Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa
File:                     28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa (raw, json)
Hash identifier:          K+Z3/r6m44AoSJGtvKEYS/Z7r4oPK8Q7duQqZyuEGUo=
Subject key identifier:   11:B2:33:C6:B0:F7:9F:09:A5:86:93:81:B9:9C:A7:68:2E:D5:64:32
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584E1FA9A72D7DE169299E9F3900
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     63023
IP address blocks:        72.14.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a7:2d:7d:e1:69:29:9e:9f:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=ccaca329-844b-4c30-88a6-b813c68e33ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:b9:b7:4c:49:e3:93:8b:8e:61:fe:64:5a:
                    8b:b7:02:9e:64:1e:f8:c3:e4:ab:32:fd:a6:81:c8:
                    d3:69:f2:f7:51:6e:41:58:88:48:24:9a:2e:4c:71:
                    00:77:cb:3d:ea:5a:f5:21:e3:6b:fc:6f:ad:f5:a1:
                    a7:35:65:45:00:75:2a:8f:2b:e5:b3:32:27:7f:76:
                    fd:34:b2:79:77:92:75:05:fa:bd:21:44:ec:f4:ca:
                    ef:72:c6:7e:0d:47:ca:81:b4:8f:46:68:27:d9:6c:
                    fd:8e:de:45:d1:1f:8d:4c:63:32:b9:fe:e7:15:84:
                    6d:86:1b:56:c5:34:54:57:3d:b8:cd:6a:e2:b0:58:
                    8e:8d:6d:2f:c7:72:de:b8:b9:56:01:ba:ee:cf:e4:
                    36:db:5e:e0:d5:30:e5:fd:4f:46:cb:02:83:4b:b8:
                    f8:9c:6e:59:8a:fa:56:ee:03:77:60:4a:cc:43:55:
                    66:cc:d6:9c:54:14:79:fb:74:c9:b0:0b:e4:65:13:
                    89:12:0b:f8:6b:ce:25:f4:b7:a0:59:24:71:4c:32:
                    54:e8:7d:fd:cd:c4:de:6d:40:09:ea:7e:a6:58:af:
                    de:60:ee:b9:78:9a:a1:74:57:91:8b:9a:c3:9f:0d:
                    3f:67:8d:6f:25:ed:e6:2b:82:b7:65:71:ab:d4:dd:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:33:C6:B0:F7:9F:09:A5:86:93:81:B9:9C:A7:68:2E:D5:64:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:88:00:87:5c:15:6a:97:31:88:18:eb:5e:dd:76:17:d4:
         a2:e8:20:c4:d0:7c:88:61:49:73:8a:9f:76:a3:96:5a:86:ef:
         4a:c7:db:6a:32:ad:d3:d2:86:51:f7:f6:39:63:89:83:bf:88:
         19:37:9d:2e:74:f0:e7:b3:bf:52:85:81:05:54:a4:42:ea:63:
         07:fe:c3:fc:63:62:6f:bb:3a:bf:36:4e:1f:31:c1:6c:65:f4:
         e8:30:01:5d:93:89:54:af:97:cf:0a:d5:ec:16:c3:a9:a7:ad:
         0f:79:18:13:27:05:07:64:a6:07:32:f8:20:f5:36:d3:a5:0c:
         52:b5:60:7f:b7:b9:0e:c4:d3:8d:34:fa:ab:c6:ea:04:35:d6:
         e4:4d:53:a6:37:ff:45:9c:60:8a:43:a2:4d:d1:e9:74:c5:db:
         c0:30:f3:48:30:69:87:41:b2:df:0c:a0:10:e8:9f:e3:9f:cb:
         f2:86:11:29:22:72:2a:b7:81:e3:e7:75:76:10:fb:6e:79:62:
         bf:07:cc:59:70:90:2f:c9:fc:54:7c:8b:5b:7c:9b:cd:e4:8b:
         30:53:33:71:97:be:9e:ed:72:e9:44:f1:ed:5b:3a:90:aa:eb:
         7b:a8:4d:9e:a3:1c:3c:2f:10:8a:3f:74:b9:12:fd:01:fb:9a:
         64:1c:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:27 2026 by rpki-client