Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa
File:                     ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa (raw, json)
Hash identifier:          KR514+6Tf3WcGT4X+52G6nzDFjU8AM1OUciYvls2EuU=
Subject key identifier:   BE:50:BE:D2:54:D0:7D:99:A5:CC:BA:1F:51:F8:C3:43:96:0F:95:E8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F58CD636F7C0B0F434DA33FC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     29802
IP address blocks:        72.244.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:63:6f:7c:0b:0f:43:4d:a3:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=ee526545-8daf-4e8f-b491-a15cf60699a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a5:e3:41:42:73:24:6b:1a:d9:9f:9d:06:15:
                    7c:5d:b6:2a:9a:39:61:4c:73:96:b4:b6:94:28:a5:
                    9b:ca:a6:bf:fd:79:c9:b1:a9:af:46:81:b0:8d:7d:
                    86:e3:43:cc:7a:38:97:15:ae:6a:5e:ee:5a:f0:ca:
                    00:14:8f:28:ac:54:d4:7f:39:f1:74:4a:7e:f4:ef:
                    9e:bb:7b:d3:2d:d4:56:35:72:00:e1:86:53:a7:24:
                    25:b3:f2:27:4c:8b:f0:66:50:49:30:ea:39:f6:1f:
                    5f:23:fb:23:f4:90:35:28:50:df:36:c7:87:d9:31:
                    fc:3b:bc:27:32:82:fe:1e:a7:d6:15:5c:f5:49:ae:
                    66:6f:d3:15:1c:55:fd:f7:50:d7:63:a0:80:28:89:
                    93:5e:fb:91:45:6f:3a:24:77:f2:3c:87:0d:fc:cd:
                    a0:26:50:40:a3:97:7c:50:64:cd:df:3e:c9:22:da:
                    66:4f:04:00:28:0f:a8:86:6b:49:3b:20:0e:29:e5:
                    d7:45:48:cc:e4:42:db:9f:18:06:d6:bc:a4:b9:1d:
                    55:07:85:bd:47:47:f4:a4:cb:02:d7:a3:a6:4e:dd:
                    b8:32:81:3a:d0:9b:44:33:ff:22:fb:50:01:f3:c2:
                    bf:6f:c3:b4:34:9a:ad:6f:13:24:f4:49:51:8a:3a:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:50:BE:D2:54:D0:7D:99:A5:CC:BA:1F:51:F8:C3:43:96:0F:95:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:d5:39:02:cb:71:5e:f8:18:7c:fb:0b:a8:6d:be:90:e8:
         e3:b0:e8:ff:a8:62:7b:60:62:58:2d:4a:a2:66:5a:a2:e7:bf:
         15:5d:a5:38:1d:e9:80:77:b9:fe:9b:09:3d:ee:c0:6a:cf:85:
         3e:9e:08:fd:63:33:c8:c5:da:a3:cd:d4:b8:fb:fb:05:6a:cf:
         1d:0f:a4:ee:8b:7a:18:2b:4d:b0:9b:b8:cb:eb:a2:0f:50:49:
         96:e1:14:61:55:77:46:d8:0d:2f:67:05:72:0a:b1:da:7d:bf:
         7c:77:00:87:47:51:18:71:81:d5:45:00:6d:aa:d4:b1:6c:a2:
         85:0b:a7:7d:d3:f7:24:a6:02:3d:3a:b9:d3:d7:4b:61:41:62:
         b5:2c:92:9a:2c:7c:03:24:39:47:b3:b5:ec:11:5a:c8:2e:9d:
         9e:30:04:b1:4b:bd:01:4f:ea:5d:e0:01:a1:88:85:93:23:98:
         85:5e:39:14:54:12:f4:3b:53:09:ef:64:a9:c8:f4:78:82:6e:
         d3:fe:14:73:2b:d6:d5:21:dc:90:fa:10:ca:c8:58:14:0f:ab:
         72:f1:b2:01:4d:69:53:66:ad:6f:4a:3d:a8:2f:7e:eb:aa:e7:
         d5:d4:a9:aa:7f:05:96:28:11:e5:79:1f:86:82:21:81:8d:86:
         6b:d7:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:40:43 2026 by rpki-client