Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/44bee86b-9465-34ef-b3a7-23b8a573e38c.roa
File:                     44bee86b-9465-34ef-b3a7-23b8a573e38c.roa (raw, json)
Hash identifier:          LGOaVis3p6wNPdE38ddgzZKGON7buJo9C1tkLkfn49A=
Subject key identifier:   08:BB:75:79:0C:9F:37:62:6A:AA:57:A3:7A:45:4A:FF:B7:37:B7:14
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584CAE5E71E8700183555D416200
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/44bee86b-9465-34ef-b3a7-23b8a573e38c.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     2914
IP address blocks:        72.9.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:71:e8:70:01:83:55:5d:41:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=93058ec3-fddf-4cb9-bdff-16a73f9a802f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:45:33:0b:d7:e2:88:69:8d:45:39:09:3c:
                    6b:2e:ec:6f:f0:8a:9c:da:0e:7c:8d:25:e7:f6:77:
                    3a:55:1b:de:14:df:4f:b7:7f:19:c2:20:08:f0:1b:
                    14:d5:f0:68:bf:d3:3a:24:ec:00:ed:06:8c:3b:63:
                    96:1d:e0:fc:4d:fe:c7:5f:c3:b6:84:f5:72:bc:b6:
                    63:75:40:c5:c3:a2:00:b2:19:a5:b1:fb:31:fb:29:
                    c6:7f:46:78:62:c0:93:61:a3:db:f6:99:99:20:b7:
                    89:d6:6d:8a:87:20:e3:c9:39:3c:0d:e6:2b:d6:8f:
                    b8:b0:0b:73:61:1f:5d:01:5a:9c:8c:a4:78:0d:7d:
                    39:d4:ee:cf:bb:0d:49:c6:21:73:ed:83:2e:d5:51:
                    ed:7d:13:d8:91:59:11:72:27:4b:b3:9f:dd:87:44:
                    cc:cc:66:78:3a:ea:e5:d8:93:d8:b5:7e:3b:be:40:
                    05:82:93:02:64:5e:80:23:14:aa:56:1a:1e:16:1d:
                    b9:85:60:1a:37:94:80:a9:b5:8b:08:2d:0e:9d:bb:
                    8c:82:5c:ee:71:07:f1:a9:43:af:fe:6f:67:a7:0f:
                    95:63:8b:43:08:66:11:f9:b3:11:21:27:2a:be:e6:
                    de:d3:66:56:75:16:36:4d:3f:35:d8:98:0d:de:12:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BB:75:79:0C:9F:37:62:6A:AA:57:A3:7A:45:4A:FF:B7:37:B7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/44bee86b-9465-34ef-b3a7-23b8a573e38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:e9:3e:b0:27:80:86:b2:b6:f5:7c:28:9f:31:ea:85:83:
         cb:f7:72:b6:16:10:9e:75:83:12:12:4c:3e:49:43:46:ac:28:
         ca:2f:29:16:d8:4b:56:84:5c:58:ef:1e:3d:c3:2f:b7:3a:f6:
         b2:c0:02:8f:b9:8f:f2:9f:c8:0f:26:f6:9f:e8:6e:dd:cf:b6:
         13:04:ec:41:3b:86:8a:3f:4b:b6:98:ab:63:01:6c:b2:33:b2:
         be:a5:92:0a:9e:0b:b6:e9:2a:c0:9c:10:5e:5e:1a:b5:02:d0:
         b0:5b:7a:d4:5c:f0:6f:0e:c7:28:62:15:b7:31:49:d1:8f:e0:
         b3:5c:a3:63:b2:92:5a:fe:28:8f:51:92:f2:98:41:29:41:8c:
         8e:aa:45:61:8a:60:87:5f:3e:8d:25:43:3e:0a:c8:97:11:57:
         9b:5d:11:db:be:92:17:d4:9b:ec:33:76:82:2f:1b:fb:64:06:
         f1:e5:ff:d9:b1:74:a8:68:01:70:51:18:0a:58:9d:36:65:5f:
         80:8a:a9:87:df:92:71:e5:61:3c:f5:8f:ac:68:1a:a5:d1:87:
         d3:cc:d8:cb:f4:be:64:f5:8e:12:ae:f8:f9:0a:58:41:bb:f7:
         e9:c1:0a:5c:44:c2:28:57:52:f6:85:c5:91:97:b8:4d:6d:e7:
         aa:00:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:12:40 2026 by rpki-client