Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d818f3eb-672d-39d8-8eeb-a45cc27586ea.roa
File:                     d818f3eb-672d-39d8-8eeb-a45cc27586ea.roa (raw, json)
Hash identifier:          i47KjK0DcIG0M9tJwjovxUAonBn0BY+wvjWvDYleTwc=
Subject key identifier:   5D:48:5D:5B:51:E3:81:DE:19:0A:E7:C9:59:91:AA:7E:D0:93:D3:ED
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4B57E705560AC43BAE6A1580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d818f3eb-672d-39d8-8eeb-a45cc27586ea.roa
Signing time:             Fri 25 Sep 2026 17:18:11 +0000
ROA not before:           Fri 25 Sep 2026 17:18:11 +0000
ROA not after:            Thu 24 Dec 2026 18:18:11 +0000
asID:                     834
IP address blocks:        72.244.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:57:e7:05:56:0a:c4:3b:ae:6a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 17:18:11 2026 GMT
            Not After : Dec 24 18:18:11 2026 GMT
        Subject: CN=59976c28-e2c8-4521-b883-3f5069a20ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:86:22:dd:44:74:c9:ce:38:44:8d:14:89:
                    66:ac:99:41:c4:61:b5:99:62:6c:71:b7:e6:1b:f3:
                    c0:0b:ee:1b:36:33:7d:8d:8b:b9:d1:5d:07:3c:d1:
                    ce:4d:58:93:25:e1:01:fd:98:dd:33:d7:7d:5a:f4:
                    b8:02:03:ea:be:fa:e0:11:c6:43:b2:22:aa:6d:67:
                    1b:21:ec:36:82:0c:fc:17:c7:52:bf:3f:50:bf:57:
                    a5:cf:2c:32:42:5e:38:5e:4d:1d:33:04:6b:a6:df:
                    91:a4:92:b3:d3:8c:a3:ab:18:cb:4f:c4:d4:d6:fd:
                    8d:68:a2:2a:75:e1:6a:70:e4:6e:eb:cc:d7:e6:6b:
                    56:80:27:0c:13:c7:28:f3:6d:7e:a6:52:53:06:c8:
                    6c:92:fe:d5:c0:9d:76:3d:21:12:8f:cd:03:54:cf:
                    1b:91:38:27:96:69:df:9d:c1:81:d1:ed:2b:09:27:
                    05:84:fa:d3:2b:3f:b1:e7:a4:ac:59:c7:4d:88:9f:
                    69:84:a5:c1:bb:a2:9c:0d:da:64:95:7b:8b:48:ae:
                    63:bf:8e:e3:64:2f:61:16:0c:0c:47:bf:01:4f:1b:
                    14:5d:1f:88:3d:93:4e:06:12:f6:51:2b:d7:fa:8f:
                    bb:74:2f:63:20:ac:90:10:48:7f:52:3c:c3:36:fe:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:5D:5B:51:E3:81:DE:19:0A:E7:C9:59:91:AA:7E:D0:93:D3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d818f3eb-672d-39d8-8eeb-a45cc27586ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:0a:cd:93:4f:86:af:e6:d1:c4:0f:fb:5a:25:7c:10:39:
         44:e7:f5:8e:36:10:fb:14:94:9a:ac:3c:e0:6a:54:da:37:27:
         9b:40:2e:3f:20:26:c1:bc:30:76:7c:bd:7e:a8:96:8f:e6:47:
         64:74:01:a0:73:7e:f1:bc:2b:ed:01:17:f5:86:a5:bb:2f:85:
         0a:78:42:4d:ec:ea:4e:6a:7d:94:4f:4a:d9:fb:8f:68:e0:7e:
         aa:05:b9:af:ea:32:0a:11:89:9a:85:2e:d5:12:4c:11:e8:ef:
         39:72:13:64:33:4a:67:93:84:40:91:22:42:17:a0:d8:48:66:
         3f:90:d9:bb:cf:aa:96:9d:47:ec:0b:08:5c:fe:4b:55:a3:71:
         cc:0a:20:ca:15:5c:05:64:40:7d:29:af:30:0e:65:21:bb:23:
         36:b9:8d:df:d9:69:e5:a1:5d:1e:b6:3e:22:e0:2d:b3:0a:c4:
         81:97:89:43:3f:5c:9d:17:91:27:0b:c9:40:c7:20:7f:c5:06:
         61:78:5c:9a:28:0d:c4:d4:bb:6d:63:d6:47:76:0f:96:df:78:
         dd:04:d7:2d:8b:bd:6d:ec:08:e9:5e:8f:37:b5:3d:15:93:35:
         89:29:00:9b:86:c7:29:87:4c:a9:27:7e:2c:ca:85:15:19:9d:
         a4:cb:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:11:19 2026 by rpki-client