Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
File:                     b2baff77-b625-3202-8580-45c0ed7a13c0.roa (raw, json)
Hash identifier:          PG6EYgkymm5ZLtOgf6+4aMMUo4cW8I+iqur+CBG6Urs=
Subject key identifier:   09:18:C2:D7:F9:71:34:C4:49:B5:B5:54:48:5A:85:2D:94:60:9F:85
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584E210EFC51DCF75D692A6BF5F8
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        72.14.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fc:51:dc:f7:5d:69:2a:6b:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=3334522f-451a-43cb-9a1a-c7dfe2f666f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:51:4c:ce:63:6d:38:a1:18:72:63:f4:12:
                    03:0a:78:c3:b5:b0:36:b0:98:b1:ab:86:5c:09:e5:
                    9e:9e:64:30:04:b8:cb:95:69:a9:0a:f6:e4:5c:c0:
                    9a:c6:28:48:0d:3f:92:82:20:a1:45:c1:98:86:fd:
                    e4:96:9e:f7:ae:a2:85:34:73:88:d5:ef:23:07:9a:
                    16:2d:6b:2c:a7:48:2c:d9:30:6b:c2:2c:d0:b7:23:
                    6d:0e:e0:a5:7b:19:b5:3a:7d:d1:6d:a5:95:fc:65:
                    9c:9b:8a:56:54:85:17:d1:7a:8a:a8:a4:4b:c9:ac:
                    20:6b:68:a4:4c:f4:50:02:d5:10:5d:1d:7e:db:1a:
                    6f:ba:b2:77:23:6b:f1:1f:50:5d:be:73:e2:bf:54:
                    09:d9:05:cc:53:31:af:9b:62:e9:5c:cc:74:16:c3:
                    d4:86:09:c8:ea:97:18:91:35:82:72:b3:0c:0c:8c:
                    e8:5f:02:a5:ea:1e:9d:54:2d:3f:3a:31:4b:02:a8:
                    91:1e:01:4d:d4:52:99:15:1b:63:d9:3e:93:c2:68:
                    55:a6:07:22:f9:bc:c4:4b:90:4a:cd:23:24:b0:63:
                    14:78:6d:64:2a:46:e1:fe:c2:83:ea:79:eb:d9:c8:
                    d3:59:39:be:2d:08:5e:50:58:a3:6a:69:14:1c:b3:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:C2:D7:F9:71:34:C4:49:B5:B5:54:48:5A:85:2D:94:60:9F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:dc:24:4d:57:1f:71:eb:08:7c:c8:52:e8:c4:8a:32:af:87:
         83:aa:8a:81:d8:e4:31:34:8c:6c:bd:3a:40:0c:25:03:0e:19:
         60:bb:21:3b:a8:07:92:18:39:fc:03:62:eb:19:73:0f:03:a2:
         2b:d8:32:7a:52:02:07:94:85:2a:82:af:bc:c7:91:5b:0e:76:
         b0:d3:05:84:56:cd:5c:ae:38:d9:2b:05:01:3c:fa:cd:21:9c:
         2f:19:d4:1a:ac:9b:c5:37:a7:53:37:c5:88:0d:76:81:31:6e:
         3b:68:eb:3e:22:ed:70:e5:e4:29:55:e3:9a:c1:4b:bc:ea:4a:
         f1:f0:9b:e4:5a:d1:ce:53:22:2b:18:50:67:e5:9e:fc:74:11:
         ef:45:0a:ea:48:67:43:44:45:3e:47:2c:89:09:64:fe:07:1f:
         2d:93:37:4d:f6:bc:77:97:fd:d0:7b:52:c5:0a:ce:18:b0:d9:
         c9:82:56:9a:ae:bf:68:0a:22:95:a4:01:c6:0f:a7:ba:04:5b:
         24:3f:39:49:cb:af:ed:54:52:61:14:88:ee:e6:5f:50:96:a2:
         82:0e:4f:63:ca:08:c6:28:0a:c6:6b:e5:72:12:04:7d:41:ba:
         82:0e:bf:e4:87:81:6a:fa:1b:3d:63:db:30:9a:d9:dd:4a:aa:
         af:a8:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:09:49 2026 by rpki-client