Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa
File:                     daba5534-f075-3304-b7ba-2bc53bbd08cc.roa (raw, json)
Hash identifier:          NQYWCw0LPa1LvPmoS6CdyhV8xLoj+mYH1v7OsbMpetQ=
Subject key identifier:   1F:55:7D:2B:A1:D7:74:24:0D:B7:04:95:EA:CC:5E:14:ED:53:82:F6
Certificate issuer:       /CN=91d07432-fb87-439b-b14e-e063470edfd2
Certificate serial:       010D0C9F4328584EED5217B76C94F10EF05F6800
Authority key identifier: FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        72.18.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:17:b7:6c:94:f1:0e:f0:5f:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d07432-fb87-439b-b14e-e063470edfd2
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=c73408db-6890-4ced-bbc2-049ecb0714c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:ca:33:58:14:cc:4f:64:83:e5:fb:34:b8:
                    57:76:73:16:30:37:bc:72:1c:7b:ff:54:96:60:72:
                    5e:ff:4f:48:a2:7c:c6:7a:ce:e9:e4:65:01:19:e2:
                    1f:38:15:7e:42:3e:82:b5:76:9f:df:51:38:fe:fa:
                    50:63:b8:69:75:22:1e:5c:8c:b2:7a:2c:ed:8f:ab:
                    be:79:d7:69:af:8e:51:ba:89:9a:5a:97:fe:0d:23:
                    2c:56:e0:da:80:6f:4a:4e:9e:9a:49:e5:24:81:b1:
                    c6:a7:21:3b:33:af:d1:3b:4c:0b:84:53:a3:9b:4b:
                    10:dc:53:42:01:05:01:83:e5:38:86:7d:cc:36:28:
                    ff:77:f1:ea:da:6f:81:da:0f:95:d9:f5:f6:bd:fa:
                    b2:5b:82:42:bd:6b:26:6c:10:4e:a1:ee:36:da:a8:
                    a2:9c:f7:13:e1:05:4f:45:d0:cc:40:77:9d:d2:95:
                    9c:b8:88:2b:4d:ff:a1:ee:3b:88:d2:c9:3e:eb:9f:
                    5b:f6:93:9d:b5:62:c9:5e:61:4f:0b:72:35:9f:88:
                    51:99:57:97:8b:1d:ba:68:30:ec:1b:c9:23:88:ee:
                    84:78:3a:82:87:a3:f7:a1:3c:45:08:17:47:b4:97:
                    06:4f:0d:ed:fa:d1:e4:04:ae:13:14:5f:66:a9:6d:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:7D:2B:A1:D7:74:24:0D:B7:04:95:EA:CC:5E:14:ED:53:82:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/daba5534-f075-3304-b7ba-2bc53bbd08cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:fb:59:0e:0d:28:bd:c0:8c:3b:8d:4c:8c:f9:ab:ac:b8:
         5b:16:04:86:7f:df:1b:5b:f3:30:a1:07:ae:9a:32:26:d3:3e:
         2f:da:8d:1e:20:fe:20:69:ea:62:1a:64:61:85:a1:58:f3:3f:
         19:aa:22:9c:ab:93:91:3b:29:c5:72:b3:56:95:a3:a7:1a:24:
         fa:4f:bb:cc:74:56:06:04:6c:90:2b:b2:07:a2:a6:0f:b7:99:
         19:fc:2d:5f:d9:98:4d:30:d8:fd:56:e3:be:2b:64:f8:5e:9f:
         45:e1:38:b5:ba:e4:23:bc:7e:7f:b4:6c:21:aa:7c:04:81:0a:
         4f:f4:5c:94:93:75:ba:88:22:eb:1a:68:e4:4d:d4:4a:ff:8a:
         8b:1a:fc:cc:23:f6:16:c3:a0:f6:b4:1d:ef:41:08:d2:9f:33:
         40:c3:5c:b3:08:31:7f:ef:41:fe:87:47:d7:48:d6:ed:b8:05:
         43:7c:9a:f5:bd:0b:f2:6a:40:09:bf:40:05:c7:57:6c:fb:07:
         86:a9:de:83:66:d8:62:49:d5:7f:98:ac:f0:29:f1:e3:a2:f1:
         1c:7c:d4:98:83:6d:70:b5:be:0a:fa:e9:1d:6b:d4:5d:94:40:
         e0:be:af:4c:da:37:9a:63:2b:55:e7:c8:fb:b9:04:79:f8:12:
         3b:59:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:56 2026 by rpki-client