Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d40309a9-3c45-3b66-bd2c-7068dfab8add.roa
File:                     d40309a9-3c45-3b66-bd2c-7068dfab8add.roa (raw, json)
Hash identifier:          zPdwMyXrheeLtPeTS2nJjz7T3ClqG3zxptlLE/i6Kco=
Subject key identifier:   48:3B:02:9B:4C:86:BB:38:81:1B:DB:90:AB:3D:9B:CA:62:D9:CD:DB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5B405C620E6EF6B3C2DE7F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d40309a9-3c45-3b66-bd2c-7068dfab8add.roa
Signing time:             Wed 01 Jul 2026 17:16:45 +0000
ROA not before:           Wed 01 Jul 2026 17:16:45 +0000
ROA not after:            Tue 29 Sep 2026 17:16:45 +0000
asID:                     6079
IP address blocks:        72.244.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:40:5c:62:0e:6e:f6:b3:c2:de:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  1 17:16:45 2026 GMT
            Not After : Sep 29 17:16:45 2026 GMT
        Subject: CN=71884090-3655-4871-927b-391fb9e42ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:36:92:68:03:ff:f5:a1:b5:e6:f6:82:fd:
                    d9:67:13:6c:4e:a3:94:3b:c0:3a:75:9f:90:7e:88:
                    43:61:c2:2b:fb:68:76:ab:04:df:bf:9b:b2:a8:27:
                    37:73:88:fa:a3:18:d9:8d:bd:9a:c7:4e:78:1b:2d:
                    4f:bc:54:d0:8d:5b:3e:03:27:9d:58:54:84:8e:d5:
                    29:34:73:dc:9a:e8:99:80:f3:02:86:3c:12:3f:b2:
                    53:eb:d7:4e:30:93:9c:a8:6d:5d:2f:1b:2f:97:65:
                    e7:65:0b:5a:69:ff:16:77:b6:cb:37:88:55:8e:f6:
                    47:f9:5e:29:bc:eb:0e:b8:df:c9:43:6b:d4:32:70:
                    9d:0b:f7:ed:e8:bb:90:9f:1a:03:7b:89:c3:61:7f:
                    55:83:c3:c3:af:3a:bb:9e:0c:19:64:76:96:78:2c:
                    9f:2e:a0:a1:b7:27:8e:5a:62:16:8d:c7:63:ce:59:
                    34:1b:42:e6:ca:43:61:a1:e4:f7:78:86:60:23:34:
                    33:c2:96:fd:09:0e:04:f5:65:0d:40:63:30:c3:46:
                    e7:1b:b4:0f:5f:04:42:6e:50:4c:e7:00:2d:be:98:
                    4d:4e:55:31:6a:85:6b:20:c2:35:60:b2:bb:a2:c4:
                    b1:45:ec:99:0f:15:74:b1:4f:68:8e:41:16:7c:36:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3B:02:9B:4C:86:BB:38:81:1B:DB:90:AB:3D:9B:CA:62:D9:CD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d40309a9-3c45-3b66-bd2c-7068dfab8add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:41:67:30:58:b3:5f:ad:e5:63:a4:c5:3f:32:44:30:2e:ff:
         38:66:3e:26:5b:5f:ad:01:46:d7:44:3e:0f:f9:d1:ee:dc:dd:
         a9:0f:cf:a2:a0:b9:0e:79:0c:b6:31:33:09:6f:8b:bf:89:f4:
         19:8a:68:c9:5d:7e:d6:f2:e0:89:81:29:74:d1:f2:5b:2f:97:
         dd:17:87:f1:68:56:70:bd:6e:52:af:71:f8:e9:ab:28:cf:74:
         fd:f2:43:97:32:06:a1:61:60:81:9d:36:b4:53:ee:d7:c4:f6:
         2a:91:c6:0b:c6:f0:58:33:09:17:40:5c:87:cf:a4:aa:81:4f:
         8b:9a:d5:d6:cc:7f:b6:22:e1:07:5d:40:62:f9:c1:78:30:95:
         4d:a5:5d:71:dc:fa:bf:c1:f9:54:c0:5f:41:c6:fd:5a:34:61:
         81:0f:6f:a3:6d:48:1e:a9:fb:38:6b:48:c2:b0:df:7a:83:34:
         ac:07:30:22:47:93:05:bb:cc:89:e3:40:96:4d:d1:6c:d6:84:
         1c:76:e1:44:d2:76:2f:8d:16:11:b1:90:17:35:e1:b1:5f:8f:
         18:b4:37:1b:e1:26:f9:69:7e:a3:93:b7:bc:24:ca:a9:a7:e7:
         1f:bb:db:f9:1a:be:70:95:9d:67:85:c9:50:4e:84:62:b2:f7:
         52:1e:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:51 2026 by rpki-client