Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41a50534-40b8-3973-8194-a115ac641b20.roa
File:                     41a50534-40b8-3973-8194-a115ac641b20.roa (raw, json)
Hash identifier:          FrG7sC1vB9RhezYorUE6S9N9403Ri42PhIMyrhc3XSw=
Subject key identifier:   B1:E3:84:77:F4:40:8B:CD:EB:94:38:EB:B1:85:B7:38:AC:84:9F:0B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5D14A8C2E59D8D67ED78FF00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41a50534-40b8-3973-8194-a115ac641b20.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     834
IP address blocks:        72.244.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a8:c2:e5:9d:8d:67:ed:78:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=fba7a200-50d5-4cb8-bf55-c0fb930175ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:73:51:42:8b:b7:ff:eb:e8:cf:82:c9:fc:
                    eb:da:20:a2:1c:92:d4:54:7a:b5:62:4d:96:bc:87:
                    01:be:6a:83:29:ab:ad:1f:8b:3e:3e:50:c6:08:e7:
                    9f:61:35:1e:1a:74:2e:6d:7e:45:31:8e:42:48:8b:
                    c1:92:09:eb:2e:c1:12:e7:56:d6:e9:0d:a9:f7:dc:
                    d6:17:45:d7:02:a9:91:0b:d7:82:90:df:91:5c:86:
                    e9:b5:49:10:49:25:25:5c:c8:b8:ff:f5:9f:50:1b:
                    67:d3:57:fc:76:b7:ae:14:9d:a7:8f:82:45:a3:ab:
                    a3:96:60:56:22:b8:a0:6e:a1:10:82:0c:57:e8:cb:
                    37:dd:53:ba:31:30:26:c6:58:f1:be:e1:6b:5d:46:
                    bb:45:71:d5:ba:27:bb:98:6e:7f:47:d7:e3:d9:e1:
                    59:87:e7:6c:df:f3:44:d8:2b:1f:a5:ca:02:19:87:
                    a8:71:33:64:29:33:53:d6:6e:26:4e:d9:1b:9c:df:
                    c2:92:94:35:11:8a:a7:9e:5a:55:e9:90:15:d9:79:
                    a3:18:c8:f4:49:51:22:d2:73:4a:1e:7a:d9:4b:d8:
                    f6:7e:a9:43:b2:46:97:f9:44:30:6a:18:04:1a:f1:
                    93:34:30:8a:62:7c:e3:96:7d:23:6f:96:7d:fa:49:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:84:77:F4:40:8B:CD:EB:94:38:EB:B1:85:B7:38:AC:84:9F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41a50534-40b8-3973-8194-a115ac641b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:51:4d:21:33:e1:67:dd:ac:44:b7:f1:16:0e:34:5c:c1:
         8a:7a:7b:7c:9d:a7:a4:8d:6a:bc:a8:4d:2d:aa:35:f7:74:bf:
         d9:56:98:a2:ee:cd:ec:35:47:a6:ab:6e:43:b9:81:31:78:f8:
         1d:57:69:fd:e7:d2:b0:d3:f7:77:29:01:8e:27:c8:af:2f:a2:
         fa:b4:67:1b:d3:59:2d:02:11:ea:21:fb:09:92:34:e5:37:44:
         48:de:9a:30:2c:1e:71:4f:b9:e0:63:e6:a3:81:6c:46:2c:49:
         fd:46:c7:7a:44:9b:19:3d:04:d8:b2:20:9f:a6:5f:96:e2:8b:
         82:03:39:87:83:6c:11:7b:28:98:f9:ac:ff:f7:d7:8f:3d:39:
         12:22:64:ae:ff:d5:69:58:78:68:4f:8e:07:02:2e:db:39:16:
         db:b2:6b:2e:2a:ce:f8:6b:ee:b7:e5:2c:2e:79:c8:59:11:33:
         c9:c8:af:42:de:41:ff:d9:45:38:13:06:f2:bf:34:b8:7c:95:
         d6:f2:21:62:03:f9:9a:7c:c6:b9:6a:ef:a3:e7:e8:9c:92:c8:
         6b:e1:4d:c4:f8:ac:6d:27:5e:1c:a1:bd:13:75:b2:66:67:9b:
         83:3a:5e:a1:d5:61:31:3e:c7:46:3a:0d:de:0c:44:d7:c0:80:
         b6:eb:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:53:26 2026 by rpki-client