Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa
File:                     72f5aca1-48bc-321c-beb1-4f0419492a94.roa (raw, json)
Hash identifier:          DuqmlvYMijLiOqBE+OA/gz8Cl3eTMJLGMmkhNDItdsY=
Subject key identifier:   24:33:14:E4:76:B5:42:7D:F3:8E:B0:29:80:97:40:31:36:AC:0C:2D
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584EA79CE71C14291C1908DB6E80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14813
IP address blocks:        72.51.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:e7:1c:14:29:1c:19:08:db:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=67b83a3b-adfd-4688-9e90-67fb850bebca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:ea:45:92:d5:36:fa:83:7a:65:72:50:5c:
                    f4:8b:bc:0c:d2:ad:56:51:3d:c7:0d:82:2e:63:27:
                    5e:ed:07:03:f7:ac:28:17:62:52:1d:af:b3:e9:ce:
                    de:c4:96:4a:5b:3d:05:fe:43:7c:c6:40:ca:eb:24:
                    fc:80:d9:c2:3b:ba:d1:e0:ed:d4:42:85:b9:b8:70:
                    95:a2:e6:10:9f:c0:c2:bc:f7:58:af:7b:1f:b5:4c:
                    ca:29:7e:f3:f7:46:1b:07:11:94:56:06:cc:b8:23:
                    cc:ad:76:88:80:6e:16:c1:63:ae:ce:2d:4a:6b:e1:
                    ba:f8:5a:47:21:5b:3a:f3:aa:7f:66:75:ef:95:79:
                    03:01:84:98:9f:7a:0f:e4:30:48:2e:be:b6:5a:c9:
                    41:97:56:7d:d5:1c:85:9f:fe:fa:09:93:2c:07:2a:
                    32:2a:d5:ab:87:14:cb:c1:bf:57:71:08:ec:14:86:
                    68:49:9e:ac:f2:36:79:db:0d:18:30:d8:43:b4:56:
                    2b:19:6d:80:a8:c1:96:99:99:ef:ad:fa:06:b0:01:
                    99:e2:cd:fe:83:76:73:54:13:25:b3:7a:a9:95:7d:
                    53:35:76:12:7f:5a:7f:d7:fa:18:c7:64:54:cb:ae:
                    5d:1d:3e:40:54:ad:e6:9e:1b:37:05:41:3a:5b:71:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:14:E4:76:B5:42:7D:F3:8E:B0:29:80:97:40:31:36:AC:0C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:74:79:82:fa:f7:be:d4:ca:db:b9:ad:e5:86:d0:9c:15:17:
         cf:ef:4a:b6:95:6a:cb:95:34:a6:b1:31:ed:98:9c:ee:5b:8a:
         b2:bd:01:1f:3e:77:01:c2:c8:1a:6e:96:8f:d9:46:fe:9e:a8:
         1f:fd:68:23:cc:69:01:1d:6a:c2:ce:67:25:26:fc:57:7e:3e:
         bd:a6:87:67:3c:a0:12:84:ed:87:8f:8f:09:0f:4f:d1:2f:cc:
         85:33:fe:eb:7d:69:2c:a2:bd:20:8e:03:04:5c:70:00:20:8b:
         61:31:8f:93:e4:b4:b1:42:9c:6c:6e:15:45:ab:03:de:54:25:
         d8:6e:d7:83:30:d8:ad:ea:aa:cf:f6:b2:de:2d:0c:15:57:45:
         34:2b:5b:36:d6:e5:74:8e:b7:ba:88:e7:b2:9e:de:cb:f6:5f:
         58:cf:b3:20:7f:66:87:03:0a:87:c1:a8:e2:ba:1a:fe:80:b6:
         0b:80:af:74:ef:d6:fc:6c:46:9d:37:d0:2a:39:1a:82:77:c2:
         6b:19:36:a8:88:09:57:9d:6a:64:71:e1:e4:8a:c4:05:1b:13:
         72:b1:59:d8:dd:94:96:4b:6e:37:47:41:54:7a:77:79:5a:26:
         f0:a3:3e:12:9d:1c:dd:7a:ad:be:dc:6f:32:4f:b7:81:d0:2f:
         28:38:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:40 2026 by rpki-client