Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa
File:                     7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa (raw, json)
Hash identifier:          wbC+YsWbVRVkqEzMz3I/KT+XK4RYfwMTS/p0XJs33Y0=
Subject key identifier:   E9:4A:02:31:A9:F1:E5:57:3D:4E:20:DC:59:D1:76:D1:42:6C:F8:A7
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584EE9580BF66D0206B3927DD7C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa
Signing time:             Fri 21 Aug 2026 14:49:16 +0000
ROA not before:           Fri 21 Aug 2026 14:49:16 +0000
ROA not after:            Thu 19 Nov 2026 15:49:16 +0000
asID:                     401362
IP address blocks:        72.14.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:58:0b:f6:6d:02:06:b3:92:7d:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Aug 21 14:49:16 2026 GMT
            Not After : Nov 19 15:49:16 2026 GMT
        Subject: CN=ef08b185-dfea-4371-bed9-0f77baad3ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:8f:52:cd:94:01:18:27:17:20:ae:ef:d3:
                    c4:7f:5e:3a:8b:f2:07:7e:02:45:ed:52:0b:3c:2a:
                    14:5e:6f:03:ac:de:e6:b3:8b:97:31:1e:7e:e1:e3:
                    32:fe:e3:1f:73:1b:5c:04:3b:34:c8:89:0b:6d:36:
                    05:d7:c8:d9:b3:ea:97:29:26:c6:a9:bd:0e:11:8a:
                    ad:3d:ea:2e:41:89:5c:56:e9:c8:38:57:9e:e1:4c:
                    39:34:28:06:43:27:2c:46:c8:1b:6e:2d:e4:e0:4e:
                    9e:24:e1:fb:f1:01:91:d9:3a:4d:90:8a:87:f9:e7:
                    aa:66:e6:52:a0:17:bf:79:ea:24:1a:b9:b1:69:91:
                    f7:89:ce:c3:54:be:a3:02:48:05:ec:da:53:c7:24:
                    b3:4e:85:ef:c5:ba:b0:98:6e:61:b9:a3:c0:ee:77:
                    c0:2f:52:3e:18:17:41:d5:2c:4c:03:3b:a0:0f:a2:
                    62:ec:38:8f:54:6c:86:b6:3e:57:81:af:03:84:3d:
                    3c:4b:d8:6a:bf:20:7d:7f:09:7b:86:16:d9:2f:14:
                    f8:90:51:87:63:57:e6:81:64:7a:ee:3f:87:67:07:
                    72:3d:78:d2:5b:88:f0:40:5a:46:16:e2:0b:57:41:
                    16:b8:16:b7:94:c6:45:5d:4b:8f:e7:1d:75:b0:f6:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4A:02:31:A9:F1:E5:57:3D:4E:20:DC:59:D1:76:D1:42:6C:F8:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:0b:ab:10:f4:fa:e7:0a:a2:24:5b:8f:21:c1:e6:33:a3:
         b5:af:05:69:f8:cb:ea:29:03:8e:d0:10:21:93:74:eb:f5:bb:
         54:65:67:56:c1:86:a6:2a:4b:9b:2f:b3:66:ae:7c:3a:8a:4b:
         61:bc:3d:38:a7:5e:d4:06:b5:d2:1a:77:78:8e:43:86:fa:df:
         d1:b0:6d:d1:22:da:8b:f4:4d:96:70:d2:81:d5:55:d2:31:56:
         eb:c7:a0:e0:a4:83:eb:8c:98:00:15:60:a6:09:c5:0f:94:c6:
         2e:b2:9a:ef:49:d6:76:39:24:5e:e7:60:24:ff:1b:aa:f6:84:
         f1:60:57:16:15:0d:f3:81:5f:08:c0:6a:03:58:70:5d:4c:33:
         01:62:b9:6b:a9:83:24:ca:cf:1d:0b:5c:c6:9f:26:f2:17:62:
         d9:a3:9c:34:fd:2b:ba:1f:35:d5:4e:ac:ca:9d:59:81:99:05:
         48:c9:19:dd:8d:d6:0d:3d:3d:15:83:52:67:6d:f0:f1:b9:ba:
         f9:2e:49:ff:f2:f9:1a:c4:94:a6:42:95:66:8f:87:b4:78:fc:
         1f:25:a9:3e:cd:af:08:fd:01:5c:e3:45:1d:9c:12:3d:d8:79:
         fc:8c:6a:fb:ee:6f:20:36:a8:3c:60:ec:d1:e5:dc:05:0c:51:
         73:23:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:31 2026 by rpki-client