Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa
File:                     8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa (raw, json)
Hash identifier:          0SMy8ZPqEAGcnr5seBT0vUebRYJ7lnebSvy0wOs934I=
Subject key identifier:   32:04:FE:B3:A7:55:A4:85:31:72:BE:55:A3:E0:89:92:EB:C5:43:74
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584E059B3819EFA1DBE74E7B0950
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     14813
IP address blocks:        72.51.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:38:19:ef:a1:db:e7:4e:7b:09:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=cb3f8924-9cd2-4172-b5e9-d982311ac480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:55:34:84:2f:3b:bb:12:b5:8c:ed:34:88:
                    e3:8f:9c:65:77:45:88:90:f4:9d:e4:6a:ed:39:62:
                    2d:06:64:f0:00:c0:5d:cf:b8:0c:1b:1b:74:46:10:
                    7a:a3:be:00:e2:d4:dc:1e:3f:15:3b:c0:7e:2a:ca:
                    78:e8:c7:6d:b4:d3:34:cc:f6:d0:2f:38:e9:b2:ec:
                    be:f3:8b:94:7d:71:ca:0b:40:f5:10:4e:ad:f9:dc:
                    81:15:b8:56:97:9b:fb:60:89:ad:b5:2c:c9:2a:28:
                    6c:10:1e:1e:03:90:31:38:7b:b0:92:fe:67:69:ed:
                    64:ad:c6:17:b2:10:e0:3b:7a:97:c0:25:b9:74:69:
                    71:2c:39:29:ab:2b:d1:a9:55:f1:e8:23:e3:91:d7:
                    46:22:31:34:62:1c:33:78:1c:85:65:c0:08:dc:6a:
                    67:97:9e:9e:f8:b9:53:db:f5:68:ca:16:2d:ca:fe:
                    0f:7d:64:ae:47:60:55:b4:5d:35:6d:b8:e7:28:5d:
                    d8:d4:7c:a5:2e:de:99:10:69:d1:c9:97:2b:64:b6:
                    9f:69:0b:be:99:14:ab:93:b9:1f:44:1e:a3:4c:d5:
                    54:6c:57:c1:41:99:46:2e:f3:24:b4:d1:ee:24:ef:
                    3f:85:a9:51:98:61:8e:2c:39:45:2d:0b:00:74:5f:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:FE:B3:A7:55:A4:85:31:72:BE:55:A3:E0:89:92:EB:C5:43:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:de:f6:5c:a0:bd:9e:1d:95:0b:d6:78:f0:4d:21:fe:f8:5e:
         68:95:1f:11:aa:82:70:ca:2f:2a:16:73:ff:f7:6e:5e:63:41:
         5e:fd:6e:78:c5:88:12:09:45:86:5d:04:79:d3:5c:71:7a:2f:
         03:f8:8b:24:50:dc:d3:3b:81:c1:e8:2e:8a:a5:5a:7f:ef:3f:
         63:82:49:ef:0c:5e:0f:68:52:34:3a:a7:81:8e:6f:f4:6c:20:
         e6:91:f2:e2:94:cb:b8:f7:a1:31:3a:d8:cc:08:af:a6:9d:50:
         05:24:ab:7d:29:7f:96:02:da:bc:50:42:30:03:c4:42:6e:4f:
         aa:08:59:a1:b3:b3:2b:15:69:b9:d8:aa:6e:3a:be:8a:44:8f:
         13:fb:db:b6:53:06:ea:ea:65:89:fa:a2:9e:32:4e:bc:48:6e:
         22:a5:13:ea:50:7a:b9:ac:cc:e3:bf:2c:fb:7b:98:50:2c:ab:
         95:5d:34:f8:5c:0d:1c:d2:56:36:85:12:29:3b:ba:cf:97:1d:
         eb:35:b0:7e:ad:89:b7:ef:81:2b:5f:0a:1c:e6:1b:cb:73:f8:
         6b:78:a6:f0:af:a0:b6:3a:15:65:b4:1c:14:f7:c6:eb:90:72:
         9a:f0:5f:0e:b9:06:7a:ba:e8:0c:6a:76:92:0b:81:9b:3b:a2:
         bb:e0:d0:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmzgZ76Hb5057CVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
Y2IzZjg5MjQtOWNkMi00MTcyLWI1ZTktZDk4MjMxMWFjNDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFdVNIQvO7sStYztNIjjj5xld0WIkPSd5Grt
OWItBmTwAMBdz7gMGxt0RhB6o74A4tTcHj8VO8B+Ksp46MdttNM0zPbQLzjpsuy+
84uUfXHKC0D1EE6t+dyBFbhWl5v7YImttSzJKihsEB4eA5AxOHuwkv5nae1krcYX
shDgO3qXwCW5dGlxLDkpqyvRqVXx6CPjkddGIjE0YhwzeByFZcAI3Gpnl56e+LlT
2/VoyhYtyv4PfWSuR2BVtF01bbjnKF3Y1HylLt6ZEGnRyZcrZLafaQu+mRSrk7kf
RB6jTNVUbFfBQZlGLvMktNHuJO8/halRmGGOLDlFLQsAdF+eDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIE/rOnVaSFMXK+VaPgiZLrxUN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvOGY3YThkOGItMWFkNy0z
ZjJlLWExMWQtNjJmMmI5NmI1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDNoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFne9lygvZ4dlQvWePBNIf74XmiVHxGqgnDKLyoWc//3bl5jQV79bnjF
iBIJRYZdBHnTXHF6LwP4iyRQ3NM7gcHoLoqlWn/vP2OCSe8MXg9oUjQ6p4GOb/Rs
IOaR8uKUy7j3oTE62MwIr6adUAUkq30pf5YC2rxQQjADxEJuT6oIWaGzsysVabnY
qm46vopEjxP727ZTBurqZYn6op4yTrxIbiKlE+pQermszOO/LPt7mFAsq5VdNPhc
DRzSVjaFEik7us+XHes1sH6tibfvgStfChzmG8tz+Gt4pvCvoLY6FWW0HBT3xuuQ
cprwXw65Bnq66AxqdpILgZs7orvg0NE=
-----END CERTIFICATE-----
Generated at Mon Jun 8 22:02:36 2026 by rpki-client