Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c36c9ee-f83f-30ae-8a7c-6dd1409ae294.roa
File:                     7c36c9ee-f83f-30ae-8a7c-6dd1409ae294.roa (raw, json)
Hash identifier:          2BGBwzxszZVukC1m2vDh7QGe3Y+lq+hyvx/xcCxOj7I=
Subject key identifier:   2A:27:37:11:2E:28:05:B5:B7:A9:6A:B6:A9:8A:E5:3C:FF:C7:28:A2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CA9B40DDAA04D450BF3126980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c36c9ee-f83f-30ae-8a7c-6dd1409ae294.roa
Signing time:             Tue 27 Jan 2026 10:09:02 +0000
ROA not before:           Tue 27 Jan 2026 10:09:02 +0000
ROA not after:            Mon 27 Apr 2026 09:09:02 +0000
asID:                     174
IP address blocks:        72.244.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a9:b4:0d:da:a0:4d:45:0b:f3:12:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jan 27 10:09:02 2026 GMT
            Not After : Apr 27 09:09:02 2026 GMT
        Subject: CN=181a0974-c1c9-49f1-b008-0a445372593f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:93:79:5b:02:5a:ad:32:42:48:77:df:6d:
                    88:d3:12:f3:5c:84:55:dd:d0:0b:28:50:6b:14:fa:
                    64:86:fe:e3:d2:a1:f7:e8:39:8f:19:8e:7e:02:9a:
                    9d:25:dc:9e:62:27:a7:25:d6:90:b6:fe:c0:3b:bb:
                    43:51:66:d1:b2:8e:e5:6d:3e:68:65:e4:9d:f6:e4:
                    bf:51:5d:e4:8a:7e:79:28:0f:32:c3:4d:b4:e2:6c:
                    1c:21:41:52:95:12:4a:d5:88:20:18:3e:d1:de:ba:
                    8b:1a:82:3e:ca:9b:91:fb:fd:56:e9:30:74:54:f4:
                    09:b8:6e:75:a2:7d:8d:f0:c3:48:c6:b6:88:a9:dc:
                    14:7c:10:13:e5:c3:11:91:a3:17:44:76:3e:d7:a2:
                    40:94:ae:47:48:36:ca:eb:ea:fb:67:b7:0c:df:ec:
                    89:63:d4:2f:2d:96:7a:d3:23:ae:c1:b0:66:51:46:
                    41:f2:81:93:93:b3:61:91:43:c1:fb:c4:86:04:b1:
                    ce:d1:7b:60:d2:a9:cd:2f:f6:f9:4e:e5:12:8a:e0:
                    06:49:06:4a:ea:42:38:02:89:58:84:0f:ae:11:9d:
                    dc:63:f3:22:f4:17:43:c8:90:ac:18:3b:e7:da:ec:
                    27:2a:4f:2c:4f:10:ef:93:71:a5:99:fd:7e:15:42:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:37:11:2E:28:05:B5:B7:A9:6A:B6:A9:8A:E5:3C:FF:C7:28:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c36c9ee-f83f-30ae-8a7c-6dd1409ae294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:04:6d:27:c3:87:70:14:42:90:2a:a9:61:c3:f7:ac:76:cd:
         be:e5:44:b5:58:fe:5e:ae:38:7a:03:32:5c:1c:e1:37:a1:c9:
         91:a8:56:4f:c3:6c:a8:49:22:e5:3c:70:36:23:bf:46:6c:2c:
         7b:18:46:76:74:69:a8:e4:27:4f:98:f4:34:ac:fd:fc:a1:d7:
         31:db:ab:59:c2:b8:6c:c6:e6:bc:d9:ed:7a:76:85:a9:e3:d7:
         b6:a4:59:e8:ab:b7:00:79:7a:21:57:d3:9d:ba:75:46:85:04:
         ca:36:7d:e5:75:75:ef:2a:a9:d9:73:76:eb:54:5e:64:ad:35:
         5a:d8:fe:20:1f:a1:42:80:66:d3:a1:67:d9:3a:d1:74:3a:04:
         87:06:e3:7a:99:15:fe:c0:87:1e:9a:77:13:59:5e:e8:1b:20:
         f6:04:f0:64:46:93:b0:b4:b9:77:47:28:4c:44:1e:50:2b:db:
         f2:4f:5c:a3:4b:0b:d9:9d:37:d7:40:3e:cf:36:bd:fc:fb:ec:
         83:60:31:0d:2d:b3:56:94:85:d3:23:9c:0f:7e:28:6d:fb:29:
         36:3c:3f:b1:43:bb:2d:fd:03:99:59:37:0c:a3:1f:10:33:9a:
         b5:23:71:e5:f7:66:40:90:f2:85:26:11:26:35:70:90:45:f4:
         36:42:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:29:06 2026 by rpki-client