Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4d9887ac-98f1-3aef-a494-6c6b51c43854.roa
File:                     4d9887ac-98f1-3aef-a494-6c6b51c43854.roa (raw, json)
Hash identifier:          922o2pPK7TWnvV/bS3GsW/yLW/I4gFuEiVZ4Od5RdSE=
Subject key identifier:   E9:79:74:74:54:51:03:ED:73:BC:07:7E:F8:37:CB:0C:68:DB:64:32
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CCA833649DF01E72661B80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4d9887ac-98f1-3aef-a494-6c6b51c43854.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.51.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a8:33:64:9d:f0:1e:72:66:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=996a0ce4-3c4a-4a19-8752-50f069a608f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:46:db:d0:30:da:a9:87:1e:fa:e8:23:66:
                    7b:f7:f4:7e:74:f3:a9:46:27:fe:49:10:36:8a:25:
                    dc:96:f4:32:00:8b:89:37:31:86:6b:b7:84:3b:47:
                    aa:28:d8:c8:c3:e8:64:b8:67:d6:49:a8:b9:92:06:
                    95:d9:27:10:68:a6:c9:05:5b:bc:f6:33:0d:83:07:
                    5a:c3:53:32:12:4f:20:37:35:03:ae:c6:ab:4f:65:
                    30:ba:45:45:56:d8:0d:ae:2d:30:ad:b6:a0:b5:e4:
                    e6:5a:d6:52:ff:86:08:96:d9:12:d7:b9:2e:1f:57:
                    48:26:87:23:e9:6d:2c:fc:06:a7:ba:61:cf:7a:5d:
                    a4:41:6e:b3:32:ed:72:41:86:ad:23:47:53:9e:e8:
                    c2:0e:9c:06:2a:35:6c:80:4a:31:08:3a:5f:84:9f:
                    10:6b:de:b9:73:48:88:15:7e:22:c3:a6:f7:b6:ff:
                    0c:3c:49:8e:91:6a:de:29:90:3d:5a:ac:81:eb:9b:
                    5f:21:73:b1:51:19:98:8d:ec:44:16:ee:c8:4b:d3:
                    ff:48:99:8a:05:fd:a6:19:b8:cc:5b:b4:d1:b7:d5:
                    50:ed:9a:ea:2a:a3:dd:d4:1c:1e:f0:0b:48:1f:29:
                    f2:18:78:f8:cb:94:6c:a7:b5:99:8a:cc:36:84:85:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:74:74:54:51:03:ED:73:BC:07:7E:F8:37:CB:0C:68:DB:64:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4d9887ac-98f1-3aef-a494-6c6b51c43854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:56:d8:92:ce:63:23:b0:f7:7c:9c:05:eb:51:12:20:de:
         3d:25:fd:cb:2d:fe:5d:e5:2b:f3:e8:bb:f4:8a:39:1a:e6:69:
         47:99:a5:df:c3:b0:40:31:50:33:75:ce:54:3d:b5:f1:89:03:
         45:52:fa:18:8c:db:59:07:b6:97:fc:b7:bb:38:97:b7:93:95:
         0d:01:be:12:30:4e:4d:2b:5c:b8:29:bb:5d:72:c9:9e:dd:22:
         b6:f8:4a:f0:65:49:f3:6f:f5:1f:9c:ee:89:5e:28:0a:2c:2d:
         38:e3:a5:97:5a:8f:d9:10:8e:ff:e0:61:4d:88:b6:32:4b:c5:
         be:0f:8c:63:01:f1:f9:15:29:5a:e7:bb:52:dd:b1:0b:3d:c5:
         87:17:49:76:65:b8:17:b6:47:9d:1a:dc:4b:15:b4:51:e4:c7:
         9b:1a:68:8b:e8:dc:39:9b:64:57:45:fc:57:79:b5:53:87:c6:
         93:23:72:9a:9c:ec:07:57:60:7d:e5:e3:1b:fc:64:5b:52:4a:
         91:3a:2c:9f:8b:e8:5b:b7:bf:67:08:94:14:ef:45:3e:50:c9:
         e0:5e:16:19:42:f2:d9:b8:8d:89:ea:fc:de:c8:37:1a:5b:29:
         1f:ed:01:78:e4:9b:6a:83:9f:ad:1c:e3:ac:aa:55:3e:9e:92:
         fd:87:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:45 2025 by rpki-client