Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa
File:                     91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa (raw, json)
Hash identifier:          v8UTvFOcUhQVRbmIkP46PZ9IRAlvKT9+NVSxUpDNyQA=
Subject key identifier:   4D:9A:68:8C:9C:65:96:3F:AB:31:2E:5C:03:4F:F3:03:14:B4:E7:EF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D00B2620ACDD3BA2658FD3980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     212238
IP address blocks:        72.244.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:62:0a:cd:d3:ba:26:58:fd:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=51f079a6-025e-4794-a417-d792af8564b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:8a:37:63:e5:3b:21:b3:6c:54:de:f6:af:
                    e5:17:68:3f:52:ac:d6:6b:f3:0e:3a:b1:f8:07:ca:
                    b4:90:29:3a:95:23:f5:40:97:0e:ac:52:47:32:e1:
                    4d:31:4e:b6:8b:f2:66:88:a9:e2:12:cd:81:f9:ec:
                    87:f7:9e:a6:69:92:4c:20:bb:7e:8a:40:b6:0f:e0:
                    61:47:4c:ac:c3:02:96:7d:53:55:9a:13:fe:a4:0e:
                    c4:98:aa:b4:1c:3f:d4:51:a4:13:fb:9e:0e:b8:50:
                    f1:70:38:d5:a0:fb:fb:7d:ae:ce:e2:40:15:97:8c:
                    de:b1:97:16:06:c0:54:66:e5:d7:ee:d5:fe:d0:fa:
                    92:a2:f2:2b:9f:6e:77:8e:45:93:be:00:65:54:e2:
                    ed:77:4f:a1:39:ea:8b:86:93:a2:1e:b8:bf:c0:a8:
                    84:69:fe:b6:43:07:e5:35:74:90:d5:a9:ad:74:94:
                    7e:52:32:8f:4d:b9:1f:c8:cd:f1:36:fe:15:73:ee:
                    9f:92:0f:63:3e:a8:40:9d:95:6a:41:7f:11:70:ff:
                    6e:8a:43:9a:ef:1d:21:44:55:c9:72:0a:fd:10:84:
                    cd:97:be:b4:8b:01:00:03:60:58:6e:1e:ca:a3:05:
                    a7:e9:da:33:16:53:96:c7:07:2b:5f:40:94:b4:6b:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9A:68:8C:9C:65:96:3F:AB:31:2E:5C:03:4F:F3:03:14:B4:E7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:e8:72:73:b7:b2:70:86:37:91:ff:78:b1:30:01:31:7c:
         a9:27:53:53:a3:22:7a:aa:03:72:fd:2d:c5:98:16:82:4a:f5:
         af:80:ea:b4:53:49:17:72:65:0c:ec:ff:22:a0:64:b5:c9:c6:
         07:f6:de:61:a5:e7:9c:2c:ca:3c:45:ee:69:38:21:d5:ec:11:
         b9:ad:e2:73:8d:f4:25:05:e8:2a:5d:85:ac:58:8c:4a:07:9c:
         bf:08:3c:1a:fb:82:e2:03:ff:e6:c2:70:d0:47:9f:46:2c:79:
         9f:82:5f:6b:d9:74:5d:93:a2:3b:4e:b9:07:0f:ee:86:71:44:
         fe:ad:51:5d:74:fb:41:4a:20:c6:0c:3f:bd:ec:32:95:31:06:
         15:52:b3:71:84:1c:af:8e:70:2c:55:95:34:e2:ae:80:86:52:
         a5:2f:14:4f:ee:a1:3b:0e:92:56:34:fe:0e:31:72:dd:55:22:
         16:62:6c:9a:85:a1:19:92:5e:81:5d:07:f5:71:ac:01:5c:89:
         1a:22:76:82:a8:e6:9c:15:84:ca:b8:1b:ff:66:82:45:74:2a:
         c6:c2:6a:6c:92:ad:4f:69:7b:bd:5d:53:54:b7:9e:3e:80:e1:
         bc:73:1e:b0:94:48:98:c0:47:71:be:84:c2:98:b3:68:7b:59:
         9a:d7:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:05:44 2026 by rpki-client