Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b08bed79-175a-378f-be3a-d08a14a2efae.roa
File:                     b08bed79-175a-378f-be3a-d08a14a2efae.roa (raw, json)
Hash identifier:          qmlg3OuiE0vWQLL2C7QsULURMjdURgDkflPvo99clqk=
Subject key identifier:   DB:86:11:BD:79:4C:AB:60:B1:25:20:A8:B3:61:FC:6F:9B:39:A3:42
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E1C93889D389C2B0EA5169800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b08bed79-175a-378f-be3a-d08a14a2efae.roa
Signing time:             Tue 09 Jun 2026 06:28:24 +0000
ROA not before:           Tue 09 Jun 2026 06:28:24 +0000
ROA not after:            Mon 07 Sep 2026 06:28:24 +0000
asID:                     393437
IP address blocks:        72.244.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:93:88:9d:38:9c:2b:0e:a5:16:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  9 06:28:24 2026 GMT
            Not After : Sep  7 06:28:24 2026 GMT
        Subject: CN=daf14b48-9f41-4fd4-b998-488ca00ced3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:70:c2:2f:f9:0c:0d:6a:23:7c:7c:82:fb:
                    2f:51:60:ff:b4:d2:1a:2e:1b:17:b7:aa:c5:fb:e9:
                    69:5c:8a:c9:3f:fc:45:e2:6c:f4:b4:ae:8d:e8:79:
                    cb:89:0f:08:7d:eb:e4:d2:a9:5a:6e:3e:a2:85:76:
                    ef:e5:d7:6d:88:8b:04:40:91:d4:38:df:5a:6b:9e:
                    30:c7:6c:fc:60:9d:64:78:c6:7e:8a:89:4f:ab:f3:
                    e6:a5:d2:72:c4:35:0d:98:78:44:4a:39:46:b7:6e:
                    9b:d7:da:cf:57:0d:0b:1c:ce:5b:65:0f:25:cc:97:
                    51:57:18:dd:0f:42:91:11:5c:c5:88:30:e6:1b:eb:
                    85:0d:b7:b1:a0:99:ad:54:3b:b1:d0:77:ef:34:5c:
                    8a:cc:33:f1:02:cc:85:6d:39:ef:14:49:a4:3a:de:
                    2b:c5:9a:7e:33:75:8c:00:24:d0:bf:4a:f8:f4:7b:
                    f5:f8:a0:da:f1:08:d1:71:a3:c2:d4:45:e6:e9:03:
                    ac:5e:65:71:0e:fe:38:56:2d:d5:19:a2:d4:56:e3:
                    55:b1:f7:cb:7e:36:52:4c:86:b4:51:e1:2f:41:9a:
                    78:cf:4c:07:3a:cf:68:54:b6:ac:cf:3e:c1:de:4e:
                    06:66:27:a7:65:49:b2:89:1b:18:24:a1:33:d3:92:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:86:11:BD:79:4C:AB:60:B1:25:20:A8:B3:61:FC:6F:9B:39:A3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b08bed79-175a-378f-be3a-d08a14a2efae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:bb:fc:8c:18:8b:e8:b7:ab:c6:15:d7:bd:57:97:94:8d:
         88:98:dd:19:92:59:2e:2f:31:92:d2:a9:8f:9f:b0:db:d2:ca:
         0c:03:56:19:95:fb:4d:94:38:db:6c:23:97:9d:c9:9f:22:de:
         67:59:18:92:ed:27:66:79:67:28:63:49:64:48:a4:f6:ac:9b:
         f7:af:f8:d1:5f:ed:82:00:60:34:bd:2e:da:18:61:4f:96:43:
         f0:39:c4:3d:3d:e7:29:29:3f:98:65:25:00:f1:8b:46:78:fa:
         a2:5a:21:3b:bb:2d:b8:dc:12:72:94:75:cb:54:a3:bc:15:d2:
         9b:bc:25:b1:53:c5:14:00:63:fa:b6:4c:c2:7f:60:d4:e7:2c:
         6d:b4:63:c0:ca:04:38:4b:62:9a:6c:a4:6f:d7:c5:ed:f3:1a:
         96:0f:cd:b2:11:b8:ae:90:a3:08:6d:c5:b1:fa:f3:38:f3:c2:
         ee:ef:d4:2f:51:2f:d3:9b:9b:82:65:46:1a:80:e3:a7:04:fc:
         92:ad:3e:26:1c:f0:67:36:a2:fb:f2:de:a6:9b:9f:78:2f:62:
         82:6f:9f:00:14:e4:2d:c4:04:c5:3f:85:f0:eb:27:cd:df:59:
         25:3a:b1:b4:dc:af:c7:00:e8:37:7a:f8:06:62:19:80:5a:47:
         27:1e:ee:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ck4idOJwrDqUWmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYwOTA2MjgyNFoXDTI2MDkwNzA2MjgyNFowLzEtMCsGA1UEAxMk
ZGFmMTRiNDgtOWY0MS00ZmQ0LWI5OTgtNDg4Y2EwMGNlZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAxwwi/5DA1qI3x8gvsvUWD/tNIaLhsXt6rF
++lpXIrJP/xF4mz0tK6N6HnLiQ8Ifevk0qlabj6ihXbv5ddtiIsEQJHUON9aa54w
x2z8YJ1keMZ+iolPq/PmpdJyxDUNmHhESjlGt26b19rPVw0LHM5bZQ8lzJdRVxjd
D0KREVzFiDDmG+uFDbexoJmtVDux0HfvNFyKzDPxAsyFbTnvFEmkOt4rxZp+M3WM
ACTQv0r49Hv1+KDa8QjRcaPC1EXm6QOsXmVxDv44Vi3VGaLUVuNVsffLfjZSTIa0
UeEvQZp4z0wHOs9oVLaszz7B3k4GZienZUmyiRsYJKEz05KyiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuGEb15TKtgsSUgqLNh/G+bOaNCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjA4YmVkNzktMTc1YS0z
NzhmLWJlM2EtZDA4YTE0YTJlZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuMu/yMGIvot6vGFde9V5eUjYiY3RmSWS4vMZLSqY+fsNvSygwDVhmV
+02UONtsI5edyZ8i3mdZGJLtJ2Z5ZyhjSWRIpPasm/ev+NFf7YIAYDS9LtoYYU+W
Q/A5xD095ykpP5hlJQDxi0Z4+qJaITu7LbjcEnKUdctUo7wV0pu8JbFTxRQAY/q2
TMJ/YNTnLG20Y8DKBDhLYppspG/Xxe3zGpYPzbIRuK6QowhtxbH68zjzwu7v1C9R
L9Obm4JlRhqA46cE/JKtPiYc8Gc2ovvy3qabn3gvYoJvnwAU5C3EBMU/hfDrJ83f
WSU6sbTcr8cA6Dd6+AZiGYBaRyce7mA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:25 2026 by rpki-client