Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2368cf51-9642-3938-b649-1e63836676a6.roa
File:                     2368cf51-9642-3938-b649-1e63836676a6.roa (raw, json)
Hash identifier:          /EBOfoZzllfxUxTUR1ADNS3XjeSgDd88FotutSWaLCc=
Subject key identifier:   53:6C:12:F4:95:3E:D2:8D:50:0D:D7:9E:87:FE:C3:D6:69:2D:E5:7B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D75D54C7B84658D3689461700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2368cf51-9642-3938-b649-1e63836676a6.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     53740
IP address blocks:        72.244.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4c:7b:84:65:8d:36:89:46:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=613ece06-893d-4caf-9356-727c7d6208cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:47:70:d3:31:ff:cb:45:d2:ac:d0:8e:4c:b3:
                    7d:9b:c9:ef:0e:de:a7:ec:56:22:30:52:d3:05:97:
                    42:1b:ba:da:d2:80:c6:52:9f:14:e6:d8:d6:36:35:
                    8c:11:fe:97:61:20:a5:69:c4:b5:de:72:c8:67:df:
                    67:0b:a6:25:a1:5e:a7:ab:90:08:f5:ee:e4:3f:14:
                    15:40:36:93:e7:02:22:c5:d2:70:48:5f:9f:9c:10:
                    fd:49:22:3d:69:73:bf:70:5b:f2:4b:3b:fb:11:64:
                    ca:96:1b:f9:d9:e1:09:b9:eb:87:8b:e0:56:2c:e7:
                    2a:ec:e9:5d:28:37:f1:7c:3b:34:ad:0c:76:82:a9:
                    66:e5:77:af:13:82:2a:5d:2e:8a:06:f5:10:fa:0a:
                    9c:56:48:9f:d7:35:1f:ed:34:9d:10:23:6c:c9:25:
                    39:c5:2a:d0:0d:85:77:a1:57:9b:68:dd:b1:0b:50:
                    94:ff:fe:97:9b:7a:f7:ba:fb:28:23:98:51:c1:6c:
                    a1:2a:47:0a:ff:15:74:04:5b:0a:55:b2:e4:b3:c5:
                    47:f0:6b:3d:69:ac:cd:a1:12:02:2f:72:34:c4:67:
                    24:28:39:36:4c:61:29:e2:1a:eb:b0:b3:6b:c0:c9:
                    22:75:02:1c:7c:fc:13:68:49:f3:fe:e0:8c:14:69:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6C:12:F4:95:3E:D2:8D:50:0D:D7:9E:87:FE:C3:D6:69:2D:E5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2368cf51-9642-3938-b649-1e63836676a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:42:63:ff:5e:fc:d6:61:60:25:6e:48:5e:8a:91:f6:76:
         2f:5f:08:a3:c2:33:60:bb:3e:e1:8b:65:e9:6b:4e:8b:b4:0f:
         1a:bd:35:b7:5a:22:fe:59:78:cc:11:84:bb:48:14:a0:b9:b8:
         8c:98:4b:2f:d5:48:0d:75:48:f4:da:47:77:ed:d9:ec:d6:0c:
         be:04:e1:14:e1:af:22:54:ce:ed:38:99:02:f8:fe:85:d9:3e:
         22:a1:12:6d:fe:e3:9b:dc:7e:cd:b0:d9:cf:92:9f:f9:e4:af:
         34:88:16:d9:5e:db:27:ce:8b:08:1e:94:8d:bc:21:bd:43:67:
         1a:8d:32:1a:45:04:73:0f:98:09:87:7f:a4:9d:a8:96:a7:c7:
         0c:66:97:a5:99:8d:ad:c6:d0:fb:58:5a:98:b4:8d:33:3f:31:
         c7:d7:4c:1f:13:2b:60:7c:ec:a4:af:c2:4f:a6:5d:53:f0:f3:
         24:0d:10:e5:ff:8e:f5:e7:3e:33:f4:fe:ca:e5:71:7a:70:0c:
         cc:35:33:d4:67:e3:9f:1a:13:95:93:0b:85:64:4f:f3:52:73:
         82:1a:32:92:d9:09:81:18:5f:01:78:51:08:16:ba:e1:98:60:
         86:62:76:c9:84:24:96:71:c2:88:8d:66:34:65:cb:45:d1:a8:
         9a:bb:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:51 2026 by rpki-client