Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/65b9d867-dd7c-3a12-9866-063268e4d901.roa
File:                     65b9d867-dd7c-3a12-9866-063268e4d901.roa (raw, json)
Hash identifier:          9vCI1pJxsHfl+eTG45uWWGqAg4fbfDVVXva1+PIIUrY=
Subject key identifier:   FE:12:DF:34:58:C5:8B:B4:35:37:F8:C2:C3:B8:A0:D9:01:A2:7D:0B
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CCAC8D72DB221C8C62D880
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/65b9d867-dd7c-3a12-9866-063268e4d901.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.51.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ac:8d:72:db:22:1c:8c:62:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=91e11437-5793-40c6-ae98-16d88691ae1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:7a:1b:ee:e1:18:34:3f:2d:2d:fe:d5:86:
                    46:bd:c4:a9:1d:6b:8b:e1:93:72:67:ce:03:e9:14:
                    0c:0f:ff:1b:99:ba:bd:00:48:28:d1:57:0f:d5:f3:
                    64:4e:f2:bd:18:44:27:81:4b:21:86:7a:f6:68:36:
                    bd:21:24:48:7c:2e:db:97:a5:29:20:23:84:0a:f1:
                    68:7d:8e:02:d3:b6:37:9c:f3:6a:1e:cf:ee:75:7d:
                    1d:8c:92:fb:60:f0:c7:b6:a0:bb:4e:8c:f5:6b:f8:
                    c9:92:54:62:bd:e1:29:84:0c:66:f4:d2:69:70:8c:
                    e4:95:1a:59:9d:85:35:4c:f9:cd:e5:19:11:ac:c8:
                    30:26:ee:29:a1:12:fd:be:57:14:dd:bf:00:fa:40:
                    2d:ee:b1:8f:d0:63:d2:a4:0a:0f:2d:79:7f:d9:b1:
                    8c:6b:08:fc:19:fb:91:0c:79:03:1c:94:56:fe:2d:
                    41:fb:97:b9:a1:15:47:c7:69:c7:75:b8:98:09:6f:
                    3c:df:f2:1d:5e:a2:2a:a4:23:3a:33:92:3b:a6:fc:
                    20:fd:b2:d2:11:70:7b:86:7f:13:6a:24:ee:94:b4:
                    41:e2:e2:da:21:dd:e6:27:07:a6:eb:51:85:83:aa:
                    de:3d:01:ac:79:b3:72:40:52:90:d7:67:9a:2a:8c:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:12:DF:34:58:C5:8B:B4:35:37:F8:C2:C3:B8:A0:D9:01:A2:7D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/65b9d867-dd7c-3a12-9866-063268e4d901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:28:d0:63:80:86:51:72:b7:36:8f:de:61:26:46:8d:7d:de:
         a9:d0:5e:9f:cc:31:e2:a9:68:c7:e6:8a:49:81:51:93:85:3d:
         43:c2:41:1b:dd:d0:b6:86:8d:8f:8b:30:b3:cc:0e:c2:01:d9:
         60:66:58:9e:b8:dd:8a:f0:a9:c7:28:5e:89:97:71:32:99:a1:
         35:65:e1:29:70:50:ec:40:f3:00:0b:69:a2:40:ac:36:b4:ed:
         f4:27:e3:b2:66:80:d5:5e:03:6c:02:00:9e:5f:c5:8a:a4:b5:
         35:93:ab:2a:ef:ee:0f:8c:a4:17:ad:e0:3e:eb:27:48:45:1c:
         65:49:72:12:05:7e:a6:27:bd:19:67:9c:86:42:72:c8:88:9a:
         19:7e:3f:37:61:19:ea:d9:9d:52:96:f4:66:d4:bd:8f:eb:39:
         17:c9:ea:ae:87:68:47:a2:ca:31:9c:7e:b6:2b:bc:0d:02:28:
         1f:b6:40:d9:9e:5d:00:6a:8a:46:47:0e:0f:a8:32:ab:2c:81:
         3e:db:27:9a:86:5f:7b:eb:05:ad:fa:cb:02:7c:8a:18:98:77:
         95:0c:16:cd:84:b3:75:ee:56:3e:1c:23:15:ae:7a:6c:97:b9:
         2b:82:e4:cb:f7:5c:a7:32:7f:78:28:59:45:91:f5:11:3a:90:
         53:ec:83:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKyNctsiHIxi2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTFlMTE0MzctNTc5My00MGM2LWFlOTgtMTZkODg2OTFhZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAR6G+7hGDQ/LS3+1YZGvcSpHWuL4ZNyZ84D
6RQMD/8bmbq9AEgo0VcP1fNkTvK9GEQngUshhnr2aDa9ISRIfC7bl6UpICOECvFo
fY4C07Y3nPNqHs/udX0djJL7YPDHtqC7Toz1a/jJklRiveEphAxm9NJpcIzklRpZ
nYU1TPnN5RkRrMgwJu4poRL9vlcU3b8A+kAt7rGP0GPSpAoPLXl/2bGMawj8GfuR
DHkDHJRW/i1B+5e5oRVHx2nHdbiYCW883/IdXqIqpCM6M5I7pvwg/bLSEXB7hn8T
aiTulLRB4uLaId3mJwem61GFg6rePQGsebNyQFKQ12eaKozD2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4S3zRYxYu0NTf4wsO4oNkBon0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNjViOWQ4NjctZGQ3Yy0z
YTEyLTk4NjYtMDYzMjY4ZTRkOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIo0GOAhlFytzaP3mEmRo193qnQXp/MMeKpaMfmikmBUZOFPUPCQRvd
0LaGjY+LMLPMDsIB2WBmWJ643YrwqccoXomXcTKZoTVl4SlwUOxA8wALaaJArDa0
7fQn47JmgNVeA2wCAJ5fxYqktTWTqyrv7g+MpBet4D7rJ0hFHGVJchIFfqYnvRln
nIZCcsiImhl+PzdhGerZnVKW9GbUvY/rORfJ6q6HaEeiyjGcfrYrvA0CKB+2QNme
XQBqikZHDg+oMqssgT7bJ5qGX3vrBa36ywJ8ihiYd5UMFs2Es3XuVj4cIxWuemyX
uSuC5Mv3XKcyf3goWUWR9RE6kFPsgwo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:05 2025 by rpki-client