Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
File:                     aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa (raw, json)
Hash identifier:          oqGvc92a74eGSbGSLzzuLA+adQWl3f9QNuqbdEVz+T4=
Subject key identifier:   48:01:48:C3:1A:48:2F:B9:D9:1E:76:F5:FA:3D:6C:B4:FF:59:5C:1F
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F4328584E7A64D7D98D2CC80EA3E0BA70
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     14618
IP address blocks:        72.18.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d7:d9:8d:2c:c8:0e:a3:e0:ba:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=d34f09d6-ab52-41e8-8994-46058601351e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:08:36:24:33:44:db:36:5b:9f:71:96:19:
                    68:06:53:22:1e:1a:f7:b3:54:19:58:c4:99:74:03:
                    3b:8b:f7:ba:a1:0b:0b:8f:62:67:38:41:02:14:a8:
                    bc:af:9e:a7:5f:eb:8d:7d:45:6f:79:d1:73:ac:17:
                    38:77:5e:fc:bc:89:b6:35:7d:7d:fa:21:c9:d0:32:
                    37:53:ae:88:e1:d1:7f:95:61:ea:28:e6:bf:24:42:
                    ee:c0:2d:98:0d:44:35:ae:ed:2c:f4:0a:82:2a:95:
                    f0:3b:b2:bc:6e:39:f4:b7:04:fb:1d:d9:f8:c8:7e:
                    81:6e:0d:90:38:ff:85:34:b5:c7:fe:f6:87:73:f0:
                    45:c3:dc:f6:94:6d:2a:13:5c:f0:08:d6:f3:19:8c:
                    04:b1:7a:3c:9b:ec:ca:78:bb:d1:79:fa:89:6b:36:
                    06:b3:dd:c7:a6:15:6c:ea:45:80:ce:ab:24:f6:a0:
                    48:ec:06:d7:9c:c5:2d:35:a1:ef:23:71:a8:c3:a3:
                    75:91:42:ab:2c:f0:d9:49:11:62:c6:dc:79:36:4d:
                    df:e0:f1:ae:cd:53:35:c7:d7:b0:f2:c5:94:53:79:
                    1f:39:2d:e7:4d:36:9b:b5:35:bb:d3:f0:64:95:48:
                    42:e6:85:73:8c:c0:12:81:c0:ba:2f:a7:41:56:61:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:48:C3:1A:48:2F:B9:D9:1E:76:F5:FA:3D:6C:B4:FF:59:5C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:4b:aa:ba:13:c4:63:8e:28:c7:de:e4:9f:3d:2e:79:78:
         f4:f4:e8:e3:d3:31:01:38:e1:74:c6:66:88:00:92:33:03:81:
         e7:09:0c:43:fb:32:25:5a:95:d6:8f:06:b7:7e:b9:db:41:d0:
         21:45:65:86:4d:52:1f:60:86:bc:c4:aa:2d:dc:eb:af:0f:f2:
         17:77:f8:6a:54:06:27:8f:49:4e:f2:e2:f1:eb:42:40:33:a3:
         c5:0d:41:b9:62:d2:0b:00:2b:ac:cb:b3:ba:15:f8:ef:1e:21:
         4f:56:28:b1:42:25:7d:45:c1:b5:e2:7c:27:9f:ed:7f:06:a5:
         7a:5a:90:33:15:5e:5b:91:f1:15:21:ee:bd:c9:85:56:ce:33:
         b7:67:ab:c5:d7:41:ff:a4:c6:d5:4c:46:75:10:2c:de:fa:2d:
         6e:33:13:35:f5:ab:8c:61:48:d1:2f:2a:35:3a:de:31:72:d9:
         7e:3e:5e:0c:75:78:66:71:26:2d:5e:a6:71:04:bb:fa:ea:2c:
         70:24:5e:78:a5:1b:18:6c:41:95:d2:db:78:28:3c:21:ef:50:
         5b:92:11:4a:20:0c:4b:cd:d2:9c:1d:2b:aa:a2:a7:77:20:7e:
         51:5f:70:b4:c7:8d:dd:a9:e2:9d:24:ce:17:9b:a4:5a:d4:49:
         f6:87:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:48:32 2026 by rpki-client