Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4ea9a3f-4dad-36d7-9352-7ff31ae0096e.roa
File:                     e4ea9a3f-4dad-36d7-9352-7ff31ae0096e.roa (raw, json)
Hash identifier:          zpmyDATVCgufl5ZfyMIE9eYBiFmbejHvIMny6C1AHZ8=
Subject key identifier:   49:35:D8:14:20:A4:9F:67:26:98:40:5F:B1:8A:D1:D0:1A:96:DD:FF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF4A298E2CE7F72BEDFBEC980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4ea9a3f-4dad-36d7-9352-7ff31ae0096e.roa
Signing time:             Tue 25 Aug 2026 15:53:22 +0000
ROA not before:           Tue 25 Aug 2026 15:53:22 +0000
ROA not after:            Mon 23 Nov 2026 16:53:22 +0000
asID:                     402265
IP address blocks:        72.244.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:a2:98:e2:ce:7f:72:be:df:be:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 15:53:22 2026 GMT
            Not After : Nov 23 16:53:22 2026 GMT
        Subject: CN=f3fc6576-752f-47f0-b952-afd214ca8a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:25:37:8e:30:50:19:23:2e:c5:29:de:1e:
                    2c:12:ba:a4:77:72:13:3d:52:4d:a2:33:68:6c:3d:
                    07:fc:68:4d:8e:a1:2f:80:bb:eb:f9:1c:c2:ee:b7:
                    e2:03:c3:ea:29:40:74:be:ac:2e:eb:ea:06:3c:97:
                    a9:21:1e:fc:6d:86:69:22:c0:79:25:3f:75:24:bd:
                    7b:12:b6:c7:00:cd:03:8c:8c:c6:e0:f5:04:96:bf:
                    c4:3f:8d:1f:56:24:08:94:58:d3:1c:e3:6c:e9:49:
                    a5:1d:ff:ba:ca:95:d2:c8:39:b1:46:af:19:68:b5:
                    34:7e:1d:98:75:ab:19:da:24:72:48:2c:73:a3:02:
                    05:6c:37:9d:ae:1a:d2:80:f4:18:42:41:b1:23:e7:
                    d2:b9:e1:e8:93:13:7a:54:07:8d:9c:95:a2:ac:bf:
                    a6:b4:2f:f3:6f:ee:5a:28:2d:55:c2:7f:9c:08:c0:
                    dc:ad:9d:b3:34:86:6e:2e:83:92:0f:c1:3a:a2:c0:
                    a2:c5:ff:36:46:7b:43:0c:85:40:d3:e8:5f:29:f9:
                    0d:b2:2f:18:82:67:58:b6:74:80:fb:b2:85:1f:d1:
                    a6:1d:d8:ae:fb:d5:42:50:d4:41:59:9d:3d:4d:b2:
                    b0:15:0a:35:14:f7:07:c6:0b:d3:d4:84:c7:c9:6c:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:35:D8:14:20:A4:9F:67:26:98:40:5F:B1:8A:D1:D0:1A:96:DD:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4ea9a3f-4dad-36d7-9352-7ff31ae0096e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3e:3d:51:d9:b0:58:27:51:7e:bc:68:89:e4:80:4b:2b:ee:
         ad:02:d2:0f:cb:4e:71:a6:9d:31:80:88:0f:0a:5c:4b:fc:19:
         01:96:45:47:33:f4:68:2d:74:a3:85:5b:07:8b:e7:c6:d0:33:
         08:b7:f7:d9:70:44:e9:9c:6d:bb:d1:2c:e6:50:07:4d:fd:fa:
         e1:93:45:50:a3:91:65:34:7d:ea:6d:76:bf:04:1e:e5:01:9c:
         32:d6:0e:c3:3c:dd:a0:9e:fd:93:62:77:1c:fc:7c:6d:5f:f1:
         04:f4:c0:7d:2f:5f:c5:6a:8e:b0:62:e0:a6:30:d2:b3:9b:8b:
         b1:5e:94:7f:ce:09:1f:2f:0b:3c:d7:9c:00:f7:30:28:07:20:
         5f:3e:52:95:7c:0c:bd:18:25:e1:88:ec:60:1f:ae:0c:33:e8:
         c0:15:ee:33:3d:e4:b3:dc:db:d0:4e:15:1e:a8:33:dc:4e:c5:
         9b:a6:db:b2:90:61:e3:41:43:f3:72:e0:f9:d4:fc:fd:88:ff:
         5a:c4:44:e4:80:42:20:f7:bb:cb:94:46:c1:2d:4f:1f:a1:a7:
         8e:a7:6d:26:6f:60:ad:c0:86:f5:1d:d8:4f:b2:82:92:f9:80:
         36:56:e8:66:c0:77:73:ef:b3:9c:e9:8b:60:03:30:ab:6d:69:
         21:c8:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:17 2026 by rpki-client