Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eeb8e8bd-0fd6-3bd5-9dbf-e0ce03b7e114.roa
File:                     eeb8e8bd-0fd6-3bd5-9dbf-e0ce03b7e114.roa (raw, json)
Hash identifier:          eREguXFTFiqIGrn2U2dq+nbaM4HvDaUb1EDBT8OZhdQ=
Subject key identifier:   05:E6:9C:91:6B:57:E2:26:A3:E4:F2:04:FC:F1:25:D4:D0:41:6B:C1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DE1506BA4253F19DE51469AE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eeb8e8bd-0fd6-3bd5-9dbf-e0ce03b7e114.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     834
IP address blocks:        72.244.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:6b:a4:25:3f:19:de:51:46:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=d3b9bf04-e349-4516-8130-c541ffd62441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:56:17:b7:47:f5:82:f9:ec:68:18:8a:c9:
                    00:99:14:61:b4:1f:1e:be:18:89:72:4f:6d:aa:59:
                    97:ca:2a:83:9b:81:e3:22:b2:73:2d:35:22:68:dc:
                    f1:8c:13:61:49:92:a7:13:d2:a5:7d:03:c0:c6:7a:
                    53:bd:88:58:5b:8e:27:0e:c9:3a:8b:23:15:dd:26:
                    7b:aa:36:59:8b:34:13:44:9b:0f:16:44:0a:39:a6:
                    a3:4a:93:cc:ae:1d:7c:77:c8:d5:14:fc:32:e9:49:
                    14:bf:3f:b3:fa:da:22:4b:0d:d8:90:db:39:18:d0:
                    05:0d:49:50:99:2e:4a:a5:37:2c:71:4c:8f:00:14:
                    45:1f:55:b0:65:93:3a:ae:16:1d:50:6f:03:36:56:
                    e9:17:ee:60:6e:27:33:50:db:fe:51:fa:28:3a:06:
                    17:54:b7:56:4a:b2:58:78:28:b3:de:2d:b2:57:72:
                    95:b8:e0:8d:ed:cf:2a:4f:27:3c:ab:c3:cb:a1:00:
                    2a:20:05:d5:e7:3f:a4:9c:14:c5:17:b5:f0:67:69:
                    c3:d2:cd:e8:72:16:ee:3f:a5:7b:22:c5:7e:65:08:
                    fa:70:7a:8f:5e:50:73:56:6f:c9:54:5b:68:1c:f0:
                    2e:04:53:e4:47:f6:84:44:a2:5a:f0:67:cd:fd:26:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E6:9C:91:6B:57:E2:26:A3:E4:F2:04:FC:F1:25:D4:D0:41:6B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eeb8e8bd-0fd6-3bd5-9dbf-e0ce03b7e114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:30:12:e3:6a:54:34:32:c8:1f:54:3f:d1:dc:b4:04:eb:
         27:09:7a:d2:02:cc:eb:96:d1:c3:94:89:1c:ca:be:dc:3c:f9:
         a6:70:16:9f:8c:7a:0d:da:97:75:84:2d:e0:dd:42:2c:30:98:
         84:a0:28:b5:f7:d3:94:a8:6d:5f:15:05:9b:cf:99:4a:28:2c:
         be:61:ca:61:e4:5c:cf:eb:4d:a4:7a:ce:39:b9:ff:56:11:c0:
         9a:b7:53:7e:9d:52:9d:51:af:ee:85:7c:38:db:4e:7e:27:ba:
         1b:9f:42:a1:b3:8a:5f:94:48:4d:6b:43:10:ba:38:04:41:6c:
         ec:5e:f0:74:b9:8b:79:77:ef:d2:e7:96:e8:0f:31:14:c8:29:
         57:fb:1b:95:97:da:35:c7:5c:45:99:44:f6:b5:a2:5f:79:85:
         d6:78:cc:b1:c9:e1:51:d1:ff:78:8c:44:9f:9a:f9:a8:43:e2:
         a6:d6:36:56:52:16:32:68:b6:c1:12:8a:7b:19:b9:f0:af:77:
         71:b1:3d:de:0e:a5:4a:b4:f5:1e:12:20:19:49:d7:76:ff:64:
         c4:cc:67:60:ef:2b:78:e4:10:66:c9:a9:fe:62:25:6c:6a:57:
         80:8b:40:36:d5:83:ed:99:db:33:f6:0a:41:43:1e:c2:96:ed:
         42:a4:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:30:51 2026 by rpki-client