Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ae3e98b7-564e-39bd-881b-d1d31dd80185.roa
File:                     ae3e98b7-564e-39bd-881b-d1d31dd80185.roa (raw, json)
Hash identifier:          MhLSPh8VRhSuvPtjXhD3TFp4+IZCg/hHEWi7fCn1Wac=
Subject key identifier:   22:53:C6:D4:9A:D5:A7:EF:ED:95:3D:46:5A:B9:34:1B:A2:2B:44:57
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584E059C6F7D64F05D4A054D9E80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ae3e98b7-564e-39bd-881b-d1d31dd80185.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     14813
IP address blocks:        72.51.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6f:7d:64:f0:5d:4a:05:4d:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f778b4a2-74ae-41e2-8f32-ba6e530301f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:c0:b6:59:ad:2e:a3:a4:60:f3:b9:56:e2:
                    13:04:23:8d:37:f7:55:89:3a:64:4c:f9:3c:51:90:
                    53:5d:45:f3:6c:be:ee:82:cd:c9:7e:17:da:e5:3b:
                    9c:90:ea:cd:31:cb:28:29:ce:c3:6c:3a:12:8a:94:
                    a6:8e:56:2c:e4:a1:a7:93:a4:62:0f:5a:ee:0e:1e:
                    b0:6e:50:81:74:2a:63:73:fe:2f:fc:c1:f8:bb:13:
                    21:07:4a:66:8a:cd:5d:e8:7c:4a:3e:2d:bc:4b:c2:
                    c5:8f:16:1f:dc:b4:37:ca:ac:ba:90:b5:1d:cd:6f:
                    78:0c:53:63:ec:d8:b6:ef:f3:72:36:96:a8:85:72:
                    91:32:a2:d3:66:d9:51:e5:aa:1c:65:13:ee:c3:ea:
                    b9:05:c2:fd:20:91:22:fb:74:8b:29:7c:28:22:29:
                    c3:a8:9e:d8:03:44:c8:3a:71:4d:26:26:fa:61:87:
                    5c:86:32:12:60:4f:f6:17:b3:cc:1b:35:cf:71:3c:
                    7f:a2:e2:ad:ee:c6:73:92:5a:0c:ab:cb:b1:94:9a:
                    f1:78:58:d1:e6:64:b4:0e:1c:f0:a6:d5:b9:22:df:
                    8d:c1:74:d5:b7:81:6c:8f:45:37:1c:af:a7:58:ce:
                    0f:95:e8:d2:fb:cd:25:5e:32:d2:6e:bc:ee:87:51:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:53:C6:D4:9A:D5:A7:EF:ED:95:3D:46:5A:B9:34:1B:A2:2B:44:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ae3e98b7-564e-39bd-881b-d1d31dd80185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:b6:c0:3d:ea:09:96:3c:14:f6:8f:96:51:e8:5f:5f:f8:
         60:bb:0f:c6:a3:03:a2:c0:9b:fb:25:8f:d3:60:c3:bd:e0:1b:
         0c:ed:29:74:1a:55:4f:2e:92:75:15:1b:b3:e0:5e:c6:75:00:
         b9:5c:31:d3:eb:01:45:da:5f:21:9d:18:ef:93:a7:ee:1e:8c:
         9f:12:c4:46:4f:80:0c:df:e8:66:0c:2f:86:bb:6c:15:0d:c3:
         bf:26:82:72:b0:7c:b3:fe:ea:0a:4e:c8:4a:88:c2:dd:c3:8f:
         5c:e2:5a:ba:b7:fc:a8:6e:78:a8:1e:05:5e:74:75:f5:7f:b7:
         6a:37:f6:e1:e3:c6:0c:8b:9d:d1:5c:37:41:12:70:44:10:45:
         a3:c4:4e:1a:cd:d1:f4:a6:e3:c5:66:a8:0f:3a:e1:3e:6b:2b:
         52:fc:c5:a3:31:c2:bd:f6:34:b4:47:bc:40:84:ba:99:e3:1b:
         62:ac:e9:d4:ef:7e:e5:17:25:62:a2:1c:e8:08:5c:39:1a:53:
         fc:1c:db:1a:91:b8:04:0c:5b:60:a1:f4:4d:eb:06:ec:61:14:
         5c:b1:db:7c:63:1e:b3:90:eb:87:38:34:28:81:28:e3:06:d2:
         6f:c1:f8:ac:40:2a:e9:48:42:35:f0:c0:15:4f:0b:d2:75:2c:
         ce:7c:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:04:15 2026 by rpki-client