Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90dc812f-1c15-3940-b2b1-0bd78c60c106.roa
File:                     90dc812f-1c15-3940-b2b1-0bd78c60c106.roa (raw, json)
Hash identifier:          a4ijxPcef5wBBJ49GlQTIwa0lvD7YLKa1VQgprzQtgU=
Subject key identifier:   56:FC:E3:66:06:97:EF:12:90:62:25:BC:48:E0:07:69:C3:1E:BC:D4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC565C0008A5085EB7E170C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90dc812f-1c15-3940-b2b1-0bd78c60c106.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     5650
IP address blocks:        72.244.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c0:00:8a:50:85:eb:7e:17:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=f6f7bb78-371f-40e2-83f9-326c754c6130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b3:5f:56:51:dd:f4:2f:fd:23:66:07:9b:ae:
                    3a:51:1e:a0:18:e4:d2:07:2d:1a:1a:da:ff:34:94:
                    89:9f:60:08:21:88:56:7c:f4:10:7e:85:66:8b:3e:
                    ed:9d:70:02:ec:c3:41:2e:45:57:42:a7:3d:f2:5e:
                    4c:be:bc:fb:72:b6:75:c7:57:a2:b0:5a:e5:e4:38:
                    26:e6:1f:d2:bc:eb:f0:c9:5e:a7:af:e2:24:a6:cb:
                    10:c7:b8:5f:ce:aa:12:5b:f2:d4:6d:5e:42:fb:dd:
                    a5:a2:0d:b2:86:43:81:59:4a:7b:c8:0e:da:ce:5e:
                    33:15:49:02:42:76:4d:c5:b5:5d:26:0d:fe:4a:e4:
                    29:27:71:a8:cd:12:f4:b5:0d:94:bd:57:e6:1f:11:
                    d7:9e:a0:8d:16:73:f0:40:fe:c0:87:62:6e:ea:d2:
                    d1:a2:9f:88:4b:00:12:ac:ed:19:b1:f4:aa:17:03:
                    3a:79:5e:9d:6e:f3:87:2a:24:34:f8:a9:a4:fc:e7:
                    5a:dd:ba:65:91:db:42:6e:ac:ce:cf:11:a3:36:c4:
                    22:92:67:cf:3c:f6:01:4a:a9:93:b0:8d:3a:9c:3a:
                    bd:24:a0:70:cf:b5:3a:41:cf:bf:cb:8b:e3:ce:3e:
                    ff:e9:48:d3:f2:45:a6:09:88:bc:c4:ed:07:7c:d5:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:E3:66:06:97:EF:12:90:62:25:BC:48:E0:07:69:C3:1E:BC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90dc812f-1c15-3940-b2b1-0bd78c60c106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:d6:77:cc:70:b9:bf:1b:26:2f:f5:c6:27:76:60:aa:94:
         72:f6:82:42:2f:90:7a:24:49:5d:e3:16:5a:5d:aa:13:96:ef:
         5a:fa:4b:86:45:8e:23:bd:8e:41:e7:10:cc:5a:1d:60:ce:1b:
         75:27:71:ad:b9:54:55:b0:ec:92:12:ae:b3:1d:29:bf:e7:0f:
         fc:3a:3d:5f:dd:99:62:3e:7c:87:fa:ee:cc:f2:7c:a4:0d:aa:
         e6:c9:54:8e:de:cd:8f:12:7d:03:e6:32:5e:15:da:20:cb:60:
         c6:e9:df:82:f4:80:3a:26:06:56:31:0d:a2:55:07:1b:c3:f8:
         f5:68:d9:e2:1d:37:05:9c:a5:d4:06:93:46:58:d5:6d:7f:67:
         00:9d:d2:07:e5:ca:3d:2e:fb:e3:2f:e4:01:b6:7a:bc:c4:d1:
         4f:46:5c:60:3b:57:3f:bf:7b:3d:5d:17:0a:c4:a4:d8:3c:48:
         9d:14:69:4c:07:d6:a0:54:71:79:9d:32:5b:6b:02:1f:26:46:
         16:24:1b:21:0b:3e:2e:24:4f:e4:da:25:da:82:3a:37:63:1f:
         b8:28:c8:a8:f5:99:4a:94:99:a9:42:b6:cf:ed:97:aa:62:97:
         e1:77:47:9b:e3:ed:f0:c4:da:a5:4c:aa:bb:c8:a1:b2:e5:0d:
         eb:0f:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:49:56 2026 by rpki-client