Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/168f506f-a756-3027-ad87-cb0f6588f32f.roa
File:                     168f506f-a756-3027-ad87-cb0f6588f32f.roa (raw, json)
Hash identifier:          tFUn8G0ax3RJM1/GYc5x7DDGBISVNtpvnNCntgdyGpg=
Subject key identifier:   31:9C:3F:D6:A2:5A:18:DC:E2:04:7C:97:AC:E7:93:23:30:52:72:FE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E51E9DD691129394EC6191180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/168f506f-a756-3027-ad87-cb0f6588f32f.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     7029
IP address blocks:        72.244.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:dd:69:11:29:39:4e:c6:19:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=e2f985b2-0923-4277-912f-123642c3dea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:93:37:f8:80:a3:14:c5:cf:82:69:57:ba:
                    4d:20:74:e5:4d:f5:b8:6c:b8:75:12:62:2a:f9:dd:
                    16:bf:9c:28:c0:2c:23:25:54:f1:61:91:95:86:ca:
                    a8:1d:1a:21:57:08:d2:e0:97:32:b7:98:e9:7b:04:
                    79:33:a7:91:11:5b:3e:80:d3:20:6d:eb:9c:0e:9c:
                    66:ec:30:b4:2d:66:7b:01:ee:a7:71:1b:91:78:17:
                    3a:ab:5e:69:7d:01:89:13:07:b7:73:94:eb:1a:18:
                    88:48:f3:db:37:e2:64:f6:36:0d:12:89:cf:f7:90:
                    5a:ed:fd:af:6f:6c:9e:d8:cb:3f:5c:21:31:37:28:
                    6b:62:0b:bb:93:57:7c:18:72:b8:ed:f5:c6:20:0f:
                    f7:b6:e4:41:8e:99:74:fc:a5:47:a8:48:66:68:f8:
                    26:1c:d7:8d:23:b0:c4:fe:54:c5:9f:02:e2:d0:da:
                    4c:41:90:20:39:65:2e:66:fd:da:aa:f5:69:68:04:
                    b5:d6:1f:65:d6:84:fd:64:62:30:9a:1f:0c:3e:2d:
                    9c:4c:96:6a:2c:ad:5a:08:1a:f9:26:75:c8:f0:79:
                    9c:89:9a:2a:4c:5d:8c:6b:3f:ce:23:2f:00:af:3e:
                    fe:12:f2:a5:db:db:2a:ae:e9:56:6b:1c:eb:f1:2f:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9C:3F:D6:A2:5A:18:DC:E2:04:7C:97:AC:E7:93:23:30:52:72:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/168f506f-a756-3027-ad87-cb0f6588f32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:19:94:99:6d:28:a9:b1:21:37:be:d7:c1:8d:a0:11:dc:
         70:12:2b:d0:fa:bb:a1:ee:54:c7:d2:0f:16:be:4e:fc:f7:18:
         e2:92:a0:b8:aa:05:4b:1f:6d:f8:9c:af:e9:49:a4:62:f6:92:
         14:7d:b1:c1:c2:16:e8:8c:95:a1:c9:55:18:07:0e:bc:90:50:
         29:41:b9:9a:94:2e:8d:31:0a:fb:de:97:bc:d4:fa:d4:2d:89:
         7e:0c:52:42:b1:98:cf:2f:35:69:2b:fa:80:2d:6c:23:c8:4e:
         6b:e0:5d:9f:56:37:c8:d7:0f:20:4f:ed:d1:d8:4e:14:42:2e:
         5e:a7:26:d7:53:7c:d3:09:d9:81:34:ff:ce:e9:20:2e:b3:da:
         64:0c:8b:e8:5b:4e:a2:dc:df:9a:77:b0:48:70:58:32:28:59:
         40:f1:ba:97:2f:eb:35:2c:45:92:23:3e:c6:f7:19:38:11:91:
         ee:09:46:10:54:86:2c:3c:ca:d7:f6:4a:fe:b2:45:54:45:6a:
         75:3d:68:0b:25:18:bb:d6:52:18:f8:75:eb:39:05:06:47:57:
         09:a6:cb:2f:a8:a1:68:1f:b3:0e:a7:72:0c:39:84:bf:b7:be:
         55:e0:1c:b6:48:a2:29:fb:95:e3:ac:b1:37:8a:2d:88:56:4d:
         25:e5:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:53:14 2026 by rpki-client