Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/35d1724f-dd99-3158-8e46-a19b1aaf9a5d.roa
File:                     35d1724f-dd99-3158-8e46-a19b1aaf9a5d.roa (raw, json)
Hash identifier:          l5SxNZF/tTPXXqCTfilba4mlgelPLNUYrbWgqZDSl8Q=
Subject key identifier:   DB:56:C2:B1:32:FC:3F:7E:C4:75:87:ED:E9:B7:75:3B:68:DC:51:5A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B970CDDF724A72DC0E1859968
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/35d1724f-dd99-3158-8e46-a19b1aaf9a5d.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     395793
IP address blocks:        72.13.224.0/24 maxlen: 24
                          72.13.225.0/24 maxlen: 24
                          72.13.228.0/24 maxlen: 24
                          72.13.229.0/24 maxlen: 24
                          72.13.230.0/24 maxlen: 24
                          72.13.231.0/24 maxlen: 24
                          72.13.234.0/24 maxlen: 24
                          72.13.235.0/24 maxlen: 24
                          72.13.238.0/24 maxlen: 24
                          72.13.239.0/24 maxlen: 24
                          72.13.244.0/24 maxlen: 24
                          72.13.245.0/24 maxlen: 24
                          72.13.250.0/24 maxlen: 24
                          72.13.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:dd:f7:24:a7:2d:c0:e1:85:99:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=34cc4f4f-b696-4896-ac2e-06ff703ec718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:63:ba:1a:1f:74:61:10:82:4e:04:bc:b9:
                    35:c8:35:af:73:f3:05:87:e3:6d:c5:bf:ea:0e:26:
                    5f:6e:66:24:9b:7b:45:ab:44:25:94:97:61:55:89:
                    c8:f6:36:e5:3e:1a:73:ab:36:e9:33:f6:05:2d:59:
                    1e:00:74:61:ae:c2:e0:60:5e:42:d2:77:e6:71:99:
                    10:73:90:ff:8f:4a:b2:58:86:c5:1f:c3:a0:42:a0:
                    7f:7e:ef:b8:24:38:9a:5b:74:6c:2f:ae:67:96:59:
                    68:87:13:bc:7b:de:64:8e:c9:44:b1:5e:aa:12:c4:
                    2f:43:39:b0:f0:34:ed:1d:5a:15:8d:89:75:52:31:
                    38:69:ad:f0:12:bc:ed:4d:81:2e:36:55:fc:97:92:
                    35:7f:5a:ba:f8:e8:22:c5:59:ca:9c:2d:f9:f1:da:
                    53:87:b4:dd:5a:b0:97:42:07:eb:16:6c:fc:8d:d3:
                    73:e3:fd:41:7a:43:f3:eb:05:b8:a3:3c:38:a3:01:
                    6a:2f:55:43:38:d2:31:25:26:fe:17:7e:20:53:9d:
                    20:8a:2f:dc:f5:aa:0b:bb:2a:d7:c1:94:0f:49:9f:
                    9a:87:d7:8a:84:16:72:75:42:53:07:00:d3:d4:b9:
                    68:86:b0:11:ba:15:5d:f0:9f:9b:14:53:c9:a8:f9:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:56:C2:B1:32:FC:3F:7E:C4:75:87:ED:E9:B7:75:3B:68:DC:51:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/35d1724f-dd99-3158-8e46-a19b1aaf9a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.224.0/23
                  72.13.228.0/22
                  72.13.234.0/23
                  72.13.238.0/23
                  72.13.244.0/23
                  72.13.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:18:b5:54:24:38:b9:a3:3e:41:22:1b:68:72:95:d3:0b:e6:
         c4:9f:64:55:69:6d:db:87:fd:cd:89:07:aa:ad:a0:ac:15:59:
         e3:7b:48:ee:c9:d9:64:79:b2:06:4b:ea:ae:b0:26:30:93:37:
         da:95:cc:25:79:7e:44:67:65:ff:43:be:90:3b:78:da:84:ad:
         eb:40:2d:04:6c:88:ed:2d:77:31:d4:da:ce:08:85:ef:25:dd:
         a2:30:64:9d:97:70:59:c7:83:4a:ea:c9:a5:ff:76:97:39:87:
         5e:02:02:0d:08:d1:5a:a4:f8:da:8e:79:10:95:c7:df:e5:0c:
         23:11:84:c5:e8:3d:60:d3:44:71:96:55:24:fd:6b:bb:96:43:
         de:30:56:fc:d5:7e:10:1d:f2:a7:76:79:1c:bd:24:10:f2:11:
         75:73:02:f8:ed:65:dc:9f:6a:1d:a7:53:bd:86:f6:65:43:5c:
         57:c9:e3:6d:80:59:65:66:b1:73:e3:b4:70:78:b8:be:df:8c:
         31:1b:bf:9c:5f:f9:3e:39:40:2b:3b:3d:f8:b6:f4:1a:1e:5f:
         68:ac:d8:70:17:1b:33:bc:6b:b0:5b:c1:0d:30:33:af:29:36:
         20:ae:bf:d3:2b:e6:43:6d:3e:81:49:4a:59:8b:6b:81:fd:cc:
         2b:3c:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:53 2025 by rpki-client