Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a121d35-6052-3f75-aacf-52edc76b9051.roa
File:                     7a121d35-6052-3f75-aacf-52edc76b9051.roa (raw, json)
Hash identifier:          HcN+h5hqBWzYR8KkykX95KtdzN7neqaKr+wrTg79M1U=
Subject key identifier:   63:E1:E9:C2:7F:FD:79:92:53:83:D9:24:0B:80:CC:82:9B:9D:45:4E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E8DEF9812D770506607722080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a121d35-6052-3f75-aacf-52edc76b9051.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        72.244.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:98:12:d7:70:50:66:07:72:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=da70c1c3-2c62-400b-9cc3-c5846fd67671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:25:e2:4a:93:8a:e6:3e:7b:43:a6:51:5a:
                    05:86:ac:1b:68:a4:3f:df:07:cb:92:4b:6e:6d:d7:
                    49:d2:2a:65:8a:7a:2c:6e:64:20:0b:f6:64:52:c1:
                    26:aa:0c:4e:24:40:24:35:ee:37:eb:03:9c:cf:db:
                    66:7b:5b:e3:2c:d2:03:cd:60:70:1d:ba:86:d2:e7:
                    e3:65:56:e4:88:54:3d:17:57:d3:36:da:98:1c:cf:
                    7e:bc:ff:cc:55:2e:49:24:ca:e5:37:04:43:6a:05:
                    b9:30:ff:07:98:e3:7d:b9:04:22:95:13:8b:d3:20:
                    1d:ba:66:f7:5d:c2:4d:18:1a:7b:af:d5:1f:99:76:
                    1d:80:67:b1:73:26:99:20:a7:18:56:32:93:60:39:
                    67:d6:62:d3:0d:64:50:39:97:0a:26:82:a3:80:a9:
                    69:bf:a2:9f:9a:0d:04:da:f8:47:d1:58:c0:ba:f4:
                    80:55:a8:76:79:51:ef:79:17:a3:69:60:69:37:11:
                    dd:e6:d8:b3:fa:42:09:0d:72:06:53:21:e4:8a:62:
                    a9:99:70:70:fe:bd:44:da:ce:bd:0b:40:74:49:7b:
                    01:6e:7d:aa:c8:7d:f5:28:ba:26:a5:0b:f3:e7:00:
                    c1:e3:3e:e8:db:fd:f6:1d:c8:63:ed:7c:c8:51:60:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:E9:C2:7F:FD:79:92:53:83:D9:24:0B:80:CC:82:9B:9D:45:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a121d35-6052-3f75-aacf-52edc76b9051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:31:b9:2f:82:1e:a3:eb:cf:fc:ba:bf:b7:18:a8:a5:19:75:
         9e:40:ce:fb:39:e3:98:97:3c:45:89:13:b1:3f:08:2b:c8:de:
         31:44:62:ff:95:da:16:d8:62:25:5b:ce:21:9d:7a:e1:df:30:
         9a:19:f2:74:14:f7:dc:54:6d:2a:30:77:ec:ad:46:2d:6e:fd:
         1b:78:5c:53:91:7d:ce:6c:79:2e:fc:3d:21:3c:78:23:a6:80:
         b5:d9:3e:35:57:56:51:4c:1c:94:88:a7:de:f8:ce:90:75:db:
         4b:52:65:23:1e:44:25:9f:ec:a7:8f:6d:fd:64:f9:48:f4:87:
         c5:de:35:90:46:54:ad:4f:49:92:fd:fa:ed:6c:40:a3:26:b9:
         f7:cb:10:b3:6b:39:02:ce:1c:9b:31:b3:35:ae:6a:b6:db:12:
         29:56:93:b8:4c:46:7f:57:34:ae:f1:6f:d8:32:25:4f:60:a3:
         9f:d5:1e:95:d5:34:63:d1:63:15:9e:95:d5:a0:34:85:e0:d9:
         d2:c6:cf:31:25:3a:a7:3e:9a:b1:d4:29:67:ed:df:d6:96:ad:
         90:7d:e6:b3:da:03:60:06:bf:9c:a1:9c:16:13:90:24:bc:84:
         cc:2e:ae:b4:f3:dc:1f:26:77:e1:0a:8f:f2:79:b2:0e:c2:d9:
         de:06:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:26 2026 by rpki-client