Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a69fc52-6052-317f-bc37-f52cf15074cb.roa
File:                     5a69fc52-6052-317f-bc37-f52cf15074cb.roa (raw, json)
Hash identifier:          l0diuEE6UGsV6Z+R/pR3fXbgbUaSX0HnjqnU2NaVJRY=
Subject key identifier:   32:96:77:60:87:71:6C:4D:4E:D0:C0:64:09:6C:3A:22:5A:92:55:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F1E2CEC255A058251BA3D2C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a69fc52-6052-317f-bc37-f52cf15074cb.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        72.244.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:ec:25:5a:05:82:51:ba:3d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=e906d048-ae5c-4926-a12d-1e46649dc403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:17:99:fd:ce:9d:18:d8:ee:1b:0d:59:0a:
                    3f:e1:cb:60:6e:98:d3:54:ac:9f:89:8b:64:50:65:
                    db:60:8f:e9:b0:1e:8b:13:81:e6:6a:86:38:57:3e:
                    ee:9e:75:e2:a4:27:1b:2b:af:d9:5a:ff:89:f1:c2:
                    50:f7:20:c2:85:c3:12:fa:64:72:b1:70:7c:72:3d:
                    fa:49:04:48:8c:23:e2:f1:5e:8e:3c:6a:ef:f4:8a:
                    7b:ed:ef:67:ee:9d:9e:95:45:9d:32:13:a8:7d:23:
                    1a:d5:fc:76:2e:4c:09:0b:8f:09:2f:b9:8a:9f:65:
                    52:a9:25:65:bf:1e:f7:32:c8:f5:09:ac:2b:e6:c3:
                    07:75:6b:7e:b3:e8:05:3f:c0:69:9b:84:40:9b:6f:
                    7a:77:be:60:10:db:b8:61:09:15:02:b0:56:58:d2:
                    fb:e9:f5:82:2d:c0:2f:57:15:08:8e:62:d8:7e:ed:
                    63:cb:8d:5a:60:1d:40:68:08:af:70:77:c8:7e:ec:
                    a5:2c:34:fe:36:11:09:f7:10:fd:18:e0:c0:4f:94:
                    f9:f1:76:da:37:a7:ad:c1:63:74:dd:72:0b:3d:e3:
                    55:7e:f9:29:2c:01:a9:77:98:e9:97:4c:05:a4:e7:
                    e6:f0:5a:92:03:61:29:5f:89:eb:ae:d4:c9:29:e5:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:96:77:60:87:71:6C:4D:4E:D0:C0:64:09:6C:3A:22:5A:92:55:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a69fc52-6052-317f-bc37-f52cf15074cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ea:da:0f:f5:ea:a4:97:49:d8:ed:1d:21:58:38:49:cb:d3:
         4f:53:8c:9c:8f:5b:ea:13:08:43:c3:9a:ef:32:61:a4:5f:63:
         ad:0d:40:36:39:6d:35:09:40:36:f5:35:2c:ac:d9:5b:ea:04:
         37:44:43:2f:59:a6:cf:21:ba:cb:c9:09:06:0d:a4:6d:24:69:
         fb:4a:42:4d:8f:f5:06:41:cd:f6:12:e4:89:63:87:7c:58:13:
         5c:0f:61:5c:29:37:10:3c:70:ad:da:30:d0:ba:18:b0:37:73:
         3b:15:ed:72:42:12:84:11:44:f6:9d:e6:5a:53:c4:96:b4:5b:
         d5:1a:16:de:ab:bb:9a:62:a6:cb:da:b8:8f:cd:01:e5:5d:ed:
         c6:41:65:9a:fb:f0:54:b2:45:c1:92:b1:a4:91:54:82:4b:fd:
         48:0f:a6:be:fd:ab:f4:d9:dc:cc:d1:77:46:b2:7b:34:59:bd:
         a6:f0:c8:7b:ce:43:3f:dd:b3:e4:d1:74:f0:b4:a1:2d:0e:0d:
         fa:ec:1f:28:6a:7b:82:d2:5c:99:8f:91:37:25:4f:0b:b6:98:
         24:21:97:42:3a:f9:93:47:07:c4:44:c7:53:98:60:81:88:b7:
         81:1a:22:5c:b2:74:58:01:c6:42:4d:8d:a7:df:b0:f7:0a:0f:
         c1:76:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:03:01 2026 by rpki-client