Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa
File:                     8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa (raw, json)
Hash identifier:          WQVUboAljHTUlQdQBl+W2T8UNaGcOgXugajjMznxU+E=
Subject key identifier:   2D:A9:D3:16:4B:A5:5D:0A:DE:62:8C:44:EA:04:85:E6:4A:4C:60:A5
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584F49733A90765FAF59DC389B00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14813
IP address blocks:        72.51.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:3a:90:76:5f:af:59:dc:38:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d60a053c-67ce-4cb3-ba86-ff25ab17cbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:a2:e7:74:7f:b0:1d:a8:71:6f:8a:24:37:
                    12:a6:e7:4b:f9:95:e9:e8:14:33:84:e2:ad:93:5b:
                    d7:3d:a9:24:28:c4:45:4b:40:71:ff:78:82:c6:09:
                    14:7f:31:6c:b1:db:44:af:1e:20:8e:c9:8f:4f:b1:
                    59:7c:a0:5b:70:ec:4e:b1:59:72:9f:61:6a:40:b5:
                    af:d4:b7:7e:75:d7:a7:a8:69:91:34:84:03:54:97:
                    32:c6:ec:68:60:74:e6:3f:2f:b2:80:a2:79:0e:75:
                    ea:17:f1:1e:28:7d:01:77:7a:48:cf:5c:a8:65:f9:
                    33:7a:23:ff:d0:7b:1b:5b:7c:15:04:54:8f:2c:d0:
                    3f:31:62:f2:3e:39:f8:07:db:7e:f9:44:5a:b1:b4:
                    da:a1:d4:4c:7c:0b:af:e0:5c:d8:97:19:ba:10:5f:
                    98:a5:d4:f9:74:72:5f:fd:74:bc:77:ab:bf:d6:3c:
                    c3:19:cf:74:98:c4:b1:93:c0:5f:9d:22:2a:ef:48:
                    06:5f:0f:7b:79:7a:81:0a:08:9d:66:d6:1a:79:3d:
                    a3:7d:74:8d:ed:af:7c:12:9f:26:1c:ac:de:ad:61:
                    dd:be:25:1d:81:16:ec:73:9d:54:b7:5b:19:36:12:
                    15:ea:23:d0:9b:bc:4b:c7:be:10:53:a4:9a:a8:c0:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:D3:16:4B:A5:5D:0A:DE:62:8C:44:EA:04:85:E6:4A:4C:60:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:97:08:83:7d:32:c7:46:70:f8:a0:1d:36:37:53:95:46:
         01:9b:4a:7b:88:77:d0:09:cc:d4:0e:8c:a1:b5:3b:99:f4:51:
         5e:9f:3b:1a:a8:63:55:64:36:ab:13:63:e1:72:7e:13:9d:e1:
         2a:69:22:65:30:48:5b:84:51:a6:09:bb:04:b1:b1:9e:fa:8e:
         77:be:81:0a:2a:d6:37:57:9d:a0:3e:ef:dd:d3:f3:5a:43:a2:
         c4:9e:e6:5d:36:10:29:7b:f5:2e:8f:4e:75:2c:d4:d7:a0:1d:
         17:cf:87:11:93:d7:3b:96:32:dd:26:8c:1b:05:bf:e0:db:a4:
         0d:1b:23:3b:1c:89:a9:62:c6:53:79:9e:e7:ee:df:d7:e5:d7:
         07:c3:de:ae:fb:3e:dd:f6:53:c3:7f:4a:12:1d:70:e1:fa:db:
         d4:cb:8a:8b:d3:bc:bc:98:3a:08:fb:3b:87:c9:62:48:3e:e4:
         3b:99:02:6d:d8:50:7d:5a:e7:ce:ef:43:2a:a1:a2:cd:eb:9a:
         5e:3f:e6:93:21:f1:3a:fa:71:89:a5:3d:e2:4f:15:74:60:29:
         32:a8:b9:68:6e:6f:28:c7:46:89:ff:51:09:c0:db:12:6c:bb:
         ce:4a:d7:d1:4b:f8:42:a4:c7:ef:be:55:70:71:c1:4e:e0:ec:
         d8:c7:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:32 2026 by rpki-client