Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbf6b138-9ab2-3bf1-b1f8-5e8016a3cecf.roa
File:                     fbf6b138-9ab2-3bf1-b1f8-5e8016a3cecf.roa (raw, json)
Hash identifier:          2CLrsaZKdnCPIi82rimvEOP9q4BIkQc7pxANxq3Yz7c=
Subject key identifier:   2C:2E:9B:16:F6:D0:28:93:18:15:A0:FF:2D:B4:29:C0:52:6E:E5:BC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E46BF25E2EBD6978B07061C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbf6b138-9ab2-3bf1-b1f8-5e8016a3cecf.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     834
IP address blocks:        72.244.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:25:e2:eb:d6:97:8b:07:06:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=76b9d319-1d7f-4078-979a-2c68edbfeed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:6c:6f:0a:79:7f:8a:08:de:92:2b:73:25:
                    60:17:ba:23:83:09:1f:d4:ec:e4:9c:56:a3:14:08:
                    32:3c:80:96:cf:e4:61:2e:a7:d0:7a:2a:4e:e4:90:
                    99:f0:2a:f8:55:f4:7e:8b:00:95:5b:3f:fe:fc:7a:
                    2b:10:83:ca:64:68:ff:a8:51:fb:6b:9c:28:e1:86:
                    04:e2:12:47:de:5b:57:07:64:a2:30:6a:a8:6d:8e:
                    bf:85:5f:cc:e4:b9:70:e8:e3:21:1d:25:0a:f0:b6:
                    78:fb:eb:b7:a4:33:ee:3d:79:6a:32:58:9f:c7:33:
                    5a:9c:07:ed:95:e6:dc:f2:db:15:2c:41:7b:d9:ac:
                    df:c7:9f:6f:cf:c8:d9:6e:3c:ab:df:f4:23:a0:d3:
                    01:96:d3:fa:fa:a5:d6:a9:a0:6a:fe:fa:c3:40:4d:
                    70:f6:57:a3:80:8f:81:43:52:57:d1:b5:7d:07:bf:
                    bc:cf:e9:96:f1:6c:dc:39:36:7f:87:f8:a3:31:f5:
                    62:c3:ce:90:e8:21:57:a3:42:2a:09:dd:b9:fb:98:
                    9e:c1:90:2d:b8:59:bb:d8:f0:15:41:c4:ee:74:19:
                    dc:55:f0:f9:45:fd:9c:22:1d:d9:0f:c6:fd:e3:76:
                    69:1e:26:9d:4a:0d:da:31:58:f1:bf:a8:eb:05:55:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:9B:16:F6:D0:28:93:18:15:A0:FF:2D:B4:29:C0:52:6E:E5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbf6b138-9ab2-3bf1-b1f8-5e8016a3cecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:95:8b:5c:0b:a9:25:3d:73:3b:9d:90:11:54:c6:d0:88:
         b4:5f:4d:f2:08:5d:3b:24:02:9d:ad:a1:6b:b7:c9:d7:84:64:
         ba:51:54:54:33:a7:c0:3e:17:d1:e0:1e:60:be:2e:81:34:0e:
         33:1c:49:ba:79:0a:b4:25:f9:2c:6a:35:db:4d:c8:c7:9d:dd:
         1d:50:33:aa:5b:d3:99:72:4a:54:c1:e3:76:2c:07:bb:d6:a5:
         7a:33:10:17:42:fe:d8:0a:a7:bc:62:8f:d0:2f:db:96:f1:f5:
         29:11:e6:a1:31:cd:7b:65:0b:8e:65:08:63:c9:63:ae:8d:bc:
         67:f7:33:f4:3c:e5:b0:80:29:48:56:3a:d9:14:e5:32:cd:65:
         b3:a6:3d:9a:48:55:f0:6b:01:4e:34:91:72:67:2b:8a:99:84:
         fa:31:77:02:2c:ec:61:6c:dc:dc:9e:b0:43:5c:52:97:6e:75:
         e9:33:ae:58:98:f8:be:08:18:16:10:55:9c:a2:e0:f3:06:73:
         6b:04:ea:fd:37:24:4a:59:3a:b2:5b:19:a9:65:62:59:3c:18:
         e5:43:7a:ca:e1:33:61:5e:bb:80:6f:58:cb:66:77:6e:f8:26:
         11:7f:01:bd:05:f9:ac:bb:8d:b6:f0:63:50:db:51:07:9c:e4:
         9d:31:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:49:34 2026 by rpki-client