Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/417128b0-55a7-3d1c-b2fe-ee7bbdc086a6.roa
File:                     417128b0-55a7-3d1c-b2fe-ee7bbdc086a6.roa (raw, json)
Hash identifier:          yTMwSfE1+rVDjoFy/D0rp3ImcmTUhMeQrbIn9+J4R+o=
Subject key identifier:   1E:52:FD:41:12:2B:6C:A1:94:01:CD:2F:0C:FF:7B:1E:83:D9:98:38
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F06722225AFCADC59E2CB0540
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/417128b0-55a7-3d1c-b2fe-ee7bbdc086a6.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     33182
IP address blocks:        72.244.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:22:25:af:ca:dc:59:e2:cb:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e42793c5-c557-4099-a411-aa40f91031ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:00:e7:71:25:9f:91:ee:51:3e:f9:ce:26:
                    6e:93:52:1d:1d:fb:13:c6:4d:8f:8d:b1:18:52:52:
                    b4:b1:16:a8:92:8e:f0:85:e3:43:95:d0:fe:86:36:
                    bf:5f:5c:ff:4b:86:b1:10:35:0b:7c:88:81:68:66:
                    25:49:38:7e:27:97:ae:68:6a:35:6e:0b:f8:1c:c5:
                    41:98:12:c4:2c:9f:89:6a:49:67:18:88:cc:a3:d6:
                    b5:3d:62:7a:15:42:95:9f:30:c2:4c:2e:99:31:87:
                    e1:ca:ab:37:38:a5:ab:6a:95:77:5f:1d:cf:f2:f8:
                    79:e3:6a:5f:20:22:25:6c:10:f5:e3:0e:98:bb:8d:
                    70:fd:fe:6c:d4:51:32:5e:35:6b:0b:57:88:76:c2:
                    3a:ce:3e:47:4b:f3:50:10:ed:26:66:b4:f2:00:f9:
                    20:5f:1f:6a:81:ef:7d:27:ff:69:12:ca:0f:7f:ba:
                    f3:77:98:fb:53:d3:2d:cf:c7:5b:5e:89:c8:ac:2c:
                    59:88:6c:d0:3b:38:51:38:3f:e3:71:ba:b1:7d:a5:
                    ab:13:52:bf:23:5e:df:8d:53:8f:6d:56:9b:b9:d7:
                    ab:f3:57:6f:da:f2:a4:9b:1d:2e:40:49:ba:ee:44:
                    6d:3c:d7:5b:e1:c0:47:e3:bb:15:c6:0f:2d:4d:cf:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:FD:41:12:2B:6C:A1:94:01:CD:2F:0C:FF:7B:1E:83:D9:98:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/417128b0-55a7-3d1c-b2fe-ee7bbdc086a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:1a:ed:ef:13:88:66:b1:3f:8f:0e:48:e4:7a:3a:d1:f5:
         02:45:84:84:f8:39:e0:4e:96:93:40:47:c3:d1:05:36:89:e1:
         99:c5:8a:22:64:de:7f:e5:e2:56:38:ce:9a:73:c8:3b:55:df:
         94:1d:7e:7c:03:fa:f3:3e:69:e9:c2:4f:bf:6e:b8:7f:b0:87:
         4d:d7:31:f7:2a:3c:e4:19:81:89:84:3e:d1:3f:a6:bb:47:bb:
         83:c8:58:08:fe:d6:8c:5c:cd:1c:20:86:9d:13:4e:8a:12:5a:
         95:42:3c:98:3d:6d:61:07:56:e0:6f:ed:3b:c5:e3:4d:18:9c:
         b4:2c:12:14:4f:1d:b1:10:e2:6b:c5:9d:22:bb:f2:dd:7b:8f:
         90:76:6a:54:05:e8:95:ae:7f:1b:84:32:7a:d3:ab:e4:75:81:
         b8:d7:55:85:11:04:43:c2:88:d7:22:51:74:ff:4c:e5:45:80:
         e1:da:45:04:0a:a5:07:4f:54:9c:a9:e5:7e:e0:f2:d0:70:b0:
         48:12:a4:79:c0:05:65:52:05:a6:20:a1:0d:97:7a:6e:c7:85:
         79:f6:93:20:29:09:ca:09:a1:22:39:bb:b9:f8:19:63:ac:b7:
         a7:4d:68:ee:7d:b1:d7:d7:ea:b7:7c:f1:c4:2c:1d:f5:26:fc:
         90:61:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:51:42 2026 by rpki-client