Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87f106fd-f72f-36db-8354-803bfa8d5d7d.roa
File:                     87f106fd-f72f-36db-8354-803bfa8d5d7d.roa (raw, json)
Hash identifier:          OFma9Ma8S965tF9SoWOCW3/oucIU6eOEUpi0J1fzA6w=
Subject key identifier:   9B:12:DA:A0:5D:A9:83:7A:54:9C:41:F4:9B:C0:DD:FC:25:7A:BB:2A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EFE12114E321E0000031A4040
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87f106fd-f72f-36db-8354-803bfa8d5d7d.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        72.244.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:11:4e:32:1e:00:00:03:1a:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=8b3bed3f-0bfb-4b43-8695-00e7d191cc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:20:d7:b2:eb:ab:60:48:52:b6:f3:4d:07:
                    c3:b1:0e:dc:52:bb:bd:e2:85:bc:af:22:06:15:d8:
                    b6:68:fd:87:d2:5f:c7:36:b7:22:21:02:6f:cb:d5:
                    70:43:2d:4f:2f:39:ee:22:f2:a6:74:e1:cb:ea:5b:
                    06:10:b2:77:05:c7:7c:2a:7e:26:1b:14:0e:1f:bc:
                    d0:0a:e3:b6:8c:d6:75:71:b4:52:93:05:0e:76:8d:
                    f6:5b:d5:6c:b4:24:7e:8f:d4:96:63:f7:00:a2:28:
                    f5:67:63:6b:e8:62:ba:f9:1f:af:5c:d6:5d:26:d8:
                    cc:4c:35:ee:6c:b9:59:f5:24:b1:2f:e6:6f:b8:f9:
                    95:cb:d0:37:51:1b:83:3f:44:b4:d6:a3:8e:e3:ca:
                    36:87:ae:5f:48:38:43:42:c1:87:c7:52:d2:52:c0:
                    2c:e8:ac:ba:25:dd:a9:41:54:97:ca:fd:79:cf:e4:
                    01:b1:9d:dd:a6:6e:5c:11:ed:b9:06:8b:4f:29:d3:
                    ee:95:bf:6e:04:de:43:cf:c3:a6:b9:2e:7f:26:50:
                    ec:76:60:bf:fb:12:08:7f:58:d8:b1:71:e8:24:b3:
                    b1:bd:82:a1:3b:67:71:ba:1e:68:80:4f:05:58:6b:
                    1e:47:78:ca:8d:2f:38:84:39:2f:a7:e9:27:d6:76:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:12:DA:A0:5D:A9:83:7A:54:9C:41:F4:9B:C0:DD:FC:25:7A:BB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87f106fd-f72f-36db-8354-803bfa8d5d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:11:ec:88:d2:34:5c:c9:47:5f:c9:bc:13:7e:6f:5f:1d:a4:
         68:7e:14:54:43:d6:44:65:6c:e7:b1:25:a6:13:2f:8a:fd:a6:
         ea:a2:81:cf:6d:fb:cd:02:8c:38:8d:f8:2f:b3:c5:81:fd:84:
         7e:ff:d8:34:3c:80:ea:39:5a:c1:a5:aa:39:a0:f1:f0:fb:45:
         28:d7:0e:53:14:a1:1c:ce:70:9f:88:58:99:8c:95:31:28:b4:
         a8:70:3a:4f:72:71:32:14:40:b5:af:ce:7a:93:fa:de:2d:87:
         49:21:7b:7b:04:99:b5:75:be:7b:42:4c:f6:1b:bc:87:cc:7d:
         5a:6c:5f:cc:43:0e:4f:72:bb:40:a0:dc:78:fc:86:ca:27:a9:
         c7:c2:fe:84:30:9f:b2:62:99:46:91:98:c1:d7:b8:6c:6c:2b:
         22:0e:2b:66:6b:26:fa:6e:14:45:7a:5b:a7:07:0f:91:a8:04:
         32:ed:ac:d1:92:65:40:20:08:c1:23:a2:2f:ee:e7:81:3a:eb:
         9b:0f:ff:2e:df:ec:22:74:32:e6:11:62:6e:4e:f1:71:fb:c5:
         fb:32:e4:78:f8:58:af:e2:9a:8e:3c:4d:52:c2:f8:59:7b:58:
         6a:8f:60:3d:b5:89:f3:a0:e1:c3:f0:e0:8f:90:be:2b:39:20:
         d1:03:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:45:12 2026 by rpki-client