Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb1b27e5-0169-3537-a881-f5983c704196.roa
File:                     bb1b27e5-0169-3537-a881-f5983c704196.roa (raw, json)
Hash identifier:          W14H9IxY3DQ2zwhu24gJ+TVRiq9PXOoGuEw79BdPXxU=
Subject key identifier:   9E:78:6E:87:B7:89:FD:C3:36:27:0E:23:32:85:25:8B:CE:27:F9:E5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3B7D1FCA166916065FDC7040
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb1b27e5-0169-3537-a881-f5983c704196.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     16276
IP address blocks:        72.244.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:1f:ca:16:69:16:06:5f:dc:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=8f1a3c74-5671-4b96-a3a5-8719cab90496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:1f:1b:e3:da:14:31:51:5e:d6:30:f9:90:
                    17:4d:4b:10:b0:db:2f:74:9e:ec:1f:8d:04:c6:bf:
                    a7:19:2c:f9:e8:3b:5b:82:4f:d3:1a:89:24:3b:ab:
                    86:34:0a:79:2b:e6:f5:52:66:ee:1b:90:19:3b:5d:
                    b4:f0:e2:0b:6d:17:c3:8f:17:47:cc:57:20:9d:63:
                    79:b4:ae:05:9e:94:b9:dd:a1:ae:75:26:ba:a4:99:
                    e5:99:83:5a:e6:a4:1d:d2:d4:a3:ea:28:1b:ab:22:
                    fb:36:2f:a0:c8:46:aa:b3:0a:6a:6c:3b:93:d4:cf:
                    87:a6:51:08:35:cd:a5:10:32:c1:a4:16:02:64:26:
                    6e:8f:07:61:7b:6a:0d:34:b4:73:35:38:3e:fd:52:
                    f9:d3:fc:58:70:9d:da:f0:2b:51:d2:fa:44:d3:fd:
                    13:5b:bb:6d:35:c8:73:2d:df:01:b8:f3:e0:76:e5:
                    87:49:0b:0b:bb:3b:88:74:78:c6:f6:e4:d8:6f:0f:
                    0b:64:b5:ec:ac:45:55:2f:db:c9:7f:77:8a:d5:a5:
                    d5:a7:af:41:0e:21:df:c3:9e:79:00:ca:ba:cb:4e:
                    11:00:79:e5:5b:03:04:33:62:95:27:e3:40:12:7d:
                    57:b2:f3:c7:5a:64:c6:3a:13:fe:ed:6c:04:86:21:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:78:6E:87:B7:89:FD:C3:36:27:0E:23:32:85:25:8B:CE:27:F9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb1b27e5-0169-3537-a881-f5983c704196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:94:9c:b4:13:07:ce:f1:53:9f:73:d7:f2:62:4d:ae:ae:
         df:4b:3e:c7:9b:5d:f8:cb:e4:8b:57:27:74:0f:43:57:80:38:
         62:b9:72:b0:ff:00:51:19:b7:1b:cc:df:68:4d:85:01:58:f5:
         60:96:8a:46:13:ab:c4:96:1e:2e:21:89:68:fe:18:2e:cd:fe:
         6e:a3:86:ad:ba:c2:dd:b5:d9:1a:4f:dd:6b:11:45:d6:d4:72:
         e6:73:b4:93:a2:5b:13:68:77:03:8e:bb:77:73:78:3d:e7:13:
         b1:66:02:4f:c7:9a:f8:3c:04:8a:bb:42:d6:95:10:25:f6:4a:
         c6:44:80:65:8a:bb:eb:be:d5:9d:af:5b:82:35:85:c5:ba:56:
         e4:d9:23:e7:26:16:a0:ed:e2:01:6b:fd:48:17:67:f2:e8:c2:
         07:e3:06:ff:ea:87:4e:ab:c3:de:3b:6c:cf:14:e9:18:a4:42:
         b7:f0:55:b8:c3:a3:49:2d:ea:c5:ac:90:6f:d5:86:de:4e:b1:
         9c:34:26:29:72:2f:b0:ab:f6:93:59:9b:2b:d4:63:64:2c:e0:
         b3:fe:37:53:77:c1:2f:84:50:28:b2:17:dd:69:87:6f:18:2f:
         72:6c:80:33:ee:1a:06:80:54:b4:39:d0:a2:87:cc:16:7d:c3:
         59:a7:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:48:30 2026 by rpki-client