Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90dc812f-1c15-3940-b2b1-0bd78c60c106.roa
File:                     90dc812f-1c15-3940-b2b1-0bd78c60c106.roa (raw, json)
Hash identifier:          /c456pfPKxjtq4nLgu3W0UvOkvPOFG6P/FzU1uxBuOY=
Subject key identifier:   82:BF:8A:CE:71:CD:A3:C5:F4:C2:69:E3:AB:DA:DC:84:BB:0D:E0:4A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F480D6327A900A0B2399D3880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90dc812f-1c15-3940-b2b1-0bd78c60c106.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     5650
IP address blocks:        72.244.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:63:27:a9:00:a0:b2:39:9d:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=0e694b6c-673b-45a1-801f-de5aff6412da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:02:e1:b4:a0:cd:13:a0:ba:26:1a:32:d7:
                    87:36:43:71:fb:70:aa:43:58:8a:60:0e:59:18:35:
                    ef:fe:46:cd:2d:81:58:9b:36:35:4c:2d:40:e6:fa:
                    8b:8e:51:d2:fb:d3:5c:be:86:89:54:e7:c3:87:37:
                    a6:3c:08:bd:21:fc:98:fc:9e:68:52:ad:cf:83:db:
                    71:70:aa:43:1e:63:47:3e:d4:74:18:5d:cd:48:0f:
                    37:5c:67:f9:bc:d7:71:75:d9:e8:75:e3:ab:69:09:
                    f7:6c:ae:28:b1:f8:73:4f:11:6c:0c:ce:4c:9e:ae:
                    8c:f5:2f:2d:99:c4:5c:2f:57:d8:5a:ea:ea:cf:f6:
                    9c:dc:88:3f:28:a2:7c:21:a2:c9:47:9e:f0:b4:4b:
                    3e:27:98:55:72:cd:52:3c:79:4d:04:b9:be:5d:c3:
                    87:65:fc:cf:69:61:59:59:5a:68:93:0c:0b:ea:62:
                    54:1e:cc:ee:d4:cb:8b:c7:68:12:2d:6b:66:7f:12:
                    88:0f:26:fc:bd:38:90:ed:a3:73:0d:e6:0c:6d:44:
                    11:c1:e3:5e:6a:fc:1f:22:1e:4a:05:c8:00:32:88:
                    56:dc:99:db:fb:3e:97:c4:25:ea:8e:d3:e5:6a:22:
                    ff:53:a9:df:18:c0:8b:17:f0:f0:86:76:9a:a4:e6:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:8A:CE:71:CD:A3:C5:F4:C2:69:E3:AB:DA:DC:84:BB:0D:E0:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90dc812f-1c15-3940-b2b1-0bd78c60c106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:1e:e0:4a:24:35:e3:35:9c:02:fb:6e:fc:59:fe:14:2a:
         40:7e:30:e1:ce:e4:82:bd:43:d7:35:05:88:88:79:7a:11:f6:
         dc:ad:48:1f:f1:87:af:6c:04:c9:16:03:21:9e:e0:a9:e3:e3:
         7a:23:ed:e5:2b:06:ad:e4:52:4d:aa:a7:ca:46:49:b0:b4:0d:
         c7:50:de:3a:75:d9:3e:71:93:b4:64:6a:12:7a:2c:a4:bd:d7:
         17:38:3c:f7:0a:a5:03:a1:0c:75:ac:33:9a:a1:11:ce:a3:cd:
         d4:1e:e2:59:8b:54:44:40:bc:4c:91:bb:bc:f8:d5:a1:84:ba:
         4f:50:8d:1e:36:3b:4e:3e:01:df:4c:58:58:b2:a0:7b:de:d0:
         18:cd:c4:ba:49:be:c2:f7:3c:30:5c:5d:a5:66:a6:48:d3:97:
         75:04:06:ef:7f:ab:ba:66:3d:d4:f8:7d:c7:8f:a9:90:c3:f0:
         3b:92:17:cd:8d:82:53:14:81:cb:cb:81:ec:13:ee:fc:e3:2e:
         f6:d9:e7:59:2e:f6:77:7f:06:58:05:a8:d9:ba:4d:8a:b4:60:
         46:79:6a:24:1c:df:83:ea:84:d7:63:bf:7c:e4:db:c7:41:56:
         c8:78:f9:92:fd:7c:0a:a6:04:88:b9:bf:69:18:bc:74:d6:df:
         37:1a:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:29:16 2026 by rpki-client