Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a134a9f7-d58a-38ab-a897-932fd5ad9484.roa
File:                     a134a9f7-d58a-38ab-a897-932fd5ad9484.roa (raw, json)
Hash identifier:          7KTH64XBGZefT3hh6Q+e1H+iQ0JolmXNjv2JIeHRG1U=
Subject key identifier:   73:7F:0A:D0:84:4B:92:8F:AE:81:E0:93:FC:8A:A3:F6:BC:CB:75:2C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3CB704D3B0080F68A4835080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a134a9f7-d58a-38ab-a897-932fd5ad9484.roa
Signing time:             Sun 20 Sep 2026 11:32:43 +0000
ROA not before:           Sun 20 Sep 2026 11:32:43 +0000
ROA not after:            Sat 19 Dec 2026 12:32:43 +0000
asID:                     23470
IP address blocks:        72.244.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:b7:04:d3:b0:08:0f:68:a4:83:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 20 11:32:43 2026 GMT
            Not After : Dec 19 12:32:43 2026 GMT
        Subject: CN=525087a8-7ee3-472e-a1c1-f44333a55548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:53:eb:17:6b:57:5b:23:ea:3f:7a:55:22:
                    40:fb:0f:e6:0e:ce:3e:4e:3e:7f:53:10:fd:05:45:
                    10:d6:bc:cd:b8:c7:32:43:2c:9a:8c:89:65:ec:f7:
                    c4:8a:98:2e:5a:29:81:b3:47:cf:a3:f6:4f:a3:6b:
                    63:aa:df:ef:fd:66:00:76:07:6a:98:7f:12:26:ec:
                    75:a3:66:82:35:08:fa:5b:01:d4:62:89:c2:90:16:
                    53:32:a6:18:3b:9d:85:d3:2a:1c:64:ce:11:fc:0c:
                    3e:7a:61:e0:9a:0c:63:b7:92:73:a5:b4:fa:c0:9c:
                    20:33:44:eb:11:9b:6e:9f:56:8f:7f:17:44:b2:99:
                    f4:b9:a2:fa:99:c7:3a:9c:53:bc:6d:32:b2:28:d3:
                    15:ac:de:e3:9a:24:7f:bc:ab:63:12:b9:3a:14:cb:
                    34:99:22:cd:d4:bf:02:19:a4:2f:29:7e:a9:3a:a0:
                    92:b5:ce:98:07:1b:01:1c:87:44:35:c8:db:b1:7a:
                    5d:2e:af:77:5a:65:4d:bf:65:51:cd:9e:50:50:21:
                    16:d3:3c:e7:0d:a1:41:fb:aa:cd:0c:f6:3d:c8:ea:
                    7a:8f:4d:38:51:16:4e:9a:03:16:7d:62:f1:29:38:
                    e7:91:4d:41:98:37:f3:6b:e2:9a:c6:52:df:4f:49:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:0A:D0:84:4B:92:8F:AE:81:E0:93:FC:8A:A3:F6:BC:CB:75:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a134a9f7-d58a-38ab-a897-932fd5ad9484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:85:77:9e:89:69:f2:9f:01:54:31:46:96:af:fb:7a:bc:6c:
         a3:5a:0c:aa:3d:9b:04:18:89:bc:7b:b2:10:b9:44:fa:54:76:
         ec:ea:04:d1:ac:c5:b2:43:a3:00:80:f6:e3:0f:bd:74:6a:01:
         f4:f2:d4:af:42:3e:81:35:e2:8d:f0:ad:56:a4:d6:d0:4a:83:
         c7:2e:1b:53:ca:4e:fc:d3:4f:b3:1d:3f:82:37:86:b0:54:32:
         92:6c:1b:df:16:f7:be:73:2b:69:a9:40:f1:df:d8:08:d3:28:
         bf:12:8c:20:c8:bc:02:d7:96:66:af:2a:71:a7:3f:00:5d:54:
         cf:73:0f:5f:6e:7d:45:1f:71:98:43:75:03:9e:c3:63:a9:31:
         55:bf:cd:f8:f2:29:a6:cc:f3:72:5d:71:23:b0:bb:b4:30:2a:
         8e:ff:58:f5:1b:51:d1:fd:b1:f0:57:1b:33:b7:29:e2:08:46:
         b9:cf:16:96:be:bc:d2:a0:90:a4:fd:00:01:c6:9b:ec:5e:4d:
         69:2a:09:83:7a:26:1d:91:4e:91:7e:b2:cb:b7:82:8f:b8:1b:
         a3:35:98:ea:31:a9:87:39:7b:2c:5c:c4:93:27:67:8e:3f:0b:
         75:3a:fd:4a:b5:b0:95:c2:20:18:2e:8e:4f:2b:7e:96:e8:ee:
         9a:bd:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:25:58 2026 by rpki-client