Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/71aace57-bcca-3d73-80e4-7425e102ec43.roa
File:                     71aace57-bcca-3d73-80e4-7425e102ec43.roa (raw, json)
Hash identifier:          gJMx1HKUMQTStTIuiRw5ovOmfjmBoqIxni1EAakdO2E=
Subject key identifier:   DD:22:47:E6:FA:FE:C9:14:2A:A6:9E:FD:EE:D2:59:7C:44:EB:AD:C8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F506D3F0190C6557E91FFC700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/71aace57-bcca-3d73-80e4-7425e102ec43.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     3257
IP address blocks:        72.244.5.0/24 maxlen: 24
                          72.244.7.0/24 maxlen: 24
                          72.244.8.0/23 maxlen: 24
                          72.244.11.0/24 maxlen: 24
                          72.244.16.0/22 maxlen: 24
                          72.244.28.0/22 maxlen: 24
                          72.244.36.0/24 maxlen: 24
                          72.244.38.0/24 maxlen: 24
                          72.244.40.0/22 maxlen: 24
                          72.244.45.0/24 maxlen: 24
                          72.244.82.0/23 maxlen: 24
                          72.244.86.0/23 maxlen: 24
                          72.244.90.0/24 maxlen: 24
                          72.244.119.0/24 maxlen: 24
                          72.244.128.0/23 maxlen: 24
                          72.244.136.0/23 maxlen: 24
                          72.244.139.0/24 maxlen: 24
                          72.244.147.0/24 maxlen: 24
                          72.244.160.0/21 maxlen: 24
                          72.244.192.0/21 maxlen: 24
                          72.244.206.0/23 maxlen: 24
                          72.244.208.0/22 maxlen: 24
                          72.244.213.0/24 maxlen: 24
                          72.244.214.0/23 maxlen: 24
                          72.244.216.0/21 maxlen: 24
                          72.244.224.0/22 maxlen: 24
                          72.244.237.0/24 maxlen: 24
                          72.244.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:3f:01:90:c6:55:7e:91:ff:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=2e59cc09-39b9-4ab0-b731-e427c6138ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:a5:cc:a9:2c:d9:5f:6c:e0:fa:fd:61:ec:
                    40:54:0a:97:3d:6b:2a:e8:b6:8d:63:0d:9b:92:4f:
                    32:47:fe:4f:f5:37:ca:46:52:4d:ce:07:0f:1f:bf:
                    fe:7f:d2:77:b9:ec:a4:78:52:51:59:d9:ef:b1:ab:
                    2e:8d:70:72:88:b1:2b:ad:9a:3c:9f:fd:8c:a0:84:
                    a5:e5:8d:c6:7c:14:89:0a:04:da:27:0a:be:2b:22:
                    93:ba:e0:11:9e:4c:e0:23:03:6c:2a:19:0d:28:ab:
                    dc:b3:1e:7a:ce:26:a5:c6:ec:6b:62:9e:e3:ea:cd:
                    ff:a2:86:73:70:53:9b:09:af:67:0a:ca:d0:ca:94:
                    51:6a:39:59:1c:10:d8:0b:cd:fb:38:c5:ee:21:cd:
                    44:54:61:58:6a:aa:b8:f2:61:3d:03:50:2b:4c:6a:
                    0b:a1:b8:01:b7:84:a5:d4:bb:ae:62:a8:4d:2f:80:
                    32:17:b0:dd:7f:a4:d0:ca:00:0a:6b:95:97:5b:f8:
                    71:88:32:e4:8b:fd:69:eb:f5:9e:80:9b:bb:46:b4:
                    84:43:21:31:73:b9:d9:2f:3d:ac:eb:bc:c0:cd:fa:
                    4c:d2:2c:e2:9d:92:bd:a6:df:8f:29:8d:7b:e9:e2:
                    29:fa:d0:9c:e1:95:28:2d:7f:38:d2:15:cc:5d:de:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:47:E6:FA:FE:C9:14:2A:A6:9E:FD:EE:D2:59:7C:44:EB:AD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/71aace57-bcca-3d73-80e4-7425e102ec43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.5.0/24
                  72.244.7.0-72.244.9.255
                  72.244.11.0/24
                  72.244.16.0/22
                  72.244.28.0/22
                  72.244.36.0/24
                  72.244.38.0/24
                  72.244.40.0/22
                  72.244.45.0/24
                  72.244.82.0/23
                  72.244.86.0/23
                  72.244.90.0/24
                  72.244.119.0/24
                  72.244.128.0/23
                  72.244.136.0/23
                  72.244.139.0/24
                  72.244.147.0/24
                  72.244.160.0/21
                  72.244.192.0/21
                  72.244.206.0-72.244.211.255
                  72.244.213.0-72.244.227.255
                  72.244.237.0-72.244.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:a1:22:8f:f6:d3:2a:79:44:77:cb:48:2c:01:87:91:10:
         97:56:d7:0b:10:a8:3a:47:b6:8b:a8:27:6e:33:ee:4d:7a:f9:
         0f:d7:53:bd:d7:f2:bc:9d:d9:b2:74:99:d7:0a:94:9c:42:7d:
         76:52:77:2e:65:88:3a:08:96:c4:66:3c:f6:a4:ec:68:42:e7:
         a9:07:9c:5f:05:37:5c:01:65:1f:cc:ca:57:73:62:83:1d:61:
         a9:89:3a:cf:50:60:0f:97:05:f9:55:dd:54:bf:3e:56:84:c3:
         86:2a:ac:24:89:96:85:dc:54:93:5b:15:27:5c:c7:66:e7:8a:
         61:3f:7e:e1:9e:c4:f9:c9:81:45:0d:68:d4:b9:83:17:10:0e:
         2f:46:3a:29:b4:b9:50:6f:90:39:ca:db:6c:a3:82:58:e5:4c:
         cf:07:45:dd:2a:e3:47:d9:52:1b:69:99:5c:d6:1a:6e:8a:e5:
         b8:44:84:f3:5d:af:0f:57:0d:c7:1e:19:fa:83:78:62:6c:fc:
         ee:b1:28:f4:e3:98:2c:ff:14:c5:b9:84:ce:b5:a9:14:6a:2a:
         96:8e:a8:9d:f5:b5:25:98:35:40:20:6c:ea:76:61:e2:e8:45:
         15:91:5e:15:86:d5:3e:ad:9c:f4:96:f5:25:8b:22:03:fd:ef:
         27:ac:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:42:49 2026 by rpki-client