Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa
File:                     9ded18be-1aa1-3992-8d45-fc366627f4ae.roa (raw, json)
Hash identifier:          P1ThF5qji21QJmvSxDOLGCTnFQJs1NxwXINyT8uJbLk=
Subject key identifier:   48:8F:82:E9:BE:BF:16:B1:BD:DC:FE:43:B3:CB:4D:C1:E8:D1:7E:34
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7947AEADD694DA03232C380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9304
IP address blocks:        72.244.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:7a:ea:dd:69:4d:a0:32:32:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=93b44d1d-2da0-4ca3-a24f-f7cfa299a39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:01:49:26:8c:ec:b7:a4:83:80:19:d4:2b:
                    e0:42:54:25:0c:54:ff:48:2e:21:eb:14:45:26:93:
                    a7:1b:30:b6:f2:8e:19:b8:4e:d5:9b:4f:7d:e0:6b:
                    91:81:a9:ea:8d:2c:59:3e:b7:11:7c:f7:bc:81:a0:
                    5c:c8:d7:65:a3:26:6e:dd:e0:56:f6:12:a9:03:d5:
                    9a:96:aa:e3:37:aa:04:54:fa:95:9f:70:1e:cc:03:
                    72:64:b1:6b:28:e0:88:8c:72:a8:d2:2a:21:23:60:
                    0e:69:62:9d:37:c8:d1:09:f5:2b:66:f6:b7:88:1e:
                    75:1a:59:f1:d2:9b:9c:45:9b:4c:fc:4d:e4:d2:cd:
                    fc:f3:89:bb:7c:cc:64:08:a3:6b:96:7b:9f:d9:e5:
                    91:dd:44:e6:53:dd:71:9f:3f:e9:7b:29:11:b0:42:
                    da:7f:1c:a8:e2:3f:94:36:b9:42:eb:19:fb:78:1a:
                    ff:63:db:86:7c:a0:6d:9b:94:83:7d:b5:2c:47:1c:
                    cb:3d:2e:55:c2:7e:54:de:43:ed:5a:54:f1:7d:57:
                    9e:67:01:f9:24:7d:24:2c:90:f8:39:e0:0a:1e:36:
                    42:78:1f:53:43:9c:a2:40:96:86:84:ce:c5:29:4b:
                    87:a4:5a:62:c9:dd:c1:af:d7:74:55:4c:b3:5a:cd:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8F:82:E9:BE:BF:16:B1:BD:DC:FE:43:B3:CB:4D:C1:E8:D1:7E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:af:13:08:72:3b:c3:5a:8d:56:58:dc:9e:e7:40:13:ad:06:
         31:9a:48:5d:86:2c:7b:a9:0c:8d:81:66:7f:89:88:f6:36:c4:
         b6:7d:56:31:e3:8d:9f:07:78:10:a9:a3:79:14:a8:11:7a:08:
         7e:3c:ca:39:0a:6a:5e:6c:31:46:94:99:ac:77:9d:36:13:6b:
         7b:80:87:10:6e:ee:ea:b3:62:e8:89:ef:8d:ea:49:be:76:99:
         6a:4e:7c:eb:fe:98:3a:a4:fa:20:45:93:af:92:9f:75:18:3f:
         17:0a:4c:30:b1:e5:a7:b6:89:91:23:d7:d4:82:01:9d:32:84:
         06:92:bb:e5:0b:c8:f1:f9:48:d3:82:c3:cd:7b:04:bf:c2:9b:
         88:e2:a3:97:6e:44:11:65:04:33:d8:8a:fe:66:14:dd:e6:95:
         6d:9b:e6:09:5f:3f:f0:89:72:7e:ac:23:26:cf:70:9d:da:12:
         6b:d5:0f:21:5b:df:26:ca:e4:a1:ed:55:18:9c:ff:c5:a3:54:
         16:a3:fe:1a:f9:eb:f9:d7:9f:9a:f9:3c:b1:62:b7:c3:41:33:
         27:71:ea:13:2c:26:cd:bc:bd:06:3b:ff:b8:05:ff:2d:3e:1f:
         54:10:5f:dc:ba:cb:23:64:6d:d2:50:90:f2:a6:13:bb:87:53:
         bb:19:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:39 2026 by rpki-client