Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
File:                     10f9106f-38d7-334c-be0c-2e81c68cb772.roa (raw, json)
Hash identifier:          sWqmq3hMt8NPvJKxovVd9NWE16lyXQGAn8bqL5w/4tw=
Subject key identifier:   45:94:B8:D7:2F:B3:DC:9C:90:72:88:B7:A1:68:A0:1D:8F:1B:A3:C8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF9E21E785E35A9A97E128520
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     3257
IP address blocks:        72.245.192.0/21 maxlen: 24
                          72.245.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:1e:78:5e:35:a9:a9:7e:12:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=ded57d9e-b26c-4d8b-880f-0da992043664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:e6:52:51:33:43:0c:ed:34:1f:67:10:5c:
                    ad:b1:3f:35:e5:51:2b:85:b0:48:d7:18:1f:2b:cb:
                    b0:fe:4f:e8:43:2e:b1:c5:61:a4:f3:52:d8:56:7e:
                    e2:8c:b7:0f:d1:84:77:5f:4a:1a:3b:5a:47:9b:89:
                    a8:6d:c9:79:e5:db:fb:91:42:30:8d:55:ad:f6:20:
                    4b:1a:7d:47:c2:d3:ce:50:93:63:c9:44:02:35:68:
                    82:00:ac:8c:39:9a:95:dd:f1:ca:a3:d8:b4:50:ce:
                    7c:d4:2d:c2:0d:3c:38:cd:34:ff:9b:67:dd:cb:b8:
                    15:14:80:af:b6:58:68:4a:71:a9:9d:ce:79:ec:c7:
                    ed:d9:32:60:3b:4e:9b:b5:16:d2:da:49:86:81:ca:
                    ee:90:60:07:71:6f:68:00:56:92:fa:b3:14:2e:a3:
                    59:ef:82:40:11:6b:7c:37:d1:78:97:ea:cc:e7:0b:
                    da:43:3c:02:da:cd:9d:0f:43:c4:25:34:c0:64:99:
                    e1:bf:a2:4b:4b:93:bc:60:c6:a6:17:32:6e:3c:9f:
                    da:06:66:0f:46:18:08:59:a0:1c:54:76:aa:7e:2b:
                    6e:4a:c3:a3:09:e0:f9:20:00:84:52:b4:4d:46:36:
                    a6:8b:ea:74:d2:c6:b1:72:6c:df:f2:24:76:67:d5:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:B8:D7:2F:B3:DC:9C:90:72:88:B7:A1:68:A0:1D:8F:1B:A3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.245.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:f7:dc:60:89:63:a1:dd:1b:00:ef:10:fb:b4:c4:58:7b:
         43:b0:7a:85:c9:ec:84:a6:2a:8a:14:55:da:e5:b1:2d:54:bc:
         b1:bd:cc:12:c3:f6:8d:80:0a:a3:f8:7b:58:a4:ae:12:72:06:
         2b:48:33:87:14:7a:8c:c5:b4:b1:71:e8:a9:d3:8b:f3:58:20:
         96:52:93:4e:3a:2f:b7:4b:c5:a1:9c:27:08:51:98:0b:5e:5c:
         4c:10:9c:05:ec:fc:8d:dd:9a:ad:21:0f:95:0e:ed:06:88:de:
         db:9f:ee:ea:1f:c2:54:da:a0:45:8e:51:24:8c:82:1d:3e:71:
         6a:39:fa:b1:59:96:94:87:4c:a4:38:d1:e9:17:18:04:e8:77:
         e6:b4:0d:e6:87:63:ea:a1:c9:30:6e:1f:07:7e:09:c1:79:b4:
         df:3a:b8:dc:16:3f:3e:03:dd:3c:51:9d:e0:eb:34:34:0b:ec:
         26:73:3b:ea:b9:56:73:fa:3b:73:71:a0:5f:b4:62:89:6e:46:
         ab:66:e2:dd:8f:d0:c7:76:5e:7a:ca:c0:ad:50:88:36:89:00:
         b4:cd:75:d3:d7:f2:52:73:f2:7b:64:b5:a4:04:72:78:e6:62:
         62:67:34:eb:79:06:a8:5f:ef:80:06:37:3e:18:0b:65:9d:1a:
         78:81:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:30:41 2026 by rpki-client