Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04c928b1-d802-3a7d-bdc7-eb5516debe29.roa
File:                     04c928b1-d802-3a7d-bdc7-eb5516debe29.roa (raw, json)
Hash identifier:          bFHZptYT4bHdXPZXW50UrgpXJNsaR4fq6StiBlBwI4k=
Subject key identifier:   96:8E:0B:16:F5:EB:A0:DC:37:70:26:D8:4D:81:A1:F7:B7:19:33:4C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D6F837A32B7027222DAEACC80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04c928b1-d802-3a7d-bdc7-eb5516debe29.roa
Signing time:             Wed 08 Apr 2026 06:41:13 +0000
ROA not before:           Wed 08 Apr 2026 06:41:13 +0000
ROA not after:            Tue 07 Jul 2026 06:41:13 +0000
asID:                     834
IP address blocks:        72.244.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6f:83:7a:32:b7:02:72:22:da:ea:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  8 06:41:13 2026 GMT
            Not After : Jul  7 06:41:13 2026 GMT
        Subject: CN=7d1ed708-35cf-45e2-bdf1-97093a0fa9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:d7:be:8f:33:3f:7b:0e:34:5d:64:06:29:
                    84:81:ee:e6:ec:1a:0d:09:b9:75:a3:b2:86:8a:cf:
                    8b:14:80:0b:74:74:f1:dd:0e:f3:71:6b:40:9c:1d:
                    62:26:d1:ed:d1:f9:d0:43:06:a5:4a:38:70:e5:02:
                    3e:fe:ad:4e:d0:75:b7:7b:59:30:48:38:a6:49:1a:
                    96:ee:7b:5d:d2:de:f3:e4:75:b9:b4:32:97:ad:97:
                    90:c4:07:bb:37:b0:60:3f:53:b3:54:46:86:e9:26:
                    ac:d7:fa:27:de:9b:df:4e:82:e5:5c:d2:92:5d:0d:
                    20:4f:65:b7:f7:66:23:93:e5:cd:a4:7e:38:18:98:
                    6d:61:9e:b0:0c:60:57:a1:8d:a4:68:ca:ba:ce:9f:
                    e6:79:06:04:52:ca:40:d7:a4:be:0f:7d:8c:6c:f3:
                    bd:59:fc:a0:01:0c:ee:af:36:8e:04:9d:f4:db:f5:
                    45:8b:f0:27:47:82:3d:5c:a1:dd:9a:25:48:98:d8:
                    53:ba:7a:a3:fd:a3:f5:1f:52:b5:0a:ca:6d:e5:77:
                    d3:56:e8:14:aa:73:41:73:bb:42:fc:54:33:97:19:
                    ff:18:70:9b:30:32:17:ac:aa:8c:2e:fa:4c:8f:b7:
                    f6:32:ec:83:99:f7:77:0e:37:27:12:c2:68:ed:58:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:0B:16:F5:EB:A0:DC:37:70:26:D8:4D:81:A1:F7:B7:19:33:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04c928b1-d802-3a7d-bdc7-eb5516debe29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:43:06:cf:ec:3e:05:34:e3:d1:39:78:96:48:51:38:69:
         86:60:61:eb:48:0e:94:76:0e:c3:d4:01:76:63:a6:7c:0b:0a:
         44:ec:b7:46:79:36:38:c0:40:45:8d:1a:c8:cc:a1:31:b3:13:
         67:cc:fa:58:30:e9:15:90:15:5a:6d:23:65:51:68:8a:41:ef:
         e0:d6:b0:e3:c5:40:04:73:e1:b3:6b:13:59:bd:c8:a9:a6:41:
         79:23:e4:5e:80:b2:f4:91:37:c7:e5:85:fd:2f:42:f1:b9:10:
         5e:c7:46:f3:20:72:22:1a:70:36:c6:99:fa:7c:72:de:2c:e9:
         ef:61:80:23:81:31:72:40:44:97:d2:36:9f:23:ff:01:d6:59:
         4f:43:75:5e:bb:22:66:20:69:e8:fe:e9:a7:94:ba:9c:98:c8:
         08:06:c5:61:1e:3b:16:e6:39:64:20:0d:70:98:49:56:ac:fb:
         43:9f:f6:53:fb:cf:65:38:87:cb:d1:38:73:b9:98:85:c8:5c:
         92:6f:8b:fa:89:13:cc:4e:a9:15:07:aa:13:12:00:c5:b6:c1:
         b1:09:8e:5e:33:d1:60:ce:2b:dd:7f:7b:52:12:34:80:94:55:
         92:73:98:2f:4b:b4:91:9e:f9:4b:bc:84:c0:8b:64:b3:61:35:
         d6:64:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:12:59 2026 by rpki-client