Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
File:                     cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa (raw, json)
Hash identifier:          eyDOet0hITn98RIeBsGigL8XctQFSPaKONlrdLsXIUQ=
Subject key identifier:   B3:7D:DC:08:76:8D:FE:62:4E:0B:4B:3D:4A:18:18:E5:B4:DB:73:DA
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584F00DCC204CA4FAA087F29ED58
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     23316
IP address blocks:        72.37.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c2:04:ca:4f:aa:08:7f:29:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=390682c5-1d48-4f56-8ff5-3a201ed67986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:31:01:35:73:c5:f6:53:03:6a:3a:e8:8d:f6:
                    d5:cc:2e:aa:dd:9f:ec:b9:42:7a:64:c8:79:79:7c:
                    e0:ba:aa:b7:4e:db:62:82:85:d9:e4:bf:ac:61:3a:
                    29:3d:de:45:e9:fd:8e:df:5a:da:07:95:71:56:c6:
                    73:9a:fe:b1:0d:f5:97:62:b2:c6:cc:e1:76:bc:ad:
                    25:11:a3:44:e5:a1:e1:62:82:81:0e:92:fa:4e:2d:
                    6f:ad:52:e3:b1:b4:9f:a6:db:25:70:5e:f3:b9:f7:
                    62:86:19:e5:74:31:a5:fe:54:b3:9a:1f:59:53:a5:
                    8d:f4:a1:11:e3:38:c3:0d:61:26:8e:7a:4d:b5:4e:
                    7c:3b:21:a0:d0:0b:8b:9c:12:48:b4:3e:42:fe:b4:
                    85:84:e8:7a:04:46:82:d8:3d:d9:ff:d7:d0:40:86:
                    b9:58:ca:84:aa:33:fe:b0:59:3b:98:a1:65:a2:cc:
                    c1:ec:b3:37:d9:a3:c8:37:53:21:69:c5:a3:b8:30:
                    3f:ee:ee:a7:94:6f:22:b1:91:7f:9d:fa:b4:6b:70:
                    89:26:46:e7:ce:68:b6:b2:63:d6:d7:c1:a5:10:09:
                    e0:38:02:88:80:65:b5:b4:8a:df:5a:b4:b7:62:94:
                    c1:7d:c8:46:82:e4:8f:65:b1:85:ae:2a:f4:98:4f:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:DC:08:76:8D:FE:62:4E:0B:4B:3D:4A:18:18:E5:B4:DB:73:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:02:a3:41:d5:97:fc:3b:88:fe:be:c1:0e:37:ef:18:ca:
         8b:27:8e:1c:ff:d5:cd:8f:46:fd:26:f7:c4:c3:e9:b8:45:0c:
         05:9f:fa:1e:1b:e5:75:95:2f:ac:71:ba:d6:b7:63:64:d0:4f:
         22:08:bf:94:92:c7:33:df:d7:de:8c:f8:8d:80:4f:cf:6d:fe:
         08:60:5f:76:2a:4a:c6:f0:39:0a:6d:68:40:9d:6f:e0:e1:fa:
         7a:38:80:d6:ea:2f:d9:99:72:fd:77:29:98:4c:2d:2f:82:19:
         09:ae:3b:ba:78:7c:a9:f5:6f:bb:58:40:3a:6c:3c:56:73:9b:
         aa:78:1c:7c:71:e2:de:45:0a:7a:0e:37:be:5b:46:17:5c:73:
         c8:1c:f9:c6:32:a3:91:58:c0:a8:b0:e7:36:5b:66:13:c0:31:
         44:1b:53:bf:b8:90:02:8d:fe:e3:45:8a:28:2e:74:e2:db:fb:
         34:30:30:26:9b:12:8e:d3:12:16:01:f8:da:e4:38:7a:b4:06:
         0e:ce:41:80:e4:00:76:ee:2e:65:04:b4:85:cd:96:b0:d6:98:
         2e:85:89:0d:bc:43:f9:53:d8:5d:a9:56:3c:46:55:c9:15:a0:
         be:14:9a:39:cd:fa:93:a5:ad:89:67:52:0f:10:04:59:bc:28:
         cf:1f:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:00 2026 by rpki-client