Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa
File:                     c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa (raw, json)
Hash identifier:          oxW1Wf44zgnr+2u8gOs4RjIfis1nEnOlEq45alsjO9A=
Subject key identifier:   73:AC:B7:5B:4C:76:7B:12:7C:36:28:FB:CB:C8:33:18:ED:E3:3F:E7
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584EA78879D0ED76CD2117D5DC28
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36007
IP address blocks:        52.144.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:79:d0:ed:76:cd:21:17:d5:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1a5dc8ae-5189-45c6-9a55-e2e1c4d00a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:54:3e:72:75:88:0f:e8:e8:f3:cf:e5:88:
                    39:d4:0a:5b:99:44:dc:fd:8d:0e:d3:f9:21:f9:56:
                    c9:84:02:0e:d9:29:b3:61:25:d0:96:18:6a:f2:58:
                    19:01:0b:d5:f0:4e:b1:0c:67:44:ca:09:a1:16:2d:
                    a7:22:c8:a0:65:a0:18:c3:b5:69:a2:76:fa:9c:7c:
                    ab:91:79:da:d5:dd:13:b1:3b:77:9b:c0:fa:1b:b1:
                    fe:7b:c0:2f:c8:3a:b7:79:c1:8f:3b:ab:74:3a:b0:
                    fd:e0:bd:54:d2:f5:a0:ee:30:44:ab:7d:ad:4d:8a:
                    26:17:8f:fb:35:44:3b:06:93:51:21:15:27:67:78:
                    7d:20:47:59:1a:28:d7:ef:ad:4a:f7:4e:24:2e:23:
                    bf:bb:15:3b:c9:2b:3d:26:71:cc:7e:2a:c4:8e:28:
                    6c:45:04:7b:d4:12:b1:34:d2:12:52:be:2a:df:34:
                    ef:10:c8:a2:34:64:da:e1:21:d1:82:b2:77:4d:32:
                    03:0a:d3:e7:3f:43:49:96:ae:8a:cb:3c:e7:6d:76:
                    43:93:f6:e4:37:54:1f:9c:40:18:fb:f5:75:c3:cc:
                    f7:bf:87:f4:ad:4e:5d:73:6a:99:67:2b:13:d0:13:
                    36:45:fc:a9:2c:92:e3:e5:53:78:f1:ed:96:b7:7c:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AC:B7:5B:4C:76:7B:12:7C:36:28:FB:CB:C8:33:18:ED:E3:3F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:98:e9:aa:27:7e:24:a7:d3:a0:1b:c6:4a:a6:c6:50:e0:34:
         1d:12:8b:f7:6e:ab:c6:4a:33:07:f8:98:29:84:5e:e5:c1:41:
         2f:22:d2:a1:c5:6f:88:d4:a7:26:ed:cb:1e:54:88:4a:6f:78:
         52:d2:a0:31:ab:33:d4:9e:59:e8:7e:82:27:28:f2:b4:fe:9b:
         3a:ef:50:05:00:ea:6a:53:03:04:af:d0:53:e8:ad:a8:24:98:
         ad:39:ab:d8:43:6a:d1:5a:d9:c8:03:a5:0d:d8:32:9d:94:dc:
         e1:5f:ba:f5:0e:fb:26:3d:3c:f0:f9:18:0a:a1:ff:fa:3c:5a:
         97:26:a1:e7:87:06:3e:1a:4c:90:3d:9e:70:3f:39:87:91:1b:
         bb:3d:1e:5e:c3:93:69:cc:4f:5d:77:1e:4d:b4:8a:c7:7d:a7:
         ee:c4:be:bd:88:6a:b3:30:cc:05:bd:55:b5:56:31:a8:22:e6:
         5c:e5:3f:cf:66:b5:75:10:c1:d0:bc:a8:62:87:27:e0:9f:15:
         88:c6:01:ac:8a:1f:7b:6f:91:5e:a2:66:26:70:b9:1b:03:4b:
         17:05:a7:06:35:8f:4a:60:b6:fe:5e:12:cd:a4:c0:09:e2:d1:
         c0:2a:a5:6b:2b:e6:41:13:2b:b6:de:c1:35:2e:5c:21:f3:08:
         97:3d:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:52:13 2026 by rpki-client