Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa
File:                     7a4b2917-6976-34de-8fe8-248aadad86b3.roa (raw, json)
Hash identifier:          cxmT1hue3EmQFNe+9ktU+mtJsp/UtvdT6dtHApozUu8=
Subject key identifier:   11:ED:24:A3:53:67:CF:30:C0:6D:42:E9:49:42:6E:B1:5F:B9:EA:07
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584FA16330C8FAFA646F6BD05300
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     20460
IP address blocks:        72.14.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:30:c8:fa:fa:64:6f:6b:d0:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=d813c457-5205-4c2b-a1e7-9c60d5e77141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:af:88:1f:a6:b1:4f:ad:3c:27:1d:ee:f3:
                    ed:79:4b:97:af:95:5a:7e:fd:c1:ad:d7:d9:48:41:
                    0c:6b:c7:ef:55:cb:83:a2:89:75:64:06:d5:dd:db:
                    8b:5f:58:77:05:73:66:91:4b:9c:e4:cf:82:53:3f:
                    9d:a1:aa:76:8b:29:5a:ab:2a:55:87:9c:7b:3e:81:
                    22:19:51:e1:ba:4c:c1:ce:82:7c:11:8b:f1:04:fb:
                    ca:eb:68:9c:95:25:24:3d:ba:49:43:b7:95:42:0d:
                    77:8b:c3:d7:70:ce:5e:8e:1d:c7:d8:d8:31:a4:f0:
                    af:3a:a3:11:33:3f:ce:34:41:b0:ca:05:48:d2:b4:
                    f6:2e:9c:70:49:01:31:db:3a:2f:4a:31:27:18:06:
                    14:ed:6b:be:b1:03:6b:73:9f:79:5e:28:75:be:cd:
                    0c:05:ae:8c:6f:32:b1:cd:0d:a6:88:45:b2:68:45:
                    a6:ce:58:b1:b8:94:a2:94:12:bd:52:8c:58:42:3c:
                    8d:18:3b:27:10:35:8c:1e:ac:40:ca:01:fc:bd:f7:
                    2a:5c:63:66:03:b0:2a:df:ca:9d:89:91:f6:fe:60:
                    0d:73:1a:ab:d1:89:69:94:a6:8e:2b:1a:58:e1:f7:
                    09:8d:a5:56:b0:01:e0:b6:7e:50:fc:f5:72:9b:95:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:24:A3:53:67:CF:30:C0:6D:42:E9:49:42:6E:B1:5F:B9:EA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:46:5c:3e:5f:5b:56:e7:36:c2:b2:7a:c0:c2:e0:7d:43:
         8d:34:1d:d8:86:07:1c:02:12:1f:f3:09:52:3b:86:d7:18:52:
         8c:e3:2a:88:c1:7e:0e:41:55:a3:fd:fc:24:54:64:db:47:b4:
         b9:58:67:66:72:fe:61:1d:3d:e8:a8:db:3e:6f:89:a2:56:84:
         89:b8:ad:8a:d9:ed:18:64:99:58:50:60:b5:40:cd:b4:f5:e7:
         62:e2:13:ec:d9:01:f7:cf:2b:5f:c4:fc:18:a1:2a:59:7b:a8:
         37:bb:20:aa:cf:f2:6e:b5:e1:9b:1b:83:fc:02:68:f2:06:c0:
         90:71:fd:b8:c9:05:e8:06:ea:f2:44:32:a8:5e:53:19:b4:ae:
         82:ee:fa:d5:f8:08:14:d0:fd:25:8b:56:39:e1:1e:8a:13:fd:
         8c:f7:8f:38:68:98:84:55:4b:20:84:9c:3c:eb:4b:fd:63:0e:
         ae:07:80:bc:19:ff:6c:8f:e2:13:ca:16:fe:9f:8d:6f:47:a4:
         16:ef:a5:91:85:5c:d3:5d:29:04:96:86:38:71:18:82:30:49:
         7b:70:bd:d9:eb:5c:8f:a9:9c:d9:a5:b9:12:da:88:4b:19:2a:
         76:b4:5c:25:32:2e:bc:69:15:f6:dc:42:56:3b:87:09:a7:d2:
         96:8f:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:27:36 2026 by rpki-client