Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa
File:                     2b65cf01-009e-38e7-b721-99f99e5f39de.roa (raw, json)
Hash identifier:          jpfy+HHxGCCX7VwE0PfEio1OQua5xN+gG37pOPfnLcw=
Subject key identifier:   D2:69:1E:34:AA:89:C6:84:52:14:C8:AC:8F:54:B1:43:34:3E:59:B7
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584F4987FF4C8CBDA2C0B8B38800
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14813
IP address blocks:        72.51.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:ff:4c:8c:bd:a2:c0:b8:b3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7a7752ef-a869-4edb-80b1-488a2370f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:a0:d6:ed:8c:a9:4a:49:1d:da:48:f9:09:
                    2c:f2:f1:1b:9e:2c:ef:b5:8f:ed:e3:8f:8f:2a:99:
                    a6:d2:a0:8a:67:d6:f1:15:0b:70:de:90:ab:72:e9:
                    fb:c6:92:c5:bf:55:a1:73:b0:9d:7b:1b:28:05:b2:
                    86:d6:4d:ac:bc:6a:91:60:9e:12:55:df:ae:73:c5:
                    91:a0:ce:f4:7d:2a:d1:64:a3:8f:6c:8b:8b:38:be:
                    63:57:6c:1e:c7:51:5d:03:7f:2e:dc:a7:0e:46:88:
                    bf:97:a9:09:7b:29:b2:48:33:17:6c:d3:52:f7:f2:
                    8d:81:4d:a5:ef:a0:bc:b9:bc:2e:b8:f1:07:37:b2:
                    1b:0f:7d:75:53:06:eb:c4:85:9b:54:28:ee:e7:a6:
                    44:4a:0d:05:47:a4:ef:5f:46:6e:75:5c:3f:b8:cb:
                    b2:29:0a:06:99:69:a8:a1:f6:73:6e:a4:2a:d2:30:
                    bd:fa:44:fc:38:69:c5:e5:90:ff:94:b2:55:16:85:
                    fb:52:c3:93:3b:bc:34:54:01:5d:fa:7d:01:6d:85:
                    f6:05:b5:9a:7e:8d:6c:34:e3:f7:96:f0:2f:68:46:
                    17:94:00:29:f7:24:08:0a:07:50:77:ca:0a:76:f2:
                    1d:26:93:60:33:53:8e:0d:a1:45:82:4b:af:de:27:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:1E:34:AA:89:C6:84:52:14:C8:AC:8F:54:B1:43:34:3E:59:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:fe:a3:70:ab:82:54:28:5a:0e:14:e8:5b:fe:d3:af:79:
         ac:3d:2d:a2:f1:5c:e4:33:6d:e5:0e:5c:d2:fe:19:b8:9c:31:
         78:ec:94:1a:5b:e7:84:66:b1:2e:b2:53:3d:13:23:fa:e6:99:
         79:14:c7:cf:d6:65:d2:31:04:96:7a:25:9e:0d:66:43:6d:5e:
         a3:52:b6:52:f9:70:c3:2c:a5:97:eb:1c:e4:cf:ef:20:55:2d:
         3c:5b:0f:2a:ab:f5:c6:70:ba:ef:e3:92:a4:8c:9d:22:aa:76:
         1b:ea:ba:88:8e:03:e5:da:89:72:93:ad:75:36:d8:f1:91:fb:
         d7:ca:a7:ed:9a:62:4a:5e:fd:47:e1:6e:0e:22:41:12:f6:b9:
         2e:d2:c5:81:83:de:d2:b9:d6:c5:8c:17:ba:b8:a2:8d:ef:37:
         5b:61:f1:45:e0:7c:ea:63:11:b4:68:b5:d6:be:f2:a8:2b:43:
         c9:77:0d:a6:8a:a9:3e:f5:b9:e0:ef:38:7f:4c:91:e6:5e:b5:
         91:4c:a8:7f:39:b9:b0:ea:34:5c:38:c2:45:84:95:a8:ac:e4:
         ad:ba:2c:a2:2d:83:82:00:2d:9c:e3:79:51:6d:ba:c8:1a:53:
         c0:5f:b2:e5:81:3c:34:c2:3b:bb:50:80:72:4c:84:e8:8f:a3:
         41:d2:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:53 2026 by rpki-client