Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b7110bdf-f807-30e5-a4b7-b8fdff38112f.roa
File:                     b7110bdf-f807-30e5-a4b7-b8fdff38112f.roa (raw, json)
Hash identifier:          HasiwFRG0gP3MC/hRQe17kno2kzs85r2CLfajZ0KODU=
Subject key identifier:   D5:00:74:05:8D:FB:03:89:F3:5F:45:A2:20:60:D8:04:D5:3D:44:B1
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584EA7A0B12F4C35706CF1F69C80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b7110bdf-f807-30e5-a4b7-b8fdff38112f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14813
IP address blocks:        72.51.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:b1:2f:4c:35:70:6c:f1:f6:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=21b3b312-674d-41ac-8823-e209556f7094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:3e:03:61:e1:37:7a:cd:bd:ec:76:4d:9e:
                    c2:cd:71:37:3a:c8:07:e4:3b:44:bf:06:57:a1:34:
                    f5:ad:29:df:73:d0:32:9c:c4:12:50:36:b0:be:73:
                    1a:ae:0d:c3:e8:1a:14:7b:f5:f0:b5:bf:45:ac:c8:
                    da:66:0c:d5:75:12:fe:f5:b2:39:b4:21:c8:ce:ed:
                    d4:59:f6:c8:fc:76:67:d5:3b:ff:c6:ae:4f:45:40:
                    24:fb:4b:14:65:0b:58:3b:32:07:34:f0:98:0c:a2:
                    87:d1:75:98:b6:fd:77:72:4a:e1:d0:9d:12:77:97:
                    52:c1:41:d4:01:a6:a8:93:f6:05:93:b7:db:ad:13:
                    86:a8:2c:74:ca:54:cb:16:92:e1:d1:90:90:9b:c1:
                    b3:81:1b:5e:1e:67:3f:e2:47:6f:b0:14:52:49:41:
                    56:1d:74:2c:eb:22:f5:88:87:f3:91:d8:25:63:f8:
                    8e:cc:03:a3:d3:e6:40:e6:6f:b0:a0:d9:36:87:16:
                    21:05:08:39:e6:81:59:4c:eb:12:44:c8:53:0c:9b:
                    f2:df:52:38:8c:a7:05:a1:e0:9d:78:55:7d:03:6a:
                    6a:16:a8:aa:3a:cc:92:14:72:57:98:41:e7:7c:19:
                    39:1f:07:b6:25:f6:cc:62:30:91:77:11:ab:aa:b7:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:00:74:05:8D:FB:03:89:F3:5F:45:A2:20:60:D8:04:D5:3D:44:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b7110bdf-f807-30e5-a4b7-b8fdff38112f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:8e:f6:b6:56:d0:e8:1e:2e:c1:d2:78:8a:3c:b4:1f:7d:bb:
         a7:cc:96:5f:f7:a4:4f:8b:f3:46:a9:67:6c:f0:c4:57:90:d5:
         38:dc:83:ab:8b:60:4a:08:49:32:47:bc:f4:a3:72:43:fa:f2:
         4e:0c:a5:0e:20:07:a8:5d:15:e0:ff:aa:7f:88:80:52:a1:4f:
         e1:c5:d6:a0:1d:31:15:9e:70:4a:d5:d0:cb:3d:18:c1:cf:b0:
         19:9c:8a:50:57:c1:3d:a6:79:d5:26:53:3d:12:3a:5c:5f:b8:
         dd:3e:a5:7b:ef:5a:63:20:fe:b8:03:21:9f:f4:2d:15:a6:5b:
         22:d1:25:58:2d:57:9e:89:cd:e6:28:88:73:4f:ad:c8:cc:7e:
         13:3d:6a:d6:5c:b0:7c:7a:14:9e:fd:30:4e:cc:05:a4:a4:1e:
         76:2e:67:0f:50:8f:b8:b9:18:75:d9:eb:66:6e:a0:d4:6b:de:
         25:c9:7d:cb:0c:9d:29:d8:19:9e:0f:9c:e9:e1:5a:0e:bc:5d:
         f5:fb:e1:45:46:37:52:ec:87:f2:9e:94:40:22:e2:53:e2:14:
         d3:33:e9:bc:4a:5a:10:c6:2b:bd:91:5a:d8:bc:fc:f4:8b:63:
         be:3d:e7:42:55:29:fd:ab:6f:40:6f:a9:20:71:cb:02:bb:7b:
         5c:e8:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:17 2026 by rpki-client