Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d18be1b9-cc73-3db6-ba5c-4103ab9f3715.roa
File:                     d18be1b9-cc73-3db6-ba5c-4103ab9f3715.roa (raw, json)
Hash identifier:          F3bv8rxotVxL3CBhynqcEvQILMO4DBR581a3q+CW5rM=
Subject key identifier:   18:94:F8:36:C7:0F:83:94:F4:73:74:04:ED:FD:25:C3:85:DF:1E:AF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7947935E6D7FF8A4B210560
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d18be1b9-cc73-3db6-ba5c-4103ab9f3715.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9304
IP address blocks:        72.244.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:79:35:e6:d7:ff:8a:4b:21:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a8987948-52a6-4146-bfee-5696f23c8934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:79:59:1f:cd:77:c2:1f:fb:0a:d6:b5:cb:
                    91:94:a6:76:09:20:29:6e:5c:08:02:28:1c:42:08:
                    3c:df:4d:70:b0:e9:06:bf:d5:80:81:19:3e:82:02:
                    f2:15:4d:65:5e:7f:d3:1b:b7:33:3f:e1:14:c4:e2:
                    59:6d:a2:68:f9:19:b2:7d:3a:ca:93:ab:18:bb:b6:
                    15:bb:c9:7b:77:05:a7:bd:04:59:c9:6e:3e:2b:9e:
                    02:fa:e6:f1:44:7c:98:31:04:0c:b5:0f:f9:8d:dc:
                    23:b6:29:46:06:ff:03:6a:69:14:f9:cb:c4:e3:91:
                    91:fd:04:d1:b9:c6:c5:4c:2a:d9:44:0e:28:17:fa:
                    13:05:89:72:80:13:5b:bb:d3:64:eb:59:f7:db:79:
                    50:2a:8e:10:41:85:37:46:e8:86:ff:fa:75:91:0a:
                    6a:d7:08:20:84:78:91:e9:76:ba:2c:a8:f2:a0:09:
                    2d:69:08:ea:b4:48:99:ff:b3:4c:db:fc:7a:39:76:
                    30:52:7f:6f:4f:72:4b:75:87:92:4c:0f:11:ce:af:
                    e2:58:0f:5a:1a:cb:72:35:dc:1b:09:a1:2d:99:19:
                    90:9e:01:45:0e:ac:a1:0a:4b:fc:5c:a5:36:0d:aa:
                    b0:db:07:76:59:c7:4c:f0:b6:5f:eb:7e:42:50:61:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:F8:36:C7:0F:83:94:F4:73:74:04:ED:FD:25:C3:85:DF:1E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d18be1b9-cc73-3db6-ba5c-4103ab9f3715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:47:5a:1f:94:bf:53:46:ca:90:98:10:95:39:34:72:08:2d:
         db:b2:50:f9:0a:1b:b7:bd:f5:45:8e:dd:05:19:ba:72:de:59:
         19:13:8c:3f:bd:94:7d:20:e4:6e:05:48:fd:4f:ec:8c:e1:2b:
         cf:3b:a2:22:83:28:f6:71:27:5a:e1:f0:9a:2c:a3:b5:33:98:
         3f:af:bf:05:d3:f4:8c:eb:46:43:9a:bd:47:51:cf:82:2e:02:
         80:39:d4:45:2f:17:a7:1d:50:d8:c1:e4:39:df:04:57:65:15:
         b1:f2:c6:34:62:1f:43:7a:c3:51:d3:29:d7:cd:86:d5:bd:0e:
         da:c2:90:80:6a:78:a4:e5:ab:30:09:73:85:42:ca:17:af:ea:
         09:53:90:78:53:48:f2:2a:06:88:6c:38:5e:21:d6:53:d9:62:
         14:e5:41:55:6f:83:fe:07:d5:d1:61:07:dc:1b:17:7a:69:9e:
         56:5e:94:56:7d:72:f4:7f:b2:f6:14:d2:cd:a9:70:7f:7c:9a:
         27:40:d9:ff:0f:61:92:e7:e4:91:e8:3c:73:00:26:7c:20:14:
         a0:af:c5:67:b7:03:41:6b:75:6b:ff:82:29:c4:a7:fc:f0:35:
         67:a3:62:ea:d3:79:84:bb:b5:1b:b1:d6:5e:4f:00:dc:be:a5:
         fb:c9:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:42:06 2026 by rpki-client