Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa
File:                     4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa (raw, json)
Hash identifier:          gtK182TZ/hgCx45Ofb+INpaysJoaLotDz1JHg2R2QLk=
Subject key identifier:   25:33:55:5A:FA:06:8E:0C:2C:01:72:CE:BF:5B:5D:2C:A8:84:D4:45
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF9E20B1B70EF1FCF6BEF7B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     3257
IP address blocks:        72.245.144.0/21 maxlen: 24
                          72.245.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0b:1b:70:ef:1f:cf:6b:ef:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=132a51e6-c228-4575-804b-f0c3f6ba01bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:14:be:bf:3e:a4:c9:e1:12:c1:ec:ba:d0:
                    5b:09:8c:37:11:f9:2c:70:90:f5:e8:ea:b5:d7:81:
                    44:f4:d8:31:6b:fb:60:f4:29:3c:ec:14:d0:0b:34:
                    45:51:26:9d:db:b8:aa:5e:e3:97:0a:50:72:a8:e7:
                    1c:cf:68:dc:11:65:88:ea:33:f6:d1:90:9e:a1:5f:
                    2c:8a:78:90:30:3d:b0:52:7d:cc:15:c2:ac:d2:2d:
                    2e:bc:3e:81:94:c6:8b:b9:83:0e:89:91:3e:77:be:
                    41:50:ec:07:a2:d2:d3:58:9c:50:f2:62:4b:54:4d:
                    b6:20:68:bf:fc:9b:40:b2:b5:2e:1b:c8:c2:9f:4a:
                    0b:7b:a8:66:26:ac:f5:8b:19:04:87:d6:62:5c:a7:
                    e6:05:2c:11:e3:d7:09:76:76:65:7e:e0:7c:ea:f8:
                    21:f2:5f:d8:66:3a:74:e9:3d:42:e7:9d:17:21:90:
                    0a:26:9a:43:53:6e:38:e7:13:73:61:bb:3d:31:27:
                    00:25:98:ac:eb:7c:49:a3:6d:0f:40:b5:f9:1b:80:
                    8a:ea:c5:e3:83:07:ed:23:93:93:c6:4a:bc:46:cd:
                    aa:fc:8a:06:15:4e:45:c4:f0:df:e8:7e:34:3f:9b:
                    c8:dd:c8:f9:d3:b6:ce:1e:af:29:97:19:a8:40:e9:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:55:5A:FA:06:8E:0C:2C:01:72:CE:BF:5B:5D:2C:A8:84:D4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.245.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:4c:9e:59:80:ea:44:7e:8c:18:2f:98:9d:ef:0d:1c:92:
         5c:0c:b6:bf:5c:57:0b:99:48:59:bc:48:a8:de:7f:55:ae:d6:
         ed:6a:19:a8:8e:a8:9c:05:e4:00:5b:f7:17:02:94:64:78:1a:
         97:e3:50:89:1c:37:8d:78:5b:c0:8e:24:8c:92:45:da:ba:93:
         e9:a2:7d:dd:3c:09:e1:60:71:b8:b2:6c:19:09:76:72:f6:6a:
         f5:14:6a:f5:7a:7f:58:7d:5b:5a:37:9f:ea:a0:c1:3c:89:9a:
         e7:d9:fd:ac:3c:23:82:35:b1:20:7e:e7:fe:49:41:91:3f:3e:
         6d:93:e5:14:70:9c:f2:c0:e8:43:cc:b4:c0:66:d1:2d:ff:a3:
         a7:29:d4:ae:94:04:72:95:11:f7:fa:a2:cd:04:7a:5d:11:20:
         e1:e1:db:fa:cf:c4:1c:08:3e:ce:6f:53:1a:70:0d:f1:d8:b8:
         a7:8e:ca:31:2d:33:ce:d1:f8:35:6a:4f:6d:ae:b4:8f:33:54:
         ad:bb:a9:86:d1:6d:9c:78:0a:94:ad:c7:87:98:90:42:f8:af:
         39:66:3d:0c:f7:7a:bd:f9:ed:d1:94:77:f9:9a:d4:a8:37:28:
         81:44:ac:37:ea:05:08:7f:76:e1:96:74:61:c2:27:51:05:85:
         e8:1b:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:15:47 2026 by rpki-client