Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3a7b5809-3eee-3361-9b39-9c533f085fec.roa
File:                     3a7b5809-3eee-3361-9b39-9c533f085fec.roa (raw, json)
Hash identifier:          lG+ans0U/oO4FK5c7BXXz0HbExGipB3EBA7pAjMKeD8=
Subject key identifier:   D0:77:08:97:74:99:46:FB:2A:82:E4:C3:BA:8F:4A:DF:04:83:60:5B
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24E1165A162B62D3DAE4DF80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3a7b5809-3eee-3361-9b39-9c533f085fec.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        72.51.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:16:5a:16:2b:62:d3:da:e4:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b91412d6-2c7e-4c9e-89a5-4815ecb37da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:ae:4c:c0:87:e0:61:86:74:53:19:cc:1a:
                    d7:8b:2e:79:dc:b2:d8:6e:12:df:ba:67:60:57:28:
                    22:10:89:18:2f:b9:cf:d0:cb:ca:db:9d:fd:fc:41:
                    2a:21:02:e1:91:d0:8b:14:ea:78:75:f3:55:38:fb:
                    79:f8:46:9c:23:44:e2:e0:7b:42:62:ac:69:a9:d9:
                    51:d7:98:2a:b4:e0:3f:f3:ef:94:83:ac:1c:b7:3d:
                    3f:da:70:34:f9:3b:2a:5f:61:d0:83:08:37:2d:ad:
                    fb:96:c6:14:49:49:93:1b:f4:9f:e5:09:98:1c:38:
                    4d:13:ff:84:8f:69:f3:be:9f:41:d3:a2:59:ec:04:
                    ec:24:35:45:3b:c4:02:07:78:13:3d:52:4b:7a:91:
                    a3:8a:60:fc:db:f8:8c:be:1e:b7:80:36:0f:16:97:
                    7f:11:1d:e7:35:23:c1:58:e8:aa:f3:10:e5:b4:32:
                    9e:f9:d9:fb:ee:93:d4:17:8e:ac:8c:6a:85:b1:67:
                    81:be:f3:fd:1f:cb:42:bf:69:8e:02:a4:39:8a:8f:
                    7e:82:c4:bb:ec:e0:fd:ee:1c:5b:51:05:e1:ce:d0:
                    28:60:da:7d:e1:3c:65:4c:2c:2a:49:7b:54:e3:99:
                    06:d2:79:41:d5:dc:ae:96:e1:ac:4c:c0:12:4c:ea:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:08:97:74:99:46:FB:2A:82:E4:C3:BA:8F:4A:DF:04:83:60:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3a7b5809-3eee-3361-9b39-9c533f085fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:10:16:33:e0:9d:54:c2:12:54:c2:bb:59:af:56:bb:d4:1a:
         4c:2e:80:0f:62:43:b2:50:ee:be:a9:4a:f4:91:7e:cd:6e:c2:
         1c:ac:e6:e9:53:35:19:0e:9c:69:20:88:e6:df:94:34:eb:34:
         4d:f3:c9:28:f8:e1:cc:e6:9f:d1:e4:66:00:dc:1b:38:6d:3a:
         cd:21:26:56:99:38:f9:2c:df:bd:66:db:dd:e9:f1:03:c2:2c:
         14:1e:58:8a:82:aa:91:4f:fd:b7:3b:b6:b0:03:74:66:e4:59:
         5e:58:94:1e:2d:84:d4:08:e2:e3:92:35:91:a3:2b:41:e4:ec:
         11:33:14:be:ca:46:35:07:34:73:18:8b:1b:cd:41:0b:b2:77:
         5c:06:ee:72:76:a7:0a:42:8d:f0:c5:28:fe:86:ff:c6:19:fb:
         b9:8e:3f:3d:71:c7:1d:5d:a8:47:40:26:24:e6:7e:cf:0c:ee:
         02:99:be:13:56:33:ba:51:cb:cd:08:5d:86:95:8a:a8:17:97:
         d8:f6:c6:5b:6c:30:ce:57:50:f8:36:a9:be:19:23:8a:7f:b5:
         4e:2d:22:ad:26:ab:25:de:f4:6a:b5:c8:8e:4d:f5:e3:9e:3c:
         4f:fb:de:02:49:af:ff:af:c3:d3:8c:44:74:db:45:97:fc:91:
         61:a4:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:02 2026 by rpki-client