Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fccfb0d1-f2b1-36f2-ac05-33783810082c.roa
File:                     fccfb0d1-f2b1-36f2-ac05-33783810082c.roa (raw, json)
Hash identifier:          gqQQ3EBF2nSWeMGOnNMF+kHYu2qb2q9tksRTJZuvA+U=
Subject key identifier:   C4:B3:C8:08:E4:03:77:6C:16:6A:83:9B:A9:53:01:9E:82:13:B1:BF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4AD5617BB5471F94E1EE5220
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fccfb0d1-f2b1-36f2-ac05-33783810082c.roa
Signing time:             Fri 25 Sep 2026 12:55:12 +0000
ROA not before:           Fri 25 Sep 2026 12:55:12 +0000
ROA not after:            Thu 24 Dec 2026 13:55:12 +0000
asID:                     6079
IP address blocks:        72.244.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d5:61:7b:b5:47:1f:94:e1:ee:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 12:55:12 2026 GMT
            Not After : Dec 24 13:55:12 2026 GMT
        Subject: CN=3feecfdf-db50-4681-b608-b8354d1f29cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:92:82:33:ba:73:a5:cf:ea:3f:46:d3:c7:
                    9b:a3:b2:8d:c2:73:9c:eb:c9:e8:56:a9:7c:61:40:
                    0d:d5:dd:94:61:bf:f8:6d:e4:a0:75:b6:8a:7e:af:
                    69:78:c2:e7:c9:9e:ee:14:db:bd:ff:b5:da:e7:e6:
                    99:fb:36:0e:43:6a:62:73:fd:5e:bc:c5:81:9a:c8:
                    31:ff:d5:13:c5:78:8e:56:46:70:02:21:39:6b:70:
                    ba:3e:5c:77:fa:ef:fc:d1:e4:3a:6d:a5:c0:99:3a:
                    71:03:38:75:c4:f8:36:19:87:c8:6c:d7:28:aa:0d:
                    57:84:90:99:79:09:8f:31:30:09:fc:3d:f4:7d:cf:
                    0a:6d:37:56:72:6f:ae:27:7a:bf:6b:6d:11:7d:76:
                    33:b7:c0:40:01:25:98:97:e0:93:08:88:77:7b:35:
                    cc:45:b3:89:64:3b:03:5b:15:00:fa:0b:5e:88:d8:
                    ff:28:82:6c:9f:c2:40:a7:16:4e:01:03:20:d6:63:
                    e9:fc:3e:6c:11:2b:49:3a:b7:eb:ed:8f:7a:f2:93:
                    01:85:74:b5:8e:81:91:97:b5:72:2c:5f:d0:df:b7:
                    a9:ee:43:3b:26:8c:99:54:b5:17:aa:d5:b2:18:a8:
                    d8:e4:65:f6:72:6e:8a:40:b8:57:3d:6a:36:9b:b5:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:C8:08:E4:03:77:6C:16:6A:83:9B:A9:53:01:9E:82:13:B1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fccfb0d1-f2b1-36f2-ac05-33783810082c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:da:a8:44:42:43:2d:43:41:5f:99:40:db:8d:ae:f2:99:
         cc:1a:0c:a7:66:16:ad:aa:42:8f:43:d9:f9:1c:b4:19:51:ee:
         ba:e0:ba:e3:18:7a:5f:84:4c:e1:14:47:9d:f2:95:ec:a9:78:
         33:58:5e:5a:f9:31:d4:b5:c1:90:52:b3:a8:8e:d2:41:f3:78:
         2d:57:81:28:69:47:30:2f:d0:37:f1:4e:7d:77:8c:ce:51:fc:
         8b:f1:a8:07:6d:c7:48:b2:23:17:10:4d:91:92:b7:d2:ce:af:
         85:e7:2f:84:d4:3b:f7:94:59:ed:47:3e:28:2f:3a:52:97:68:
         2b:ef:64:31:02:6f:76:43:59:c1:b1:8e:0e:be:cf:34:ea:5f:
         f9:29:ce:ce:03:07:ed:7e:2f:da:e6:d1:70:1a:ae:00:b4:5d:
         e8:82:20:a9:47:ce:19:f3:97:c1:57:50:ef:44:19:e5:9f:a0:
         5f:db:27:93:bf:c1:31:68:c6:c5:6f:8f:5a:74:01:aa:a9:a7:
         f7:74:5a:d3:27:bc:e9:ec:86:e9:83:cf:47:0b:7a:f0:c4:75:
         cd:1a:5c:f4:9a:55:9e:a1:09:35:59:6e:29:c3:31:f3:35:ff:
         23:ea:a0:34:7d:d5:a1:98:2f:4b:f8:8c:91:c7:4f:20:83:f9:
         34:16:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:39:09 2026 by rpki-client