Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa
File:                     63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa (raw, json)
Hash identifier:          jskqyndyhLQcLzqMc2KKiVz3xRB0PdGJ2lPUog0ITWo=
Subject key identifier:   EC:43:29:CD:70:53:93:C6:A2:EA:A9:5B:C1:78:64:C3:CD:DB:DF:C7
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584F4986C919C96F4D74B5F10100
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14813
IP address blocks:        72.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:c9:19:c9:6f:4d:74:b5:f1:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2708d8cd-e079-4c3c-a6d8-9b1598530a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:58:99:9d:10:4e:18:42:09:b0:06:95:09:
                    2b:7f:9c:bd:7d:cc:3a:bc:3b:32:72:b2:61:dd:a5:
                    9e:22:c4:20:4f:e1:3c:13:b3:a1:07:6c:2a:d4:de:
                    80:a6:dd:45:a0:56:06:86:18:cd:85:bd:65:75:8f:
                    da:b5:4a:ec:c1:c3:64:8a:6d:41:e2:61:04:d2:c2:
                    f0:a4:d9:f1:8f:aa:60:e3:ab:36:27:ce:09:92:00:
                    56:09:f7:7a:fb:e8:70:2e:94:ba:a3:d9:28:79:61:
                    6b:98:30:a4:7d:88:1a:b5:39:a8:24:4c:2b:b0:ef:
                    59:d5:e8:0c:87:b0:4c:b4:3e:38:34:62:69:c1:b9:
                    1a:f3:6f:5e:50:38:09:ac:50:d6:3a:03:71:2f:fd:
                    06:50:87:6f:48:ea:72:4c:6b:80:39:d3:35:71:21:
                    ea:58:c0:7a:df:04:ec:43:d6:d6:06:05:e1:32:f6:
                    79:1e:bf:8b:70:46:44:1f:4d:a7:e5:7f:58:5d:df:
                    60:a3:b9:3a:22:2d:4d:01:50:6d:b0:97:34:8f:1c:
                    32:c0:87:61:df:4c:ca:bb:1d:f7:1f:1a:0d:be:c6:
                    f0:be:0e:b8:9c:b1:db:23:61:1b:4e:3f:c3:2a:ab:
                    a7:76:7e:91:26:d2:fd:a7:f3:39:c2:63:0c:0b:8e:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:43:29:CD:70:53:93:C6:A2:EA:A9:5B:C1:78:64:C3:CD:DB:DF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/63e5f1e4-37e6-3ca2-9ba6-6b86db3ca6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:e4:73:65:90:71:ae:ee:8f:46:9a:39:e4:26:99:ed:5c:
         7a:f9:5b:8f:ee:b3:d3:73:0f:00:7d:7e:a3:34:ef:73:83:5d:
         cb:1d:04:e2:9e:9d:c6:8f:6f:cc:30:59:37:b1:eb:5e:46:89:
         cf:55:5e:82:c2:ae:9a:1a:48:b4:60:30:42:c9:37:fa:fb:a8:
         74:25:12:c3:dc:e4:d1:2c:c6:28:f4:e7:db:7b:bd:7f:c4:12:
         49:f4:bb:0b:cd:10:80:1f:6a:a1:7a:55:ee:62:81:48:28:1e:
         9b:7f:2f:a7:d9:c1:5f:32:3e:54:72:56:e9:a7:ba:61:46:3c:
         d3:cc:99:72:15:d4:f4:34:08:1b:24:97:d8:7e:a0:e3:09:6d:
         cf:9f:88:c7:4c:97:e6:0d:10:5e:18:2b:29:5c:70:a5:db:56:
         cd:5b:04:66:15:68:54:31:0e:80:a2:43:d2:5e:84:47:e1:0a:
         75:f1:7e:eb:b6:c6:c6:d3:a1:40:09:ef:11:28:de:f4:86:d7:
         b9:42:3e:10:dd:76:09:23:21:65:87:fb:b4:e0:e3:7c:18:73:
         f0:b5:58:f9:af:3d:d4:5a:32:99:bd:f1:97:c9:dd:66:db:4e:
         52:0d:75:8e:36:8f:2c:17:6e:91:1f:04:1f:2b:d7:71:f9:c5:
         32:ae:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:53:59 2026 by rpki-client