Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa
File:                     cec281ba-09c0-37f8-92de-50b5e586cb84.roa (raw, json)
Hash identifier:          ub2ZnddVZ5pQ48izqFJusRlHhJaQrVIlpvuijkO2s2w=
Subject key identifier:   9D:AC:56:5A:EE:39:D7:3E:BB:34:12:06:E8:CB:5A:B4:B4:FA:CF:E4
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584F498B2FAC7528AAAA64FB7D00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14813
IP address blocks:        72.51.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:2f:ac:75:28:aa:aa:64:fb:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ab57ea1-c3c4-4004-b22b-699c03a1a07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:51:ec:56:27:ec:62:56:2c:5f:08:25:ac:
                    41:9a:93:8a:d4:2c:22:29:fa:45:80:b9:2a:9b:3b:
                    88:9e:46:ea:00:3e:34:33:34:88:fb:dd:93:ae:58:
                    83:7f:ed:4e:99:e1:3f:04:92:49:4d:66:9d:63:91:
                    bc:88:62:f3:d3:0e:ce:24:43:32:c8:ea:55:a7:b0:
                    1e:6a:9d:5e:26:e9:05:7b:a2:13:ef:6d:c6:99:4f:
                    75:fb:0e:38:0d:03:22:3c:2d:86:d2:9a:cf:13:20:
                    eb:ed:84:de:8c:a8:2c:90:7e:0e:56:66:4c:e9:74:
                    00:0d:1b:7a:52:86:4b:7e:58:08:49:d2:20:43:80:
                    ee:de:10:28:99:17:9a:31:cc:bf:e1:e6:1f:5b:8f:
                    32:58:d4:87:a7:95:f0:31:6b:77:93:4f:54:1f:ea:
                    6e:de:0b:7a:9b:1f:dd:3c:f9:95:f6:f2:1b:43:00:
                    0f:64:da:47:cf:12:6b:d9:a5:83:7c:2c:91:d4:2c:
                    2f:9d:cb:25:fe:66:b6:70:bc:4e:42:ac:c0:34:6b:
                    4f:9c:9d:06:64:ce:88:f9:57:62:d9:57:53:71:9e:
                    a1:b2:f9:1d:a3:8a:9b:ab:a8:33:1b:af:dc:4a:b0:
                    41:5b:fd:5d:72:db:cc:b5:11:21:8e:2b:64:bf:7b:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:56:5A:EE:39:D7:3E:BB:34:12:06:E8:CB:5A:B4:B4:FA:CF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:62:85:6c:53:2c:5f:45:fe:79:45:34:13:f5:ec:1b:bb:b2:
         54:ce:6e:75:d3:a8:65:93:54:0c:20:94:c6:a5:1a:f9:29:b1:
         3d:53:5f:8d:7d:80:e8:ec:0f:25:ca:31:4c:26:f4:9f:8b:24:
         3b:4b:81:38:40:66:73:46:d4:1e:90:22:61:ae:ef:52:e6:82:
         4a:82:fe:e6:7a:02:ce:8d:f5:12:9d:71:20:41:0b:db:14:1d:
         f2:c2:d4:03:10:54:ae:8c:d2:99:86:cd:60:a7:e8:ea:cf:45:
         e5:65:a6:76:3e:77:57:e7:9e:a7:fc:38:fd:2c:09:d8:b2:01:
         e8:70:9d:ab:02:36:bf:70:14:5a:ab:63:10:a3:77:ee:76:b6:
         5f:91:04:c7:c9:20:65:5d:0f:8f:05:c1:ed:e1:f6:6e:fb:93:
         cf:a3:2b:b8:e7:70:e6:27:ed:94:75:7e:7f:1c:9e:cf:d0:c9:
         17:ce:79:47:4d:fd:61:9e:74:9f:2f:89:b8:29:52:0e:92:3e:
         a7:5e:9e:14:e1:fc:32:de:39:97:24:b9:38:5f:54:1d:dd:3f:
         bd:ca:80:93:11:ec:db:da:af:8e:b3:d2:be:12:80:3c:41:71:
         64:4e:c6:d7:76:4c:68:ee:1b:85:3a:6c:5e:8f:c0:aa:af:67:
         00:ff:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:44:47 2026 by rpki-client