Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa
File:                     93b6fced-343a-3651-b150-3e2b9feb7e27.roa (raw, json)
Hash identifier:          rXWnMrHZdUYiICj7JHTusaFJmaRr/SClVdrEHvlbsog=
Subject key identifier:   73:EF:FD:26:DE:FF:A7:4A:94:49:1A:43:CA:E3:41:CB:DA:6B:57:02
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24E11621B155DBF6706F89C0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        72.22.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:16:21:b1:55:db:f6:70:6f:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=64b01b87-a123-4433-b62b-931f89c0013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:0e:72:1a:b0:bc:37:1e:80:c6:2a:b9:65:
                    fc:4a:d3:d8:c3:b5:1d:0c:2b:68:11:e3:37:ba:1f:
                    2e:08:f6:14:79:0b:ac:97:c5:1e:4c:b2:dd:79:cf:
                    5a:22:38:97:35:66:4e:c0:b8:b9:09:67:92:c2:0a:
                    12:0c:9f:32:d3:e8:d2:a5:ac:e0:ad:b8:2e:fe:7a:
                    e4:dc:ea:3c:c5:ee:dc:5f:a5:89:2b:ec:b4:c8:2c:
                    ac:5b:2b:ad:6b:5f:1d:af:da:e9:8e:0a:cc:86:73:
                    94:e3:12:57:91:b7:8c:d0:82:14:42:bb:fe:38:f0:
                    04:ad:b5:26:e4:e8:44:81:8e:40:7e:04:66:e4:0d:
                    64:95:b3:05:32:b7:d0:eb:61:66:ef:dc:61:cc:8b:
                    24:20:d9:21:84:7f:8f:72:ee:92:8c:65:e5:d1:5b:
                    d3:26:4a:c0:37:d6:f1:e8:c4:9f:be:32:04:0b:f8:
                    9f:9c:fc:2e:47:c2:3f:37:09:25:cb:b1:b3:67:be:
                    85:75:d8:ae:c2:38:ef:23:6f:c6:eb:df:36:5c:5e:
                    8b:53:60:4f:5a:e5:14:be:4a:13:b4:5e:3f:d3:ea:
                    eb:42:97:e4:7f:ae:7b:48:a3:2e:22:c9:98:2f:ff:
                    54:9c:a5:1a:74:30:fb:80:ae:88:67:de:91:5c:a9:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EF:FD:26:DE:FF:A7:4A:94:49:1A:43:CA:E3:41:CB:DA:6B:57:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:87:b5:b1:4e:30:33:f5:7e:3a:b4:61:3d:b7:88:3b:a8:53:
         a8:66:96:d9:3d:98:98:0e:40:fc:81:19:22:d7:4b:d2:c9:6c:
         49:0e:c0:34:3a:d5:ec:bd:7c:60:0b:ad:be:b1:66:db:2a:0a:
         fb:7c:a6:cc:c5:b9:77:e2:21:be:a8:72:1d:38:c5:d4:ce:48:
         d1:98:c4:50:c5:ba:49:dc:4a:60:e2:d5:63:84:7a:0d:60:c0:
         0a:a1:7c:5a:6e:ae:67:73:3d:87:4e:93:f0:4b:f3:27:9a:05:
         05:07:28:af:9c:20:db:e5:c2:90:7a:fb:97:4b:98:a9:5e:e1:
         9c:77:93:a1:15:7c:7e:91:10:c8:1f:4e:6d:a1:8f:d6:96:b9:
         07:6a:f4:17:2f:7f:25:d4:73:aa:fc:eb:f1:42:45:4a:fa:7a:
         0c:99:30:cd:66:94:90:27:7e:59:86:a1:9e:d7:b3:cb:e3:20:
         0b:4b:e5:f4:fa:aa:6f:d9:48:df:15:3b:5f:53:aa:8e:13:22:
         88:e1:18:cb:da:87:fc:ea:1d:47:a8:5c:25:6f:ca:a6:e0:70:
         ae:d6:7f:b0:f4:60:3d:42:e0:f3:bf:41:fa:75:3c:a6:a3:53:
         b0:a8:f0:82:0c:27:7f:05:d6:cf:fc:3f:dc:fe:66:56:fe:89:
         ec:64:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:23:03 2026 by rpki-client