2a:0f:ea:6c:b1:21:
                    73:99:68:f8:dc:cc:4e:b9:55:6c:b4:4f:51:32:08:
                    b8:94:b6:be:a3:83:f5:87:7e:70:35:6b:98:1f:10:
                    08:8e:4d:7e:c4:7c:21:db:c0:2a:70:8c:54:67:e0:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BD:EE:54:D2:DB:97:8A:7B:B1:3F:73:B4:92:5F:53:99:F4:11:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.245.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:54:6e:97:d8:ea:9f:8d:c2:82:ef:33:72:71:6d:f0:50:db:
         24:f9:46:7e:58:60:4c:9b:77:7e:b5:81:25:85:4e:57:ec:35:
         c4:bd:25:2b:c2:9a:f6:7b:c6:05:1b:a8:1e:d0:25:7f:46:80:
         cc:c0:9b:7c:be:4e:44:a8:db:a3:07:19:f0:ab:e6:f5:ec:af:
         95:56:c6:7b:33:5e:b1:cc:74:1c:d2:96:5d:97:c8:98:71:86:
         f8:3c:6d:b9:b2:dd:38:46:02:08:14:bf:45:e1:38:85:5e:29:
         e9:a5:cc:b2:04:c2:2e:ac:c8:37:c9:82:cf:6b:66:73:eb:35:
         0c:a1:e0:15:bf:aa:44:da:7e:12:f4:01:44:59:52:c2:44:58:
         60:ff:0a:8b:c1:c9:2d:21:e8:9b:e9:4b:96:58:e8:79:ea:99:
         1f:a9:b0:8a:e1:7d:71:77:e2:18:cb:07:6a:1f:c6:a7:b8:6e:
         d2:36:b7:1b:09:36:23:6b:ff:03:50:2d:a8:6b:00:dc:53:dd:
         38:7f:79:1a:4e:04:4f:c8:cb:12:2d:3d:c1:15:68:5b:33:03:
         6e:1e:9b:98:ed:86:cb:14:11:13:cc:16:aa:f3:fb:ab:4f:ff:
         01:63:15:26:e0:5f:6a:4d:bb:b0:1e:cc:b8:2b:c5:14:3e:26:
         3e:7d:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:00 2026 by rpki-client