Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a2a52963-e133-3e1c-af19-fb8a718d70f4.roa
File:                     a2a52963-e133-3e1c-af19-fb8a718d70f4.roa (raw, json)
Hash identifier:          8cqMDnpFya64fRy3v4p0ukEkBt08dWaih6hA/HuRta0=
Subject key identifier:   EA:88:6E:4C:9B:DD:A7:4E:C6:13:1F:A0:77:49:7C:2E:CC:D9:85:15
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E08665B932757D327027B3FE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a2a52963-e133-3e1c-af19-fb8a718d70f4.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     2856
IP address blocks:        72.9.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5b:93:27:57:d3:27:02:7b:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=ebc71568-e021-4f49-b540-66a3e50a9699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:f9:55:b6:20:43:27:67:2d:58:ab:bc:55:
                    e1:2e:79:e9:23:64:14:e7:e1:fd:1a:3c:46:7e:1e:
                    d6:e9:37:1d:45:aa:3b:77:7f:fa:ed:f8:64:cd:8b:
                    58:fb:8e:16:2c:8a:87:f1:1a:c3:9e:b7:54:c3:31:
                    8b:9b:7d:73:62:72:18:76:eb:c5:bf:67:7e:61:a2:
                    64:a3:21:3c:74:56:7a:3a:e6:42:3e:42:7d:c9:f8:
                    da:98:30:11:e6:91:e4:d7:91:17:c0:fa:f3:ed:3e:
                    0f:d7:35:43:30:d0:f7:8f:1d:3a:b2:d5:a2:cb:fc:
                    6f:e9:17:c4:ae:6e:96:bc:d6:82:cd:82:9f:91:ec:
                    eb:ff:c1:31:5b:03:6c:35:22:4e:3d:a6:bc:9a:b1:
                    69:a5:dd:cd:12:bf:1c:0b:0d:86:fd:a8:9c:27:44:
                    8a:f0:40:a3:79:d0:a1:55:46:fd:65:e0:11:91:ef:
                    d7:43:95:20:4e:1d:2a:29:1b:38:f1:3e:33:cc:13:
                    9b:61:b3:fb:a3:f0:f4:e4:cb:2d:47:3a:60:b5:69:
                    49:dd:4a:7b:65:7a:d4:d7:a7:ef:60:6d:39:ef:18:
                    ba:d1:0f:dd:6d:1c:8c:ec:5f:b3:0f:36:11:cb:e8:
                    49:71:29:9d:ab:a6:c0:98:8d:05:13:b5:0c:ce:40:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:88:6E:4C:9B:DD:A7:4E:C6:13:1F:A0:77:49:7C:2E:CC:D9:85:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a2a52963-e133-3e1c-af19-fb8a718d70f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:0d:b5:24:d5:27:94:1d:47:53:76:28:b8:86:a6:e9:ed:
         08:a3:09:09:94:19:98:1e:8f:83:56:25:a9:28:39:2d:81:55:
         e4:f7:21:ac:78:bd:0d:47:48:3d:c6:2b:3a:99:65:e2:ed:9b:
         25:5a:14:17:cd:c7:ab:85:a6:a6:7b:06:48:c7:da:ea:62:49:
         3a:65:eb:bc:cc:a2:3f:39:34:65:62:26:32:26:a0:38:c9:57:
         39:c5:5d:73:ef:a4:bc:80:5c:85:34:01:ee:e3:11:3f:a9:1e:
         8f:1c:f6:77:6c:76:f1:2d:65:22:47:28:63:c6:16:1d:3b:b3:
         dd:21:d0:ed:bb:a0:f5:48:fd:a5:65:6b:63:c6:6f:cf:06:8c:
         5c:74:20:56:12:96:b7:ae:d7:70:05:ae:37:be:64:b7:98:d6:
         49:ab:23:4f:25:1b:78:9d:33:be:d3:f9:0c:cc:21:62:cd:25:
         8f:e7:9b:29:2b:73:c1:1f:ac:5c:d0:4e:6c:64:7c:df:f2:01:
         82:f5:86:3d:b8:46:77:85:8b:04:93:4a:92:08:c2:fc:eb:79:
         e2:cf:3e:1f:d8:5a:dd:df:88:aa:b4:2c:f2:d9:6d:6c:a8:3b:
         50:37:59:be:ac:2d:01:52:47:c5:fc:4a:cc:94:b0:b1:be:f4:
         ce:5e:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:49:48 2026 by rpki-client