Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa
File:                     1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa (raw, json)
Hash identifier:          8hVBbcQXOnvwppCgjNQneSmc7fWlnSsAg9GpHvdsKxU=
Subject key identifier:   1A:46:9F:79:94:B2:DA:E7:E7:6B:54:CB:06:2B:36:45:9E:0A:55:B3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7933145F6B8AE619DE69700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        72.244.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:31:45:f6:b8:ae:61:9d:e6:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=38ebb9f2-4bdf-4f06-9a96-92fe61fef405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:42:5b:4f:f7:9b:a8:f4:71:49:ad:4e:a6:
                    49:84:90:71:09:55:ee:69:5a:5d:25:eb:e2:67:21:
                    d6:69:c7:a0:96:46:78:6a:de:7e:d0:8a:46:57:58:
                    bd:05:8f:80:b4:21:17:9a:51:99:80:df:59:ef:89:
                    7c:d5:7f:11:31:12:d2:0f:20:92:33:2e:c8:bf:fc:
                    79:b5:78:8f:98:7e:f3:4f:d6:ca:d3:29:5b:52:c9:
                    bd:8f:fb:5f:06:56:3b:48:ea:74:1e:e4:88:ba:0c:
                    0d:5b:a9:2e:59:4f:fb:24:f8:6c:f1:bf:52:3e:cb:
                    a8:fc:65:54:55:d8:61:d2:49:65:05:9f:9d:ce:4e:
                    29:36:1f:8a:65:d7:5d:f4:3c:62:c0:18:23:37:5e:
                    43:cd:68:94:e3:11:7e:0d:2a:99:39:c7:cf:1c:21:
                    b9:b4:70:0e:82:1f:fd:fa:55:df:18:4d:77:84:a1:
                    93:fb:d1:32:37:eb:b4:ff:f8:19:ea:a1:57:2f:f5:
                    ca:2e:36:59:4c:ee:41:3f:e1:76:7a:fb:d2:bd:02:
                    b3:e4:2f:eb:65:50:17:b4:27:5b:ac:de:f5:bb:bd:
                    fd:04:89:1d:51:13:ce:5d:ae:03:a8:3f:52:56:3d:
                    dc:c8:6a:d2:6a:1a:dc:91:8d:d3:e8:05:77:b1:1e:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:9F:79:94:B2:DA:E7:E7:6B:54:CB:06:2B:36:45:9E:0A:55:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e2:0c:97:56:25:a3:03:23:22:34:1c:b3:66:31:30:3a:0a:
         16:e2:33:6d:00:b3:37:64:e2:42:b1:da:4a:78:bb:94:ba:24:
         cc:27:86:ed:99:30:d2:7e:22:a6:70:3c:cd:cf:00:d4:44:9b:
         01:61:ce:80:f2:86:a7:42:33:a3:49:c5:5c:f5:0c:58:ef:9b:
         96:65:ab:11:73:09:bb:d5:fa:f5:22:f4:fa:fc:77:a1:17:a5:
         8f:c0:79:5b:6c:8e:b3:d8:c3:eb:2f:22:66:50:8b:92:45:bd:
         94:f7:74:b2:e1:70:f0:b1:a8:62:bc:4d:e7:8b:91:72:cc:ca:
         c3:d1:aa:4a:4e:2c:ff:f7:5d:dc:b0:40:d2:e7:c6:4a:31:d4:
         9c:e9:48:c6:f0:e0:99:72:24:61:de:b2:da:d4:47:c0:a8:1c:
         6a:bc:b9:9d:52:47:75:c8:54:f0:07:d2:22:6d:ab:fc:06:72:
         a0:1d:a3:b9:ef:84:23:ed:e7:f1:8d:20:59:3b:72:8a:44:67:
         a5:08:3a:5f:fc:a4:ab:8b:71:ea:30:b3:34:fa:b4:e6:26:87:
         d7:c1:81:cb:06:f6:5d:9a:c3:44:01:9f:1d:4c:af:5f:83:0c:
         ef:c0:8e:40:b1:76:c5:bd:8a:58:62:80:f7:e5:bc:c0:2a:ea:
         0c:51:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:39:19 2026 by rpki-client