Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/014ff1eb-73d7-34fa-acd7-8dbdd4699da1.roa
File:                     014ff1eb-73d7-34fa-acd7-8dbdd4699da1.roa (raw, json)
Hash identifier:          W5BHw/MYpRoIWxO1a3OL4lW+DfA94N5l0a+JuEAXuj8=
Subject key identifier:   18:BD:5D:71:A1:34:FE:B3:C4:C7:3E:2B:82:C8:5C:9F:2D:1F:52:E3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5A22F1438B05DC6ADEE26280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/014ff1eb-73d7-34fa-acd7-8dbdd4699da1.roa
Signing time:             Thu 01 Oct 2026 00:28:36 +0000
ROA not before:           Thu 01 Oct 2026 00:28:36 +0000
ROA not after:            Wed 30 Dec 2026 01:28:36 +0000
asID:                     16509
IP address blocks:        72.244.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:22:f1:43:8b:05:dc:6a:de:e2:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  1 00:28:36 2026 GMT
            Not After : Dec 30 01:28:36 2026 GMT
        Subject: CN=0d2f0786-adcb-46d2-b9db-5d9ae078393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:68:83:60:e6:3e:2e:76:05:e3:7d:4b:64:
                    bd:d5:7d:f0:59:cb:d2:f9:0c:ad:d7:df:fe:74:f1:
                    e1:02:8b:2a:35:bc:8e:5e:71:1f:55:ba:d3:8a:7d:
                    e2:90:7c:fb:2f:8b:e2:69:02:92:d3:4c:9a:ec:4a:
                    51:fc:08:e7:bb:28:e9:af:c3:2a:ff:b3:35:ce:98:
                    fb:d0:08:8c:6c:3a:d0:47:e4:71:29:d5:57:db:ca:
                    2b:27:0d:a0:35:7d:41:71:b6:52:f6:9f:f5:97:c4:
                    b6:d8:10:d5:80:e4:33:83:ac:b5:3f:70:97:f7:28:
                    47:37:fa:a7:a2:f3:a9:de:02:ca:43:e7:4f:86:7d:
                    19:51:c0:ab:37:2f:d1:19:5f:8b:c2:7f:69:88:85:
                    3b:a6:f1:b8:ca:fc:e3:57:78:e3:45:13:cf:f3:a5:
                    ea:89:9d:c4:69:c9:90:5b:0f:fc:64:fa:9e:2b:d8:
                    0e:16:38:a8:63:b7:66:d1:fe:59:3d:ae:1e:6d:34:
                    f8:0e:70:f2:72:87:a5:e6:1f:ae:a7:c8:bb:2a:31:
                    90:c3:e2:42:87:12:18:3f:9b:1e:a4:ce:18:46:84:
                    09:6f:72:c5:bd:60:d4:8f:01:93:75:c2:37:8c:67:
                    f8:de:83:56:60:b5:ee:fd:ae:87:ea:fa:c5:a9:7d:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BD:5D:71:A1:34:FE:B3:C4:C7:3E:2B:82:C8:5C:9F:2D:1F:52:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/014ff1eb-73d7-34fa-acd7-8dbdd4699da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c3:18:58:aa:23:cf:38:31:c6:90:e5:84:43:e2:6a:95:e2:
         41:05:26:9e:0a:b4:f6:f1:28:e3:97:64:b8:a3:3f:1b:a0:4b:
         33:23:ef:92:2e:92:5b:14:ac:c8:8e:10:70:72:4a:ff:73:b7:
         e1:4d:b2:21:ef:01:00:56:d9:fd:3b:27:5b:6c:c9:02:00:e4:
         92:84:3b:fb:5b:e4:bc:85:e1:e8:10:fb:b7:47:c7:bc:ad:08:
         2b:ba:3c:e6:53:af:0f:3a:03:d8:01:c9:f1:ee:5b:38:94:1f:
         b8:65:1a:29:91:26:f5:4a:85:b2:53:d9:75:d8:ed:4c:40:68:
         05:7c:05:e1:fb:82:30:84:b6:06:a5:64:d2:37:cd:8a:7f:95:
         ae:9b:c2:45:24:ca:0b:01:39:73:2c:b7:4c:fb:5f:2b:15:39:
         74:19:a9:33:06:20:50:26:cd:be:2a:7b:84:9f:50:cd:d7:3a:
         59:aa:44:80:71:c4:dd:6a:da:66:b6:29:eb:3f:02:8d:0f:09:
         df:f6:01:81:4e:d2:76:e0:65:8f:34:21:7c:45:9f:4a:66:d4:
         8b:11:09:ef:c8:24:e0:d8:1c:28:03:21:c5:38:6f:fe:23:2b:
         1d:ec:c8:46:a0:88:cb:a4:ed:06:a2:bc:4d:3d:2d:ee:d1:9b:
         bf:c8:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:42:47 2026 by rpki-client