Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa
File:                     84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa (raw, json)
Hash identifier:          t5fJd+pbtWbZVjuLoP7/urt6nd32L31PBBWPhiMEzbo=
Subject key identifier:   52:82:65:CA:9C:39:69:F8:25:76:CB:C9:FA:B9:49:9B:BA:D7:2D:7C
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584E059C68266E80207C795FC6EC
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     14813
IP address blocks:        72.22.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:68:26:6e:80:20:7c:79:5f:c6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=6c788e5a-f699-4a92-a344-715af040e0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:79:96:4e:8f:e9:79:1f:95:e6:f2:21:ea:
                    41:f0:46:d1:9f:c5:15:be:ba:24:f6:19:0d:34:1e:
                    d3:ea:d5:27:f2:1a:fc:9b:21:e7:5e:f7:10:9b:36:
                    6d:dd:2a:a3:0e:8d:38:1f:4e:1c:8b:8e:13:b0:87:
                    de:bd:e2:e6:12:e5:46:0b:9a:e7:9d:13:95:3f:7c:
                    55:c9:2f:00:03:58:99:4c:c8:90:a4:73:cc:16:ab:
                    60:9e:e0:b1:d2:5b:8c:0f:be:f0:e8:53:ce:4d:4f:
                    86:45:62:ba:0b:db:85:e2:60:47:23:a5:b4:1b:f9:
                    b5:29:c5:f9:b3:6d:ea:61:ed:3c:27:0a:9a:a0:06:
                    76:be:0e:11:99:be:52:ad:a5:1c:57:a4:ad:50:5a:
                    8f:97:73:8a:e4:4a:f3:cb:b3:b3:48:c0:fc:63:bb:
                    a2:f5:14:04:90:9c:cd:34:e8:37:27:05:29:16:47:
                    86:c0:23:47:20:81:0c:d1:45:30:81:44:29:92:3b:
                    57:19:70:d0:ec:de:a8:73:14:96:12:e0:45:d1:74:
                    31:ce:d1:48:98:a4:c6:f3:6c:60:c7:7c:d7:53:c8:
                    3e:29:0a:fa:f0:1a:ea:4b:de:74:fd:66:d3:b5:d7:
                    05:53:18:b7:35:49:40:fe:5d:36:74:8d:7c:6b:73:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:65:CA:9C:39:69:F8:25:76:CB:C9:FA:B9:49:9B:BA:D7:2D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:3e:24:5a:1d:42:e0:6a:a9:ad:92:86:c0:25:5a:0d:5a:
         30:4f:8e:80:4c:d8:97:e5:c7:e2:a8:bb:7b:99:8a:bf:28:7a:
         40:f5:f5:bc:e1:c2:57:72:26:6d:8f:32:df:90:07:82:a6:37:
         aa:8e:66:dc:db:db:d1:6f:79:4d:1d:a8:bb:65:1d:63:15:a2:
         17:7a:07:9b:d3:f4:5c:2f:5f:ee:69:06:f3:5b:1a:12:bd:f0:
         a8:fe:c5:50:37:0a:cf:5f:22:95:f8:f1:51:03:0d:1f:bb:07:
         61:eb:76:fc:e6:be:c4:e8:90:af:81:e8:c3:94:25:f6:11:4d:
         b3:11:b4:a3:8a:a1:06:19:c5:0b:63:65:8d:1d:d8:e6:f8:bb:
         33:74:46:5a:32:fd:79:c8:38:a9:1d:63:cb:e3:60:85:50:de:
         20:23:dc:6b:82:51:08:a5:75:67:08:79:e3:9f:9a:e1:ea:7d:
         86:81:5c:4b:9c:78:c5:d5:b1:3d:13:82:36:45:f9:58:73:95:
         f5:74:6a:d8:0e:17:99:08:ea:c4:e5:c1:15:2c:55:c9:dc:34:
         c9:2e:7a:91:e4:72:e7:d6:06:68:67:f4:f4:9b:40:c1:9d:a4:
         4d:c4:4a:0f:c8:07:05:91:02:d0:08:9d:f5:3b:fb:0e:e0:18:
         df:1b:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:02:27 2026 by rpki-client