Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/146015f5-c075-3183-875e-fe29f2e56fee.roa
File:                     146015f5-c075-3183-875e-fe29f2e56fee.roa (raw, json)
Hash identifier:          cA0mbYriD9aRU1sDwW5Ziu2dC2VYRaQn9XvMAYam8pU=
Subject key identifier:   0A:F1:67:5B:8E:3E:85:1D:B6:C4:27:6A:BF:75:15:7F:64:9A:6F:88
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4972A6FE7E81EAB11D7401E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/146015f5-c075-3183-875e-fe29f2e56fee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401783
IP address blocks:        72.13.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:a6:fe:7e:81:ea:b1:1d:74:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dbd71a31-f38f-415e-88d4-b3dc2dceca14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:3c:a7:4a:48:67:43:6e:2c:44:90:91:92:
                    36:c9:fc:77:79:fd:db:06:74:b9:40:fc:08:6a:4a:
                    be:e5:0e:1b:e9:38:eb:9c:cd:0e:06:fc:d3:a8:8d:
                    a0:fd:d3:09:67:6d:77:da:ca:3a:22:07:11:39:f3:
                    3a:72:fa:67:c9:96:73:ff:dd:7f:4c:88:79:1d:13:
                    d6:8e:15:3b:ad:c8:e0:ae:e5:17:96:39:6f:23:f9:
                    91:b4:f4:a1:bc:0a:23:e0:39:bd:48:1e:80:0b:34:
                    1c:39:47:23:da:ff:75:df:43:6e:d4:05:0c:87:9a:
                    6a:3b:09:70:7f:8e:08:f6:b9:c9:1f:13:e7:90:5b:
                    67:36:4e:f6:32:a0:ed:e3:e6:cd:a7:ed:55:ba:54:
                    04:ba:45:8b:e1:67:fe:64:8f:6d:84:3e:cf:bc:c0:
                    2f:c4:41:b4:98:09:dd:49:4f:3f:fd:14:1f:9b:0b:
                    5d:b1:08:84:a7:43:7f:de:37:c7:2d:d0:14:43:9c:
                    bc:e2:c8:e0:75:ca:39:b0:48:d2:be:87:f4:9c:a7:
                    9f:e5:27:26:93:2c:3a:16:71:ce:16:a2:47:86:08:
                    86:8d:c9:7a:48:41:dc:c2:7c:43:d6:9f:2e:b5:c4:
                    f5:3a:40:bc:33:9b:0a:75:96:ec:a6:5f:3c:0a:b1:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:67:5B:8E:3E:85:1D:B6:C4:27:6A:BF:75:15:7F:64:9A:6F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/146015f5-c075-3183-875e-fe29f2e56fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:fa:a3:40:13:25:0d:9c:fa:b7:c7:35:b6:46:6e:86:b7:
         20:04:13:7f:6d:e6:2a:ab:5d:a1:17:8d:ac:d9:fd:f6:ad:8e:
         b1:8e:2c:f7:db:e1:e8:e6:df:0b:50:36:ae:d3:77:6d:3f:36:
         25:f4:73:a5:31:48:68:e1:a7:80:0f:f4:d6:c6:f6:29:a6:e2:
         11:31:63:53:fe:e7:43:52:5d:eb:cf:72:be:58:cc:39:75:bd:
         09:e7:37:bf:fb:03:18:cb:24:b5:98:e6:17:2e:58:f0:8a:93:
         67:b0:58:e9:df:87:2a:0d:81:65:bb:9c:db:02:50:32:99:86:
         3a:f6:d6:58:ca:67:f3:c4:a8:b2:3f:31:58:29:37:59:5b:dd:
         ef:50:a5:d8:1c:7f:2f:37:bf:f5:46:7d:5b:8f:58:1d:57:99:
         d5:26:13:2a:12:3a:45:e3:16:eb:f9:71:3e:dd:2a:86:a0:34:
         23:f7:cf:53:9c:47:fb:2b:97:7a:f5:99:05:e3:6f:f9:58:4e:
         a2:18:38:94:a5:06:c6:ff:36:a0:f8:d4:50:e4:7a:26:4c:7f:
         fd:43:af:1a:8c:43:ba:a1:08:d1:dc:0d:7f:fe:5a:52:f2:e3:
         b7:a1:54:96:97:0e:72:11:eb:d8:6d:93:b1:be:34:6e:ed:f2:
         eb:d4:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:47:41 2026 by rpki-client