Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/272e3034-690c-3e70-b3b7-de0b55708d04.roa
File:                     272e3034-690c-3e70-b3b7-de0b55708d04.roa (raw, json)
Hash identifier:          wmBBetG2IF7JJOLeTWLmIAyi6QGNOu2rSPL4zO6M9U8=
Subject key identifier:   87:F4:3E:F9:17:8E:E4:73:1C:67:78:E3:E9:F9:D9:F7:48:99:98:3C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E577F57A01020E57EEEC863D0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/272e3034-690c-3e70-b3b7-de0b55708d04.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     2914
IP address blocks:        72.245.144.0/21 maxlen: 24
                          72.245.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:57:a0:10:20:e5:7e:ee:c8:63:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=7a21944a-b8f6-47c4-a593-ef5e67c4729f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:53:d7:54:cf:cc:55:6a:83:96:c8:3c:db:
                    49:66:e0:67:62:6c:ef:05:10:d1:e3:c3:c3:c9:b6:
                    fb:29:df:eb:48:f9:0a:4a:3d:51:83:bc:cc:3d:1e:
                    02:52:24:03:a7:32:1f:bb:d5:15:bb:c3:c2:d2:ef:
                    ed:ed:29:ae:f8:26:ad:c3:4d:f6:9b:33:91:59:1b:
                    a2:72:ed:46:75:0a:92:fe:f9:94:09:bd:5f:83:4e:
                    dc:f1:aa:23:81:48:8b:df:76:77:16:98:54:82:d3:
                    72:1d:b2:98:17:d3:e1:fd:51:12:3f:0a:a7:30:56:
                    e0:17:2e:26:e6:fb:7d:47:60:4c:4d:db:6d:38:d9:
                    37:e7:3e:5c:a2:07:9b:1a:eb:c6:cb:49:84:00:65:
                    20:2a:12:57:13:1a:90:f6:38:b0:2f:18:8e:c2:5e:
                    cb:78:f1:77:45:28:39:e7:25:ac:78:21:68:48:7c:
                    28:b2:ce:3a:20:c8:7f:c4:c0:f9:72:5a:5f:33:79:
                    bd:34:8b:78:1c:67:16:a5:4c:45:24:76:72:b0:15:
                    0b:f1:a5:77:73:ef:34:9a:fb:51:6a:a1:6d:2b:01:
                    a5:3d:d9:27:5c:8c:34:30:64:23:e9:c8:b5:b6:d8:
                    78:0c:db:d9:27:08:be:59:d8:f7:b3:b3:33:fb:04:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:3E:F9:17:8E:E4:73:1C:67:78:E3:E9:F9:D9:F7:48:99:98:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/272e3034-690c-3e70-b3b7-de0b55708d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.245.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:41:21:5e:cc:79:20:67:85:b2:c9:96:2b:06:98:6a:d6:
         0f:6d:41:7f:c9:4f:dd:81:97:2d:d4:03:be:ef:45:00:52:7e:
         ce:3d:b3:27:83:1c:87:08:75:8e:65:6d:43:41:b1:ee:00:eb:
         43:12:c9:3f:cb:e7:c2:cb:0f:5a:7d:12:74:ac:49:0a:00:c7:
         24:88:cf:26:a0:84:1c:86:55:1e:fb:78:7f:cd:b8:35:66:da:
         41:b2:ea:4f:57:87:04:ec:28:08:90:a5:39:b0:73:cb:2e:ed:
         99:56:44:f1:8e:a1:0e:f9:5b:b6:a4:bf:b5:fb:10:ac:2f:32:
         c9:d3:a6:b2:d4:32:c2:f8:ee:47:30:3d:50:95:3d:80:5f:87:
         83:ad:29:4f:3f:7f:31:f0:0d:b4:eb:d7:75:8d:1b:f1:e1:79:
         67:ed:9b:51:0d:f0:9b:56:08:61:06:28:c3:73:10:30:62:15:
         61:ea:47:6f:38:9a:97:36:db:7f:b6:cd:32:be:c4:d1:5c:09:
         a4:88:e5:ce:64:7b:37:9d:2b:f3:9f:ef:1d:5e:f3:55:81:07:
         3a:65:0e:16:94:dd:be:64:7e:8f:6a:c4:5f:c4:04:9d:05:cd:
         82:a0:59:fc:2b:9c:9e:bd:8c:6c:30:71:1e:01:3f:aa:38:d4:
         55:a4:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:52:09 2026 by rpki-client