Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa
File:                     cec281ba-09c0-37f8-92de-50b5e586cb84.roa (raw, json)
Hash identifier:          AdzELJSt2K10Gpu0cSHNXa6fyeYIKMAcVGw6duJ2nAY=
Subject key identifier:   CB:6F:83:98:68:A8:5F:3F:6E:CF:25:94:E5:32:E4:87:71:41:EE:E4
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24E12FF8F48F4158C20F6B00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        72.51.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:2f:f8:f4:8f:41:58:c2:0f:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=30e7a582-bac0-4f5e-9d46-ffb27333c8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2c:8a:8d:35:37:8e:cd:60:d7:a3:2e:bb:b6:
                    aa:c4:2e:fb:df:6e:94:09:db:1a:a0:0a:61:7c:29:
                    82:b0:bf:37:ae:ee:0a:d8:51:dc:e5:ef:ca:de:f4:
                    f2:f9:a0:18:17:c3:50:f7:78:b4:56:0c:61:97:b3:
                    c8:22:99:ec:b3:5b:6e:fd:ed:80:ff:0c:f1:f6:4f:
                    b9:8f:5b:1a:8d:99:71:20:78:ab:7c:6f:02:dc:c4:
                    c3:a8:74:cf:2c:16:72:56:5b:c2:a2:bc:07:35:24:
                    43:3f:5e:52:25:64:35:18:4d:aa:76:34:45:62:43:
                    81:db:e4:14:ad:fd:cf:5d:84:f6:54:cb:09:91:e4:
                    f7:33:dd:de:09:f9:a4:64:0b:ee:c4:c4:13:a8:d5:
                    14:f8:7e:93:c8:1c:17:c6:e1:72:dd:e6:6b:37:e0:
                    5b:f6:ea:50:c6:03:1b:bb:28:fc:6e:a3:2f:f7:53:
                    13:23:14:cb:78:8c:5c:cb:9e:8c:9e:c8:d8:87:66:
                    5c:5e:e8:2e:f2:ac:80:73:26:53:ba:29:cb:c9:ba:
                    04:04:66:9f:34:9e:5f:ba:a7:f2:ff:05:c5:68:4f:
                    e4:aa:f5:11:fd:9a:83:c3:f8:9b:01:e5:dd:d1:1e:
                    05:29:4f:26:8c:e7:8c:da:15:7e:64:3e:d1:9d:6e:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6F:83:98:68:A8:5F:3F:6E:CF:25:94:E5:32:E4:87:71:41:EE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:10:a4:4e:cc:0e:e9:be:cf:5a:05:e6:a7:8e:2e:93:b4:b1:
         96:d9:28:b6:74:a2:9a:d9:ad:37:38:e0:12:c3:c6:6e:53:7d:
         0d:10:f6:0f:b2:2b:33:0b:2f:cc:d3:ee:17:42:bf:33:9c:7c:
         f0:46:f6:31:4b:50:dc:8a:a8:b5:7e:5c:fe:5e:0f:23:3d:3f:
         42:a2:73:a2:ea:25:51:e6:a9:41:6b:e3:7f:bc:db:ea:f4:f1:
         f1:bc:24:d7:70:37:8c:a5:cf:ff:78:b1:a0:d0:07:8e:21:b0:
         76:7a:14:36:cd:f0:64:60:b9:e1:ed:28:df:02:04:ed:10:a1:
         38:1c:41:1a:14:7b:1f:9e:cc:f6:9f:b0:81:bd:0f:29:25:30:
         39:32:70:3e:04:05:b5:84:3a:de:97:07:95:8e:12:51:4e:86:
         c6:25:1e:ec:0b:c3:87:64:e2:c2:fc:7b:60:30:4d:20:0a:d8:
         04:13:e5:12:22:3d:9d:c9:0d:d6:7e:be:41:3c:e4:bf:ee:94:
         7b:3a:e9:75:f7:45:77:05:09:46:15:e3:d2:c5:53:40:95:a6:
         4e:2f:5d:03:e6:57:7e:bf:39:ca:2c:97:ce:e4:19:57:dc:d1:
         19:af:9d:fe:2e:7a:d3:93:b1:8c:c7:53:1f:3f:d1:d7:da:ea:
         69:52:b8:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4S/49I9BWMIPawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MzBlN2E1ODItYmFjMC00ZjVlLTlkNDYtZmZiMjczMzNjOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CyKjTU3js1g16Muu7aqxC77326UCdsaoAph
fCmCsL83ru4K2FHc5e/K3vTy+aAYF8NQ93i0Vgxhl7PIIpnss1tu/e2A/wzx9k+5
j1sajZlxIHirfG8C3MTDqHTPLBZyVlvCorwHNSRDP15SJWQ1GE2qdjRFYkOB2+QU
rf3PXYT2VMsJkeT3M93eCfmkZAvuxMQTqNUU+H6TyBwXxuFy3eZrN+Bb9upQxgMb
uyj8bqMv91MTIxTLeIxcy56MnsjYh2ZcXugu8qyAcyZTuinLyboEBGafNJ5fuqfy
/wXFaE/kqvUR/ZqDw/ibAeXd0R4FKU8mjOeM2hV+ZD7RnW6n9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtvg5hoqF8/bs8llOUy5IdxQe7kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2VjMjgxYmEtMDljMC0z
N2Y4LTkyZGUtNTBiNWU1ODZjYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcQpE7MDum+z1oF5qeOLpO0sZbZKLZ0oprZrTc44BLDxm5TfQ0Q9g+y
KzMLL8zT7hdCvzOcfPBG9jFLUNyKqLV+XP5eDyM9P0Kic6LqJVHmqUFr43+82+r0
8fG8JNdwN4ylz/94saDQB44hsHZ6FDbN8GRgueHtKN8CBO0QoTgcQRoUex+ezPaf
sIG9DyklMDkycD4EBbWEOt6XB5WOElFOhsYlHuwLw4dk4sL8e2AwTSAK2AQT5RIi
PZ3JDdZ+vkE85L/ulHs66XX3RXcFCUYV49LFU0CVpk4vXQPmV36/Ocosl87kGVfc
0Rmvnf4uetOTsYzHUx8/0dfa6mlSuJg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:17 2026 by rpki-client