Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/982928c1-936e-3aec-9671-fc3076bbf32f.roa
File:                     982928c1-936e-3aec-9671-fc3076bbf32f.roa (raw, json)
Hash identifier:          B9BT229lSkxQimf2Vowh5Mo/IxkGKadQfxVS7ZBEg4Q=
Subject key identifier:   0F:FE:DB:FC:DA:3C:FF:28:4C:62:0E:C2:7F:3D:11:25:26:65:B4:72
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E4AEF6C4780C7FBFAD36E6F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/982928c1-936e-3aec-9671-fc3076bbf32f.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     834
IP address blocks:        72.244.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6c:47:80:c7:fb:fa:d3:6e:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=4fca6caf-fe76-4c64-880e-543a134c655e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:28:56:46:be:cb:a4:d3:77:d6:08:1d:6b:
                    2a:e4:55:ec:ed:54:42:5a:11:1c:d5:8a:42:0f:55:
                    66:cb:d8:60:b8:8e:66:cf:51:9b:eb:51:d3:37:36:
                    f9:9a:47:82:37:a1:71:64:a6:99:5e:75:c1:34:21:
                    5c:e7:01:31:f2:9d:ff:8d:1d:ea:77:42:49:6e:ba:
                    dc:07:08:27:53:02:1f:47:69:2f:cd:c9:3b:e3:39:
                    ed:3e:05:fc:d2:de:3c:2c:3e:9e:ae:ca:70:70:77:
                    c7:0e:38:43:0b:be:99:78:4a:6f:d9:5a:89:d7:09:
                    53:58:85:94:af:fe:c0:87:8e:1c:41:a6:3c:07:8d:
                    b4:0c:c2:6f:d8:a5:cc:3f:ee:6b:2c:78:26:29:59:
                    b6:ea:66:f2:8a:0a:b6:bd:eb:a8:49:3a:ca:4c:0e:
                    24:6e:36:c4:a2:e3:86:3f:59:d9:9e:be:3e:a9:c3:
                    54:d7:63:de:b8:70:ce:6d:bf:b8:20:b9:7b:84:04:
                    b3:4d:a6:62:3e:3b:03:84:bc:c5:90:28:ab:85:7c:
                    23:e7:7f:44:bd:6a:14:a9:a3:e4:66:5f:e6:27:67:
                    eb:b0:04:11:69:a5:7c:ea:42:5b:05:9a:1e:31:18:
                    09:2f:a1:44:0e:51:27:7b:96:b6:e4:d2:b1:64:dd:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FE:DB:FC:DA:3C:FF:28:4C:62:0E:C2:7F:3D:11:25:26:65:B4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/982928c1-936e-3aec-9671-fc3076bbf32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:93:67:f2:55:61:5d:64:56:cf:3d:a1:63:63:98:ed:6b:43:
         dc:8e:a2:dc:ca:6d:8e:f6:ee:56:2a:e4:90:f3:fa:22:02:72:
         1d:db:a1:c9:38:43:38:29:90:53:16:95:68:1b:7a:21:ef:d7:
         21:85:e6:64:89:65:26:44:7b:a2:46:27:a0:65:0b:b6:83:f6:
         e4:69:23:b6:35:6b:54:37:c5:e0:72:89:75:69:c0:d1:1d:09:
         8e:52:1d:1e:e6:e6:dc:cb:d0:10:1f:05:42:87:d4:f6:56:4e:
         9a:27:5f:0c:67:e7:c5:0d:e9:b9:13:cd:3b:ad:d9:90:68:6d:
         89:f9:61:d9:a3:e7:7b:ad:2f:99:23:ba:c3:0f:a2:23:6e:ae:
         fb:62:f1:10:6a:1f:36:7b:7a:53:8b:9d:ff:72:f4:63:52:42:
         2b:34:07:1c:00:99:bb:b9:c2:3c:48:38:d2:fc:1f:90:b9:72:
         f8:05:77:c3:99:84:50:fd:5e:96:bc:d4:00:7b:8b:84:4f:0f:
         4d:9a:07:52:72:46:eb:5e:99:be:82:2f:43:44:ff:fd:35:0a:
         f4:cc:08:81:97:59:d2:28:5c:d5:b4:9e:a3:e2:92:e5:0f:bd:
         be:59:84:76:76:be:47:07:8b:78:67:e4:8b:61:b3:70:06:46:
         e6:29:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:53:30 2026 by rpki-client