Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7ce215ed-2143-3bf8-91c7-f1df6fb018a7.roa
File:                     7ce215ed-2143-3bf8-91c7-f1df6fb018a7.roa (raw, json)
Hash identifier:          5FGtfnu5zrxVK9sXqmnX+9vwf8Z6MqlvA71NyaZB/Q8=
Subject key identifier:   DB:BB:61:B0:A4:29:10:D3:5B:E6:62:CD:6D:16:7E:59:88:45:13:1C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E1A14319555DC99CD59DC8100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7ce215ed-2143-3bf8-91c7-f1df6fb018a7.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     35847
IP address blocks:        72.244.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:31:95:55:dc:99:cd:59:dc:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=218254cd-3616-4ba2-b471-937b0396af74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:97:03:de:b3:6f:c1:5b:1c:84:a3:f8:bb:
                    63:63:79:6c:e1:fc:e6:2f:67:1a:4a:38:f7:3a:cc:
                    7f:86:af:d7:87:7c:d0:20:b7:39:dd:f4:9a:94:96:
                    cf:ea:26:55:5f:14:fa:51:a3:23:0c:99:0f:32:f9:
                    77:38:0f:d6:86:43:62:48:58:72:a3:2e:08:6e:aa:
                    9f:ee:ab:08:52:ec:e5:35:3b:da:0f:47:d3:3f:d8:
                    e3:42:8f:97:48:75:3f:a3:0c:00:59:f1:ca:d7:2e:
                    eb:31:ae:dc:c9:40:87:00:d6:35:25:41:a6:49:66:
                    ed:56:f2:ed:8f:ef:7b:ae:f2:c4:9a:5a:31:12:ec:
                    7f:2f:a8:ab:c4:0e:71:01:8e:ab:ab:10:05:95:a2:
                    73:bc:72:d1:bb:a5:4f:c5:a3:e6:12:80:81:f6:b8:
                    e3:f9:e3:63:e3:60:ad:29:ea:37:f9:b3:4a:cc:0b:
                    c0:a2:8a:b8:98:aa:0c:d3:ea:02:46:51:b0:0b:38:
                    5d:21:a0:77:7f:4c:f8:af:6f:31:ac:f5:81:a6:a4:
                    5e:86:d7:60:85:65:6c:09:b8:5f:8d:50:96:b3:56:
                    61:b4:d2:12:1b:d4:86:52:ba:69:29:04:27:31:7e:
                    64:01:4f:85:6f:e8:65:5b:34:ef:04:9d:64:a1:64:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BB:61:B0:A4:29:10:D3:5B:E6:62:CD:6D:16:7E:59:88:45:13:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7ce215ed-2143-3bf8-91c7-f1df6fb018a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e0:de:11:46:ca:f4:70:50:0e:3f:a7:79:20:2d:8f:58:d8:
         2a:ed:9d:9b:2a:a2:69:67:74:e4:ff:67:03:33:4d:a7:75:41:
         09:8e:87:e3:a2:62:d1:7a:e3:4f:6f:01:a5:45:79:80:ce:71:
         6d:b0:f9:b3:bd:86:30:cf:12:e9:f3:70:a5:a0:aa:fa:70:17:
         b0:e6:60:13:ff:59:80:97:1e:da:cc:7e:fa:54:6c:f9:72:3c:
         fe:80:83:36:3c:b1:b0:89:33:52:e1:fd:79:0a:b8:1b:97:43:
         af:f9:a8:68:03:8a:89:de:f8:59:65:8d:64:dc:55:d0:08:81:
         c4:5a:b7:6f:02:84:78:2c:e8:e1:6f:6c:b1:d0:9e:b8:d5:c4:
         9e:2d:9d:65:e8:cb:8f:d8:e7:d7:6e:17:8f:7b:89:8d:63:4a:
         23:41:5e:81:b2:f3:af:27:63:72:56:2c:28:ed:89:71:e7:e4:
         1c:4f:44:1f:a4:57:f6:ab:47:23:22:00:6f:08:63:46:35:9a:
         92:0f:a8:b9:59:e6:30:11:6b:0c:70:24:dc:b8:fb:a4:2f:25:
         5f:5b:36:af:f9:21:a1:74:7e:09:9e:83:3c:98:d3:24:89:4d:
         65:11:79:45:6f:36:e4:c6:93:50:aa:6e:fe:08:e9:c0:e6:65:
         13:30:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:23:58 2026 by rpki-client