Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
File:                     50d9c464-06a9-3c71-81b4-4dc3c759679a.roa (raw, json)
Hash identifier:          W1ih0rEP5V65HUYl5qBvg3a0rKrCc4lUzbdieVAIOP4=
Subject key identifier:   B0:F5:90:F1:4A:CE:D0:DF:EB:02:13:45:27:B9:D8:86:F7:B9:4A:1D
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584EA79D1B33C55118AB2A1B7380
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14813
IP address blocks:        72.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:1b:33:c5:51:18:ab:2a:1b:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=20ed7f3c-9790-4fb5-8c4c-d1e7645856ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:c6:30:7f:9c:96:be:68:19:e8:d9:83:db:
                    5f:08:68:3b:cd:39:6f:ae:54:ca:ee:3f:3e:63:a5:
                    65:f4:88:6d:60:a7:c3:d9:20:4a:f1:e4:c4:7b:ed:
                    88:04:38:c6:78:fe:52:3e:82:12:cd:d8:31:32:48:
                    9d:ec:7a:19:20:b3:24:65:90:1b:30:13:53:0c:bc:
                    23:23:0b:25:c7:69:c7:e6:2e:9d:76:f5:f2:82:f1:
                    71:7a:ce:51:5d:ac:50:e0:83:51:a2:3d:83:b9:10:
                    42:d7:ff:72:64:db:c2:17:6a:6a:57:dd:1c:b9:68:
                    63:a0:db:35:64:f9:7d:9b:69:72:aa:c0:b2:83:b5:
                    a5:79:ee:05:08:19:9d:1e:1c:0f:80:62:21:da:93:
                    13:db:a9:3f:0a:ce:4c:96:9e:f8:c3:22:e9:01:cb:
                    88:13:c5:87:0e:bb:a6:7a:53:96:2c:97:ad:4f:ba:
                    4b:55:2c:96:9d:31:1b:5f:ce:4d:7a:bc:19:f8:a6:
                    de:26:4d:28:df:a7:46:10:cf:16:65:6b:e0:89:91:
                    9b:57:48:85:24:e6:94:bf:7c:02:21:bd:2c:24:e6:
                    70:61:81:79:ef:72:c2:ec:82:1b:29:fb:42:61:1c:
                    f4:4f:26:ff:05:da:cc:01:a7:44:0e:95:ae:e0:f1:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:90:F1:4A:CE:D0:DF:EB:02:13:45:27:B9:D8:86:F7:B9:4A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:5c:e7:42:50:9d:3e:07:21:78:03:e0:cb:d6:53:07:0d:
         21:05:7f:5d:56:78:47:2d:de:fb:a8:81:06:69:1a:21:96:ed:
         c2:88:e1:b5:ba:4f:20:60:f7:53:4f:59:46:41:29:f6:8f:57:
         95:b6:b2:40:31:e7:2b:04:7e:5a:03:ac:86:98:03:01:10:96:
         c4:f5:d1:a9:c9:84:14:1d:4c:dd:cf:37:5e:a2:cb:b8:a7:4b:
         b8:ff:81:f6:81:5b:43:32:2f:8e:37:6b:7d:75:6d:82:46:99:
         1d:66:cb:80:da:de:e4:5a:b4:89:82:f8:0f:7a:71:d5:a2:70:
         e6:9e:9e:5f:67:6c:f6:15:ce:3e:75:e5:d4:82:d7:3e:75:c5:
         7d:8b:84:cb:75:e2:5f:27:71:d8:04:69:5b:78:8c:e6:38:e1:
         16:b4:7c:4e:26:1c:20:5e:1f:c0:e8:6b:27:00:87:22:98:c8:
         72:8f:0c:0c:dd:5a:61:71:2a:0f:f3:4f:b6:a5:f4:fe:bf:67:
         1a:15:b9:fd:c9:eb:0b:04:b9:c1:20:c5:ea:8d:56:19:c1:44:
         0a:e8:f0:54:df:93:06:62:d4:ee:ff:b6:ec:bd:e1:02:2c:a1:
         58:b2:36:ab:99:80:1b:cf:b2:04:64:9a:a6:41:19:77:4b:74:
         ac:ab:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:15:53 2026 by rpki-client