Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa
File:                     7a272954-d9e7-38db-a114-33c519fdfe8a.roa (raw, json)
Hash identifier:          Q+plsv32sKns7ivnwSt4iUgA1Yuh1u/MFeBXYeZe2og=
Subject key identifier:   9E:A1:AA:F0:14:C6:BB:EA:24:61:E0:8A:1B:9F:91:5A:74:7D:A0:78
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584E31CF1C5494E8C24C161A4AC0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     63023
IP address blocks:        72.14.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:1c:54:94:e8:c2:4c:16:1a:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=4e08f533-b490-406b-b971-99d0ebdb29b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:7f:b6:d8:e4:b8:50:98:d2:1f:d0:e5:34:
                    2f:69:e7:9c:e0:1c:cb:00:c2:9b:9d:33:04:4d:19:
                    e4:fb:06:f8:26:88:c7:c8:ad:9b:2e:2d:1d:bb:e9:
                    50:67:0f:6b:52:f7:ff:b7:a3:ac:1a:4c:2e:f8:fc:
                    d7:c4:e5:e7:12:fc:87:70:be:05:b3:d7:d2:b8:53:
                    20:04:24:bc:a0:c7:36:70:6f:ff:ee:bc:9a:ab:c9:
                    51:b2:dc:e3:3b:c2:43:fd:56:9c:ab:f2:a3:18:57:
                    b7:ec:95:5b:33:3d:dd:25:1a:58:76:5f:5a:0d:77:
                    1b:02:66:30:14:dc:07:d4:e8:69:32:39:b3:a0:b3:
                    7e:13:2d:91:7e:8b:88:1d:25:e9:e8:aa:43:0a:e2:
                    65:12:80:a2:71:d0:d7:4c:b2:3f:ba:72:2a:8f:63:
                    31:3f:f1:21:0b:48:41:cb:a3:95:72:b3:a4:4d:45:
                    ad:5a:65:1a:39:62:1d:93:ae:68:e2:8e:5a:bd:ac:
                    87:3b:f6:e9:d3:f6:f6:98:a3:d5:28:6c:4c:c8:1c:
                    71:83:b8:be:fc:7a:07:1e:1b:b9:0d:73:1d:8c:70:
                    aa:1c:d7:1e:24:79:a3:6c:ff:4a:f0:7f:8e:8e:9b:
                    16:6f:d3:74:93:36:05:fc:b9:d0:bd:14:4b:b6:54:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A1:AA:F0:14:C6:BB:EA:24:61:E0:8A:1B:9F:91:5A:74:7D:A0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:28:a2:84:bf:48:de:b6:51:b0:51:59:b1:f7:bb:06:61:c0:
         a1:cc:b4:cb:64:a8:46:20:a0:e2:b3:18:41:3a:fe:09:23:0f:
         6f:5a:72:7d:b6:39:45:d7:96:ef:df:9f:1a:2e:96:44:c3:73:
         d3:e8:81:de:e2:84:79:e4:3f:25:8d:48:e9:ed:99:2b:4f:ba:
         39:ba:84:c5:89:8b:3c:b1:be:66:0b:42:ff:76:41:ed:8c:1a:
         ad:4e:d5:35:cd:ae:8f:85:ab:53:a7:3e:58:eb:df:a9:d8:57:
         a0:80:c1:3a:2a:5a:39:62:63:05:20:cc:50:77:ef:8d:e0:83:
         49:2b:83:0e:3d:81:a3:a0:c2:ea:8f:50:7b:5a:02:5e:31:91:
         00:62:61:8c:06:be:9d:d6:fd:1b:68:de:3a:e2:88:3c:a8:65:
         e0:81:03:24:62:55:6f:1b:09:f7:bc:d2:a4:37:06:05:23:cd:
         99:2c:22:11:a3:e2:04:df:52:6e:a8:cf:0b:0a:5d:3e:27:2b:
         cc:64:b8:7b:16:d1:b1:1b:69:74:ca:ff:9f:2f:75:be:80:96:
         45:72:79:06:31:e8:31:4b:7e:97:8a:b9:f4:02:03:f4:60:12:
         bd:76:93:73:18:f2:42:47:c4:f5:53:f1:dc:ef:02:02:09:93:
         20:ca:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 13:40:57 2026 by rpki-client