Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
File:                     254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa (raw, json)
Hash identifier:          2Gk45mYjX4sr7YuxfIeg9tmOjhbj6J+P+dUlH2/Rdz0=
Subject key identifier:   5A:86:9F:B8:25:28:08:3A:60:4F:6F:26:E3:C3:40:7A:E3:38:A5:E8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E8DEFA330D984E2852C9A8340
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     6830
IP address blocks:        72.9.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a3:30:d9:84:e2:85:2c:9a:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=29ab47cf-5199-49f5-b27d-4f331a71bd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:79:c1:d8:bc:97:46:f9:4d:db:f1:84:df:
                    5b:32:c3:91:63:9c:7e:3c:30:e4:ae:b6:df:33:96:
                    c5:95:6d:3b:b9:94:bd:38:a5:68:b6:22:8e:5d:06:
                    95:a9:df:78:fd:96:d2:1f:cb:02:ea:9a:69:4c:6c:
                    94:be:12:65:b1:7a:40:61:45:41:65:90:a1:08:0d:
                    91:ce:69:88:1f:4f:36:63:69:64:3f:fd:d9:f1:de:
                    d7:48:6e:dd:ea:9e:45:76:ca:ff:8b:a1:92:b5:15:
                    91:d5:00:5c:f3:ee:08:dd:19:bc:88:b2:35:fe:14:
                    db:46:9b:60:d3:b3:ab:ea:d6:94:64:d5:c0:74:2b:
                    fb:94:51:c2:4a:2f:46:9e:86:1e:3d:7e:dd:d4:2b:
                    78:15:4f:36:d6:35:66:33:ad:9e:1d:b4:03:ef:b0:
                    0a:41:93:ee:cd:b7:52:8d:01:43:c1:90:80:71:cc:
                    b6:04:3c:fe:a9:c5:03:09:19:82:6e:13:00:69:39:
                    0e:49:f1:49:2d:f1:9b:60:1a:8a:29:52:19:99:9d:
                    d3:4b:3b:d1:bc:bc:e4:0f:ad:e7:2f:9a:3d:6b:b3:
                    64:30:af:f8:78:37:54:99:be:78:ae:b4:9f:78:d8:
                    cb:06:f3:1b:f0:a7:cb:6d:61:f7:f6:78:b2:a8:e2:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:9F:B8:25:28:08:3A:60:4F:6F:26:E3:C3:40:7A:E3:38:A5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:39:3f:32:bd:9e:52:80:ae:f8:6d:e4:29:49:08:52:31:36:
         20:97:b1:c3:d6:cc:ad:b0:4d:58:80:a4:1a:2d:84:d6:9e:fc:
         9e:52:25:80:0e:f9:53:12:2a:87:e5:64:38:1b:4e:55:f2:b4:
         25:ef:7e:84:10:44:23:e0:b2:7b:d7:94:72:42:89:88:45:42:
         e3:dd:21:b7:b1:c3:3a:f5:b0:18:cd:41:b9:18:67:b8:39:e3:
         35:fb:c4:0d:7a:22:fb:31:95:3f:98:48:b8:19:36:cf:d5:76:
         83:a1:60:ec:8d:0e:85:fc:52:cb:d6:c5:5b:c7:1b:0a:80:9d:
         76:99:a3:f9:55:e5:9e:b3:46:55:49:ef:ac:7f:48:a9:2f:e5:
         d9:b6:6e:0d:8d:1b:93:70:f9:aa:22:fe:f2:4a:f3:0e:50:4f:
         10:e0:8d:f0:2d:c5:94:a9:b6:82:7d:66:9b:32:e3:21:e0:9a:
         46:48:97:ac:d9:a2:5d:61:5b:ea:56:93:be:8d:e3:f1:f4:c7:
         bd:b0:0b:4d:5b:39:7f:03:4d:99:8a:b3:b0:90:cd:23:be:62:
         48:18:08:69:c6:62:4d:e0:49:11:67:84:4e:1e:a7:2f:be:a0:
         6d:1e:8c:a9:2a:8f:fe:5d:0a:06:dc:bf:3e:df:3f:92:a7:f1:
         6c:0d:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:19:19 2026 by rpki-client