Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44727d78-8221-3140-a32b-4e0948871fe0.roa
File:                     44727d78-8221-3140-a32b-4e0948871fe0.roa (raw, json)
Hash identifier:          ly5mtqSAqsC4PuCT4lQ4kP1hjZQUPyynpvd3H5apWfk=
Subject key identifier:   4F:18:15:DC:EB:34:8F:3A:B9:95:EE:37:71:F0:3B:16:F6:1E:00:A0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F0D6CE1C18067A55D356C67C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44727d78-8221-3140-a32b-4e0948871fe0.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        72.244.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e1:c1:80:67:a5:5d:35:6c:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=68de9154-3d9d-4029-901c-306a88f85ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:8a:a8:d7:c6:85:ed:3f:c4:aa:19:4a:cc:
                    3b:22:a2:7c:d1:10:17:4e:29:24:24:2f:31:07:de:
                    9c:96:15:a3:ad:bf:bc:c5:fc:f6:80:a2:6e:01:b7:
                    fa:a0:1a:5b:6c:66:f6:a0:ef:6f:ff:1e:27:5c:94:
                    5b:fd:90:cc:dc:bb:38:ee:16:2e:f8:5c:96:81:43:
                    ea:41:f2:cc:93:ad:d2:dc:57:02:18:e4:dd:f7:70:
                    c9:4b:da:d1:47:78:9f:58:9c:c9:56:ae:b1:a5:96:
                    30:ea:ee:62:03:99:2c:7f:8f:c0:8b:4d:f0:3f:e1:
                    1d:7a:79:60:88:56:45:cb:e8:7e:6d:3e:ad:9b:8e:
                    c9:67:d9:87:d7:8d:64:c8:02:d2:76:cf:e1:11:3c:
                    bc:bf:5e:f0:df:56:3d:8e:3d:cb:61:b1:be:bc:cd:
                    8e:a9:74:07:72:8f:fd:d4:49:d7:00:cf:9a:e9:e5:
                    e2:7e:7c:50:63:64:4b:1b:82:1b:32:44:1f:a8:a3:
                    0d:39:bb:92:b7:30:42:99:9c:19:59:2c:e7:39:75:
                    35:61:35:fd:06:9b:7c:a1:85:e0:63:6f:78:8e:b0:
                    5b:04:53:bc:3c:b2:bb:37:89:ca:17:89:c3:bf:98:
                    14:7d:50:b5:70:57:b7:9c:1c:0e:66:0d:3c:18:65:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:18:15:DC:EB:34:8F:3A:B9:95:EE:37:71:F0:3B:16:F6:1E:00:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44727d78-8221-3140-a32b-4e0948871fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:34:ed:4a:c6:9e:b7:f1:37:d5:5e:bd:ad:ca:6b:80:5a:bc:
         04:fd:6e:7d:f1:0b:c9:7e:73:56:ac:a6:68:03:50:06:dd:77:
         fe:cc:3a:5f:e3:f3:58:24:27:65:51:a1:e9:ed:1e:a2:94:10:
         b6:27:9f:e3:cf:00:21:d9:d9:05:db:57:9a:78:3c:77:c6:6d:
         24:47:b4:dd:8c:08:8e:aa:74:a5:80:d1:2f:db:7c:5b:a2:9a:
         ef:e6:84:b2:9a:80:fe:23:17:59:12:7e:d2:0c:a1:15:01:66:
         eb:12:31:5e:0d:54:7a:ba:b9:64:64:09:21:b0:66:55:92:6b:
         c5:e7:06:e9:f0:a2:c6:2a:60:f4:23:46:19:b6:53:29:c3:f4:
         e4:f3:e5:53:e3:96:61:3d:44:c6:bd:25:6f:e2:a6:c8:74:69:
         11:f7:18:b0:78:fc:e8:cb:2d:83:89:2b:60:40:58:e8:6d:ab:
         d2:12:c7:a6:02:f8:20:b2:0a:88:9e:ba:f7:65:c0:fa:ef:f4:
         8e:b1:aa:21:b7:be:bb:2a:66:98:91:8c:8c:c3:23:fa:81:4a:
         34:77:49:34:85:3d:78:fc:f7:19:32:60:9a:f1:b7:17:b0:5c:
         39:c9:0e:06:3f:11:aa:14:d2:0f:11:48:fe:73:b1:88:e5:2e:
         b6:74:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:23:03 2026 by rpki-client