Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ab842115-1e92-34b9-ace4-3a5108f94357.roa
File:                     ab842115-1e92-34b9-ace4-3a5108f94357.roa (raw, json)
Hash identifier:          397S5AAc9F0XnH3pBREYzchCwAiK6Rs4+EfcHCN74ZI=
Subject key identifier:   90:82:2E:0E:E9:1C:E8:91:97:A1:01:25:C5:CC:F6:A4:3D:91:FD:78
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D9A2006AC9B1033E3FBF9AF00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ab842115-1e92-34b9-ace4-3a5108f94357.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     270439
IP address blocks:        72.244.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:06:ac:9b:10:33:e3:fb:f9:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=8b38c5c7-033e-4b9b-8ee7-6a1f142936f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:4a:4b:97:b2:00:98:49:57:7c:0b:74:17:
                    e4:ea:db:62:67:0a:69:c4:3c:57:bb:88:3c:dd:93:
                    a5:8a:68:cf:c1:4f:08:47:cc:5d:00:25:fd:80:be:
                    3d:64:2e:8d:5c:75:85:28:bf:0b:0a:af:18:33:28:
                    29:b6:67:d2:f6:c3:98:69:d7:f5:9d:01:9f:1e:11:
                    8c:b2:df:e4:36:15:cb:85:2c:c0:8d:c5:1c:ae:ef:
                    07:4e:5a:25:fa:2a:63:49:e5:2c:c5:08:6f:2b:01:
                    84:6a:f6:99:c1:c2:d5:7d:ea:46:bf:a5:b1:9a:75:
                    79:39:ad:13:8d:10:3a:6e:dc:bd:39:cf:f0:4c:dd:
                    c9:4f:c1:8b:bf:da:c1:da:a8:d5:2c:2c:0e:7e:5e:
                    8b:fa:3c:51:22:01:92:de:d8:50:c1:cc:0f:72:51:
                    f2:65:88:72:50:ba:b8:38:22:85:5d:28:35:f1:39:
                    18:4d:25:bb:ae:d2:1b:57:01:30:ea:df:80:53:21:
                    1e:ce:4b:98:4a:51:7b:dc:a7:28:9b:f0:3d:da:e6:
                    a9:de:6d:66:34:fa:b1:9e:d7:13:1b:6c:4d:22:72:
                    01:a4:5b:77:f2:1c:1e:74:9a:3d:10:7e:95:ef:e2:
                    4b:13:e2:37:18:2f:d1:4e:d4:b0:96:ec:18:11:1d:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:2E:0E:E9:1C:E8:91:97:A1:01:25:C5:CC:F6:A4:3D:91:FD:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ab842115-1e92-34b9-ace4-3a5108f94357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:ef:c7:51:fb:d2:cc:ba:a0:d0:1c:49:7a:5e:80:7b:b1:9a:
         4e:44:b6:76:bf:3a:7e:36:6a:28:a2:5d:88:4a:1b:6c:a8:f3:
         5f:31:4e:72:1d:df:92:07:ad:d7:b0:5a:fd:dd:61:fd:c7:02:
         c0:8b:3f:3f:b0:f8:9c:d9:86:18:9b:c1:c9:f1:f7:f2:81:07:
         1f:a7:ed:68:0d:b6:7d:57:c9:0f:0a:d1:11:55:b5:07:b9:e1:
         4e:41:ba:dd:31:9d:60:ed:6c:41:24:23:9d:cf:b8:85:ce:b9:
         68:17:5a:56:44:77:79:18:60:56:3d:c3:b2:7b:ea:8b:cc:e7:
         7a:bf:56:27:f1:a3:d6:42:7b:59:0d:1c:60:53:a8:38:79:e6:
         b9:62:74:50:92:f7:9b:82:1a:50:96:24:d8:45:d2:b7:1e:80:
         02:64:4e:64:be:f6:65:60:2e:66:1a:60:ff:12:fd:7b:af:d8:
         27:11:0b:97:87:cd:0a:0a:e4:ad:65:6c:8d:4b:4b:cd:9d:71:
         4e:d9:2a:01:f9:84:e7:25:06:25:1e:3d:77:63:09:5d:50:ab:
         9a:ea:cc:d0:ff:7d:91:09:99:af:45:3a:be:ea:4d:b0:51:fa:
         f4:6d:4b:f6:cb:3d:f6:34:0e:87:6e:d8:e3:50:28:8c:f8:05:
         b2:40:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:22 2026 by rpki-client