Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
File:                     a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa (raw, json)
Hash identifier:          vuvp+6RgqxQinOf55DOSibguBvhVyjkW8veUT+Gk+qk=
Subject key identifier:   E6:D5:26:F9:D3:CE:14:90:F6:64:47:07:E7:5A:1E:83:EA:E6:48:1D
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584F2957BF6533E8E26CB528B540
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     4922
IP address blocks:        24.53.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:bf:65:33:e8:e2:6c:b5:28:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=d38c58b3-4edd-4624-be61-063773036619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:54:eb:74:35:da:59:e2:36:fa:a3:2b:0b:
                    7a:16:92:02:59:60:c6:20:aa:51:46:c6:72:0a:28:
                    a8:f7:d0:e6:8c:e9:50:97:8a:55:c7:93:92:68:5e:
                    70:f3:e0:31:e0:fa:e6:d7:8f:37:20:9f:dd:74:ee:
                    13:78:4e:81:d1:03:8a:0f:4e:19:dd:fa:76:0c:3b:
                    54:5b:bb:da:43:21:9c:d4:d6:2f:2f:90:24:02:9b:
                    09:36:cb:53:a9:06:6f:23:02:82:10:10:8c:8e:73:
                    91:17:85:e1:b3:ec:b5:f4:a1:40:98:d3:76:6d:df:
                    a2:e9:76:9c:af:6b:82:0d:f4:94:04:f3:d0:38:08:
                    ce:66:32:78:5b:56:05:45:9f:ec:af:42:81:d8:cd:
                    ed:72:74:10:79:98:db:56:7b:70:61:96:da:8f:30:
                    33:f8:cb:72:54:4c:2c:68:e4:10:04:63:22:d7:76:
                    30:3c:e4:16:0b:bb:f0:86:1e:d3:09:2c:14:56:42:
                    48:a2:d6:58:66:93:2b:93:40:60:d6:ce:13:e7:66:
                    ad:ad:72:fd:a2:56:ef:3c:62:69:d5:cf:97:f5:54:
                    51:aa:bf:1c:35:a7:a3:78:93:3a:07:b9:ce:f4:ac:
                    77:88:1c:8c:6f:dd:84:75:b5:b2:d7:c2:5a:79:69:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:26:F9:D3:CE:14:90:F6:64:47:07:E7:5A:1E:83:EA:E6:48:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a4:e4:3b:3f:f8:e9:60:47:c6:da:84:63:b4:8e:e4:fc:f2:
         56:bb:ce:a4:42:45:5a:f3:a3:3c:e7:e0:32:c8:c0:8d:7d:c3:
         12:2d:e2:6c:3c:77:a4:cf:7b:65:ce:60:b8:d1:94:b7:98:c8:
         e8:ef:27:5c:7c:55:ea:2d:60:63:68:b7:2e:e7:6a:02:a1:d0:
         5c:24:6a:12:a6:38:cb:f5:ae:5b:79:c4:6c:86:26:45:70:4c:
         06:c0:1b:b0:17:c4:c7:13:03:24:47:74:fc:e7:91:6d:92:a8:
         48:11:ae:59:2a:07:57:cd:bc:8f:ac:d8:3c:a3:90:1a:49:ab:
         9d:ee:48:29:ee:8b:86:94:15:af:e2:02:33:4f:78:0c:d4:c8:
         67:22:2b:b8:3d:58:fe:ff:1f:de:ec:3f:1e:a2:f0:da:46:0f:
         cf:cc:97:72:1e:73:41:bd:a7:05:d5:00:15:48:8a:c3:b4:11:
         3a:cf:91:b5:60:04:08:03:3b:11:4a:51:41:7b:3a:82:14:91:
         19:44:b4:ab:56:8d:7f:e6:b7:3f:35:1f:b8:25:72:68:e3:8e:
         32:56:0d:ef:23:a1:2a:42:5f:3e:54:1d:08:a3:20:78:73:88:
         44:15:cc:0f:7c:4f:f4:54:11:55:da:57:d4:a7:23:0e:46:31:
         58:77:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:20:50 2026 by rpki-client