Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/884a8a6b-e7b8-3627-b2b8-a85815b060f8.roa
File:                     884a8a6b-e7b8-3627-b2b8-a85815b060f8.roa (raw, json)
Hash identifier:          drIc9Zc+5Hj62IjoivduW797vDLRyImZaAVOPy5v9T0=
Subject key identifier:   4D:D2:90:2C:5C:68:40:D5:61:14:BA:54:96:C3:AA:D5:2E:F4:31:9E
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584F19FCF90C4C4648088AC23B80
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/884a8a6b-e7b8-3627-b2b8-a85815b060f8.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        72.13.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f9:0c:4c:46:48:08:8a:c2:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=e54c2665-c163-45d6-9b5d-cdc264a73676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:00:16:db:fe:57:b5:c8:6c:71:3e:bb:0c:
                    e2:f5:99:05:c5:d5:e6:e3:18:34:2c:70:04:b8:fc:
                    f6:d6:b5:b7:51:d9:15:26:55:45:7f:30:19:d6:57:
                    a3:6b:aa:c8:d8:dc:cc:d0:ca:47:5e:40:2a:2b:e1:
                    c5:53:fd:1a:72:aa:d6:b5:bb:4c:68:d6:d1:94:8c:
                    35:d9:1e:ae:0f:51:eb:67:fd:a1:bc:39:3a:ff:2c:
                    c1:2a:5c:ae:55:86:8a:24:a6:c8:99:d8:6e:a5:32:
                    50:2a:20:4f:f8:2e:fc:20:49:e8:eb:b4:7d:a8:e1:
                    c8:f9:b2:33:3d:04:37:3d:c2:0a:41:4b:23:c3:2b:
                    64:59:3c:69:11:7c:da:c2:ba:57:ca:8b:24:7e:b6:
                    dc:c0:45:f9:8b:ab:bc:91:f7:08:99:e3:fc:79:30:
                    74:c0:df:e5:96:ff:cb:03:08:72:8a:71:36:66:04:
                    3d:d7:87:63:71:2d:91:cf:b3:94:17:53:c7:9c:1f:
                    7a:b4:ca:12:24:f0:9a:26:a4:77:e3:79:e6:00:09:
                    02:3f:46:b5:b4:de:5c:59:f8:76:a6:8b:2a:6d:dd:
                    b4:a9:b9:99:41:ea:8d:6b:0d:1e:40:de:3b:03:0a:
                    32:14:7a:10:8e:12:6c:1d:d5:a3:65:1a:3b:88:4f:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:90:2C:5C:68:40:D5:61:14:BA:54:96:C3:AA:D5:2E:F4:31:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/884a8a6b-e7b8-3627-b2b8-a85815b060f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:49:92:98:75:61:b2:84:70:b5:7c:52:37:82:b3:ad:54:53:
         0b:3f:55:cd:2a:5c:c8:09:de:9e:d7:00:80:d0:dd:7c:29:00:
         c2:13:02:19:ae:44:af:8e:e0:db:50:ba:75:65:c3:ec:97:80:
         db:ee:cd:aa:d2:e2:29:d6:fd:93:d3:07:33:5a:97:63:1b:09:
         6c:b1:88:ef:6b:39:46:26:7b:71:fb:09:61:e7:9c:af:d8:91:
         08:79:76:dd:67:93:3b:64:48:c4:dd:0f:ef:83:22:f9:87:76:
         22:93:68:98:5b:dc:89:56:25:2c:54:1c:b0:04:76:21:52:3d:
         a9:5c:0a:12:c3:f9:14:ab:94:8c:40:4c:4b:51:f5:b1:7d:dc:
         51:67:d0:41:00:fa:11:0a:21:58:56:03:49:12:3f:96:0a:a4:
         11:cd:14:b3:42:26:97:fc:c9:c6:42:97:39:80:fa:b7:fd:79:
         1f:f0:e1:47:35:c4:6d:d5:72:79:0d:73:d0:0f:25:68:f7:1a:
         30:17:53:1d:ad:bd:dc:c5:d7:a4:87:f1:bf:20:ff:54:0d:68:
         c9:b8:5c:9e:1d:b1:fe:10:eb:60:81:7f:58:13:75:16:50:79:
         53:19:fb:28:1b:3b:7a:33:60:65:1d:76:78:8d:ee:36:d1:80:
         c8:7a:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:20:55 2026 by rpki-client