Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa
File:                     6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa (raw, json)
Hash identifier:          H+OL50WUGxXg2JlY9BFcN6tozlONegwxK4KRcGZWem8=
Subject key identifier:   7E:0B:B8:03:DE:B1:D6:C1:7D:EA:C8:90:D0:E7:5B:5F:5A:AB:29:A8
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584EA7A0E9DF52E574D002620300
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14813
IP address blocks:        72.22.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:e9:df:52:e5:74:d0:02:62:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3b10167e-5606-40ba-b050-97c9d30bef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:9e:27:22:bf:3b:41:29:16:38:6f:c7:38:
                    b1:63:c6:20:98:d4:8a:df:4f:67:a4:da:4e:a8:49:
                    bd:c3:81:98:c3:4f:f5:b1:d3:2c:a9:48:90:0d:f3:
                    c9:c2:6a:91:a9:09:62:bc:35:d7:7c:e8:52:03:9b:
                    ce:1d:96:bb:7e:9b:7d:68:89:ab:ea:5f:c3:66:3e:
                    84:91:26:9b:d7:4b:fe:39:31:6c:f8:93:cd:e3:c8:
                    16:b1:d4:5f:64:da:10:0f:a2:6e:8e:21:4c:45:5a:
                    83:91:37:fb:83:ac:0d:08:cb:f1:20:5e:83:75:d6:
                    58:17:76:43:fd:f8:2e:ee:89:81:d7:7a:6d:8f:35:
                    22:bd:2b:d1:d3:b5:74:55:09:a6:57:a7:ec:ec:c7:
                    a2:79:88:16:a1:90:13:da:a6:aa:ed:23:96:66:5d:
                    40:95:e7:9d:e3:46:80:fc:0b:d3:35:73:71:25:dc:
                    f2:2c:b6:ea:d2:42:17:88:d6:1e:b2:9c:13:12:02:
                    5d:69:de:a8:7c:f3:71:88:b4:cc:3f:10:f8:04:21:
                    18:d1:11:5c:52:f5:88:a0:68:99:a3:83:f3:25:40:
                    85:6a:dd:6c:37:36:37:a4:20:db:b1:b2:15:ef:b8:
                    b5:e0:76:d4:f7:5f:96:9f:0b:fc:eb:44:8e:08:45:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:B8:03:DE:B1:D6:C1:7D:EA:C8:90:D0:E7:5B:5F:5A:AB:29:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:67:69:19:b9:03:ec:dd:98:f8:83:db:f9:7a:23:6c:79:85:
         d1:75:63:5b:9b:18:54:f4:40:74:6b:2d:22:ba:a7:09:d3:4f:
         b2:5a:3a:e1:a9:7b:09:de:65:d9:19:e6:0d:60:a2:cd:a3:d0:
         93:de:e6:fd:f9:a8:9b:83:80:80:63:94:f9:13:d6:a7:f3:c4:
         60:e5:cf:3f:ec:c1:6f:11:69:d0:ec:b6:90:3a:e8:e5:4d:5d:
         21:66:7f:db:91:0e:82:ae:81:db:9a:11:6b:b5:47:14:b4:9c:
         6e:1d:39:1b:b7:c3:02:2f:9c:1a:80:81:4a:1e:93:db:a0:d9:
         38:e6:e0:8f:3e:a2:9c:05:cc:51:db:70:b4:e1:70:ee:77:55:
         4e:38:18:50:aa:7c:c1:4a:75:9d:17:2a:1f:5f:32:9c:15:f9:
         20:80:2d:13:ef:05:92:07:b3:67:25:f2:55:aa:42:fc:02:c8:
         ce:76:d3:e4:ed:60:c4:1d:c8:75:7f:93:4c:0c:1e:81:3f:e5:
         ba:13:d6:fb:fd:b7:69:f9:f0:25:8b:5a:49:7c:53:43:52:32:
         fe:4d:aa:21:30:a2:9a:11:57:81:81:f6:ff:2a:a3:d6:e0:7c:
         09:68:d1:38:5b:c4:b2:2a:bb:13:39:a7:d8:10:52:39:da:74:
         96:0c:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:49 2026 by rpki-client