Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
File:                     50d9c464-06a9-3c71-81b4-4dc3c759679a.roa (raw, json)
Hash identifier:          q+Ah4gc1/N06/hd73a0gp/TMEETk8CDMOTl1peX4EBw=
Subject key identifier:   9F:15:C7:DA:EE:A6:E5:13:0B:06:0A:45:7E:5A:E4:E8:22:C1:E8:91
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24DF8B9C745F5665A0C99D00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        72.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:8b:9c:74:5f:56:65:a0:c9:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=04221d1b-c9a9-438b-9195-252129cc9649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:3a:7c:07:ab:7c:98:29:28:87:d3:69:f0:
                    17:61:3b:47:e1:c8:88:c3:2d:f6:b5:54:ec:04:f2:
                    ac:1b:aa:8b:4b:9f:79:66:6d:42:63:98:68:be:55:
                    19:46:25:7e:4b:45:bb:bf:9e:47:f6:73:5c:6f:a0:
                    f8:38:9c:34:e0:62:4c:ce:58:dd:7a:ff:4c:c0:e9:
                    03:6e:82:87:2a:10:c9:a6:5d:16:1e:8e:10:bc:da:
                    db:83:f6:bf:c1:bc:d9:e1:5a:86:5f:1e:ba:8a:05:
                    57:49:45:a8:ea:c8:1e:ba:2d:1a:0b:c0:b1:2d:24:
                    c2:a0:a9:38:db:d2:df:2e:dc:7e:74:2b:03:30:c1:
                    45:d7:89:1d:36:1d:2f:62:7d:a1:e5:49:a6:1f:33:
                    70:d0:e4:21:e8:e8:e6:f9:84:a5:ae:72:01:b6:a0:
                    50:db:33:fd:af:b7:e2:0c:93:cf:12:0d:91:bf:8b:
                    de:a2:04:96:fa:36:3a:c2:7e:b7:7b:a5:22:a9:3a:
                    96:56:9f:ae:87:55:d7:9b:2d:18:14:f1:1f:8a:65:
                    83:3f:e2:66:47:3e:e0:8d:a2:19:0f:c7:32:4c:a2:
                    91:c4:6a:d6:41:26:15:34:c6:62:b3:38:07:42:cf:
                    fc:63:59:6c:a4:74:a2:b4:98:25:e4:c3:90:99:c5:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:15:C7:DA:EE:A6:E5:13:0B:06:0A:45:7E:5A:E4:E8:22:C1:E8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:53:7a:d9:03:46:f0:71:de:21:54:41:e5:85:45:51:57:
         b5:54:02:82:93:9e:f4:e8:0b:e9:d8:a8:88:e8:56:1f:88:b2:
         16:00:5e:3f:55:b5:48:1b:1e:de:ba:59:23:58:cb:93:72:32:
         30:73:94:c0:ab:63:d3:5a:fa:62:46:3c:e7:8d:5e:20:7c:05:
         61:c4:3a:ae:b8:c1:6a:89:45:e0:70:b2:83:c6:8f:16:af:c6:
         c2:4f:c6:81:bf:85:f8:2f:f7:65:a6:0d:d7:f2:33:83:bb:3d:
         80:cb:50:55:32:88:e2:0d:7c:03:08:fb:2d:3f:f9:d3:b9:68:
         02:4b:51:68:55:fc:7f:db:44:ad:38:6a:2b:88:f7:7e:b2:c0:
         93:15:d9:d5:6d:a6:24:b0:7e:09:da:10:da:02:fa:20:44:f2:
         4c:52:30:52:d9:72:3f:b6:67:9c:ea:21:d2:10:69:a7:09:11:
         0e:46:2e:3f:94:a1:77:d6:d0:80:0d:63:f0:2c:9f:2f:3f:c3:
         1b:69:07:6c:68:95:e0:59:49:ea:06:8f:77:73:2f:46:a3:91:
         ad:c7:f3:8f:61:b6:43:4b:d6:36:62:14:2c:90:ec:29:8d:70:
         49:f9:06:cf:be:7d:26:b2:2b:40:03:c0:99:0c:f1:1c:d1:fe:
         41:65:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:05 2026 by rpki-client