Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/44d0771d-835f-3836-9e55-2620e44e7ec7.roa
File:                     44d0771d-835f-3836-9e55-2620e44e7ec7.roa (raw, json)
Hash identifier:          8JXuiomyQlFLX7ttl7ocB+zZEScy5MvoScOzl+4ja1s=
Subject key identifier:   FF:04:F2:C8:2D:99:5D:32:DA:16:9B:3D:96:83:42:D5:D9:BB:3D:C5
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE40C23E0D0D039F0A2580
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/44d0771d-835f-3836-9e55-2620e44e7ec7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.51.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:40:c2:3e:0d:0d:03:9f:0a:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4b095746-9788-4464-8823-3a577e10dc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:a2:61:f5:7f:1b:79:e4:1b:a1:3b:a7:ca:
                    68:9b:d4:86:0b:01:5e:7b:ab:b0:ae:64:99:cf:28:
                    8e:f2:89:ff:d5:4f:bd:b1:a7:f8:9c:9b:af:96:e4:
                    0e:f5:58:a3:f8:c2:01:8c:50:83:c4:56:4f:cf:5c:
                    51:11:5f:fc:2f:ee:f1:29:77:da:36:56:c0:f2:07:
                    5e:5a:72:44:55:78:68:6a:b4:bc:e5:a1:0d:5e:1b:
                    fe:fb:88:ed:b4:ad:3e:e8:7b:dd:ed:07:3b:7b:a2:
                    97:d6:39:3a:4b:4a:a3:50:15:80:26:ff:a6:bd:2e:
                    2b:d6:e2:06:fa:13:01:01:78:7d:77:90:b6:22:06:
                    f9:a9:db:28:6a:96:5d:91:ad:2d:07:62:4b:f6:89:
                    98:de:b6:f1:77:65:53:32:3d:b8:3d:d0:a1:0e:3c:
                    77:25:4f:be:48:b0:38:28:10:ef:e9:da:f5:e5:66:
                    3c:4c:24:89:7b:50:5a:f2:3a:07:7f:4e:c1:f1:54:
                    1c:ff:96:9c:46:7c:ed:ec:33:90:dd:0f:a5:a3:b2:
                    7e:91:a6:cd:15:41:96:2b:74:21:71:05:d5:94:64:
                    c2:e3:c8:4e:05:ae:8c:1f:e0:22:5a:76:a0:5e:7e:
                    95:e0:0d:14:b3:6b:de:3a:bc:4e:ab:53:30:87:f2:
                    31:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:04:F2:C8:2D:99:5D:32:DA:16:9B:3D:96:83:42:D5:D9:BB:3D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/44d0771d-835f-3836-9e55-2620e44e7ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:69:74:5a:ed:e2:0e:8a:95:80:f8:d4:c1:f4:11:26:14:
         b2:10:9f:65:ba:8a:c3:da:1c:18:3f:4b:b3:29:c1:ce:14:34:
         7c:6d:60:11:9d:ec:c4:04:4c:9c:c4:fa:a6:60:2d:d1:1c:d0:
         3d:3a:d6:28:68:44:47:9a:14:82:54:44:a2:b4:f0:01:c2:0b:
         b2:fb:cd:84:d1:50:1d:e8:05:6e:13:63:70:fa:e5:86:96:20:
         69:0f:b5:d4:75:25:62:14:46:20:04:44:5f:54:43:da:dc:da:
         7f:78:30:5b:a6:e0:58:e9:52:2b:cc:d7:eb:a1:0d:65:79:25:
         71:c0:5a:58:c3:4d:50:49:76:15:91:51:6a:d8:5f:c1:32:e4:
         68:c8:5e:3b:6b:e2:60:31:87:2e:d0:65:19:8f:49:4c:0d:43:
         9f:3e:89:20:42:e0:a5:7f:20:44:9c:5e:fe:c7:0d:f9:b9:7f:
         28:05:82:82:d5:b6:21:46:2a:f9:19:6e:d7:f3:7b:f9:64:c4:
         a1:8d:d5:52:e0:ab:47:b4:5e:25:48:f1:1b:df:61:81:0a:c0:
         b3:ad:7a:82:7b:d7:14:74:89:7f:99:81:9f:5d:15:54:fd:c1:
         92:67:99:35:23:b8:b8:06:d5:8a:68:fe:0c:af:2b:ca:1d:dc:
         cc:53:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:10:13 2025 by rpki-client