Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32789ee8-c005-3573-9a43-124dade3bf07.roa
File:                     32789ee8-c005-3573-9a43-124dade3bf07.roa (raw, json)
Hash identifier:          QtHjSH6rVPy67fhc1XWutLKX2x17adRqMJBqEE+tecw=
Subject key identifier:   93:FF:AB:C5:94:0C:0B:8B:4D:64:4B:66:B6:D8:9A:38:F1:D2:BF:60
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D0217914C6E253D974B56A580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32789ee8-c005-3573-9a43-124dade3bf07.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     5650
IP address blocks:        68.167.28.0/22 maxlen: 24
                          72.244.96.0/22 maxlen: 24
                          72.244.100.0/22 maxlen: 24
                          72.244.104.0/22 maxlen: 24
                          72.244.112.0/22 maxlen: 24
                          72.244.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:91:4c:6e:25:3d:97:4b:56:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=451274b6-6db6-4ceb-9ba8-3d4c4bd43820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:7c:92:c7:3a:35:38:fc:8c:34:c4:bd:1c:
                    57:33:8c:58:fd:3e:45:34:f3:77:ab:dd:ec:ad:7c:
                    a3:39:ff:f1:58:75:42:03:b6:4e:1b:7a:bb:2e:85:
                    fe:15:26:7d:b1:0c:ff:3f:13:e7:34:43:8d:d5:13:
                    7a:a4:83:cb:09:2f:02:58:ed:79:a4:c8:35:bd:e8:
                    2e:fa:9a:32:99:50:df:fc:b2:64:d5:93:8d:b0:92:
                    a9:b6:e0:15:ec:d8:d3:ca:6b:70:6e:4d:de:20:ef:
                    0e:fb:c7:f0:f3:c4:a7:40:38:40:2b:a4:02:09:9d:
                    13:57:63:36:d7:9b:70:52:f2:43:28:84:55:e1:04:
                    59:b7:59:24:e5:43:f3:46:f1:8d:20:2f:20:95:e5:
                    90:2d:32:7e:5a:79:40:f0:15:fc:ff:ec:5b:5a:6e:
                    43:ef:aa:22:a3:6b:8a:b6:b6:48:67:8e:64:cf:e7:
                    18:3c:65:91:2b:44:ab:e1:95:c1:7d:0f:6e:71:cc:
                    e9:4b:59:85:e5:f1:13:cc:27:af:c1:94:f3:82:f4:
                    58:bc:2e:79:87:f1:10:ea:0d:e4:a1:d0:04:c9:fc:
                    42:cd:3e:b6:d1:6b:e2:3e:13:1b:a1:96:3a:8a:e8:
                    2e:e1:d5:c4:f6:f1:fa:e9:21:ab:7f:e1:81:b5:60:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FF:AB:C5:94:0C:0B:8B:4D:64:4B:66:B6:D8:9A:38:F1:D2:BF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32789ee8-c005-3573-9a43-124dade3bf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.28.0/22
                  72.244.96.0-72.244.107.255
                  72.244.112.0/22
                  72.244.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:c2:e4:73:85:a1:ad:cb:a3:f4:e4:aa:b1:4d:8f:98:e2:dd:
         ee:fc:5a:cb:d0:66:4e:dd:b1:28:f6:6a:05:81:4e:b7:71:e7:
         fa:69:88:18:a7:0f:a0:4b:47:75:aa:90:ac:00:cf:50:f2:0b:
         7e:48:2c:57:1a:21:6a:26:e5:cf:a9:c7:24:2b:86:11:9f:3f:
         3f:aa:1a:6d:a5:38:79:04:dc:fd:9c:c0:c5:60:9e:67:69:c4:
         17:ed:54:c0:ce:85:71:cd:69:4e:49:b8:84:61:19:e6:4e:36:
         72:84:95:42:ef:8d:6c:c6:fd:21:cf:91:16:ad:aa:54:4b:a0:
         d6:80:95:34:a4:70:0d:0a:e7:10:9b:fb:4a:22:10:e7:6e:c7:
         5f:71:24:d4:58:de:91:1e:6b:a1:1a:fd:b0:6e:2e:0a:17:7e:
         6d:f8:43:5a:ea:4a:ac:41:c2:13:49:05:3e:65:49:97:a8:85:
         f8:98:1d:ed:44:2d:71:1a:61:a8:a1:81:86:91:13:7e:53:9a:
         63:9d:c5:10:84:97:0d:f0:98:37:c9:1b:e5:0c:8b:26:53:f5:
         3c:f2:cb:b7:cb:3b:6c:12:6d:e8:03:fb:dc:ba:15:12:48:22:
         22:fb:ce:53:52:50:dd:b4:dd:93:72:7e:de:4e:b7:2f:ac:6a:
         cf:f2:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:48 2026 by rpki-client