Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4e42e49-a8a1-3c9c-9e31-3b8b7537f043.roa
File:                     d4e42e49-a8a1-3c9c-9e31-3b8b7537f043.roa (raw, json)
Hash identifier:          x7KxK7P8Vy55ct8X3oEol++DCpjXB22qRuSllH4KOTE=
Subject key identifier:   02:56:D4:48:0C:88:E5:C4:F3:32:5A:AB:A4:B9:69:48:F8:C3:A7:AA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F823442C34D25A629920FFE80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4e42e49-a8a1-3c9c-9e31-3b8b7537f043.roa
Signing time:             Thu 15 Oct 2026 08:55:50 +0000
ROA not before:           Thu 15 Oct 2026 08:55:50 +0000
ROA not after:            Wed 13 Jan 2027 09:55:50 +0000
asID:                     219447
IP address blocks:        72.244.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:34:42:c3:4d:25:a6:29:92:0f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 15 08:55:50 2026 GMT
            Not After : Jan 13 09:55:50 2027 GMT
        Subject: CN=ff9f1315-60ec-4212-b8bd-189b07a4cda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:5c:67:49:dd:c4:98:94:f7:67:f6:40:cc:
                    5a:7f:3b:6b:fd:b3:41:16:39:bc:09:7f:fb:3c:bc:
                    52:e6:9d:5f:b4:86:0e:d1:35:b8:07:e0:1a:0d:b0:
                    02:82:a4:20:86:93:3e:ad:db:aa:18:4f:e0:cc:8e:
                    84:b0:d6:9c:04:a0:5c:f8:e0:71:8b:da:45:f7:4e:
                    1f:f1:8c:b9:0a:c0:6f:e1:f8:cc:97:f7:d7:d5:37:
                    ae:24:fa:9f:54:16:00:57:01:21:38:b4:85:f2:fa:
                    14:dd:2e:cc:f0:fd:3d:d1:e8:fb:a3:7b:59:fd:6a:
                    1c:91:ee:64:e8:4d:b0:ba:14:84:d5:75:b8:02:3d:
                    9c:98:77:59:c5:eb:d3:09:4f:53:c0:11:20:2c:a5:
                    5f:13:bb:02:40:53:1b:c0:75:e1:17:07:93:68:5d:
                    52:6c:1c:9a:5c:64:a7:17:49:ae:9a:c9:70:bc:57:
                    61:f4:40:ba:2f:6e:9c:bf:61:6b:b3:b4:f9:59:33:
                    4f:4c:2d:8d:e4:ec:c7:01:c2:32:d9:1d:5c:15:c5:
                    78:95:91:b6:7f:97:8e:ba:e3:5d:7a:8d:a3:23:7b:
                    db:a1:a2:ea:65:a7:31:cd:a5:27:08:d3:61:c3:a7:
                    b7:c2:c7:25:41:7a:a5:c7:de:d4:9d:68:85:8e:f9:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:D4:48:0C:88:E5:C4:F3:32:5A:AB:A4:B9:69:48:F8:C3:A7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4e42e49-a8a1-3c9c-9e31-3b8b7537f043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:00:35:b8:e3:19:4b:bf:4a:ba:d7:64:af:3e:05:2e:f6:68:
         7d:10:0b:9a:7a:2f:34:a6:34:c2:41:ab:bd:e4:29:61:a0:e8:
         c0:65:09:a8:3d:a6:e6:b5:bd:75:da:62:2d:ab:aa:e2:62:66:
         0a:b5:8d:67:52:25:32:7d:cd:6f:5c:01:8c:51:bb:72:08:b9:
         24:f2:94:7d:d0:65:b1:2d:80:c4:78:41:84:f0:f1:df:c9:70:
         5e:b2:3d:5c:0b:c1:ca:92:68:dd:97:18:9a:5f:35:48:48:1a:
         80:45:29:9e:b2:44:35:fd:64:16:87:d4:31:b2:cc:0e:69:8e:
         90:e8:aa:33:cd:35:b0:16:be:06:33:59:ed:94:c8:ce:6a:7f:
         7c:e1:e5:f8:41:44:c2:8d:a2:74:a7:4f:72:50:17:d4:ab:75:
         4c:41:fb:ac:88:25:49:82:5e:41:08:ae:d4:a4:1f:0e:97:d4:
         b4:51:fa:c7:51:93:2a:33:c3:ba:df:a6:a9:96:78:e1:bd:67:
         07:f4:1d:d0:34:cd:bc:f1:b4:9f:8e:e7:e4:7c:b5:32:d0:34:
         c6:54:15:30:7b:c0:f2:cf:51:32:1c:7d:30:a5:ec:ce:3a:7c:
         da:64:d4:89:77:15:a2:2d:8b:e3:02:86:ee:dd:0f:83:8d:4d:
         ad:57:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:52:39 2026 by rpki-client