Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
File:                     b01d2239-7b24-3ca6-9965-8de122cf4593.roa (raw, json)
Hash identifier:          oiP0MZcrIlQAi1pmdTwVOHG0Oc8Wd0PJHK0NmUNoadE=
Subject key identifier:   BE:84:11:F0:66:08:60:D2:00:0A:83:05:25:5B:2A:9B:8D:68:D8:51
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584E059C6CBB020E02A122278E00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     14813
IP address blocks:        72.22.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6c:bb:02:0e:02:a1:22:27:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3710c65d-775b-4938-82a4-4c79b0dd73b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e5:ce:e3:a2:a7:28:7f:90:8f:9b:cb:93:93:
                    97:03:68:3c:50:05:12:46:3f:7f:bb:e5:f9:b4:36:
                    a6:53:fe:42:6a:03:7c:a6:09:2e:8e:76:61:46:50:
                    0e:64:17:9b:d5:3a:a5:6c:10:96:50:c7:2c:ff:61:
                    08:da:29:54:d9:68:b1:e7:4a:85:a2:ce:94:1a:68:
                    6c:99:76:d9:bc:af:fa:f0:3b:f6:a5:7a:b9:1e:07:
                    35:89:95:98:0b:f5:c5:c6:68:0f:41:1b:97:06:a5:
                    a6:59:ff:a3:41:00:72:04:5b:ec:10:a9:28:99:f8:
                    e8:be:08:8b:9b:0d:96:0e:5b:5e:56:06:da:37:9c:
                    90:eb:01:ed:10:2a:b8:d4:62:07:34:29:19:b6:fa:
                    83:b8:f3:91:37:5b:7f:9c:69:fe:ac:bd:c7:85:04:
                    1e:25:11:a3:6b:da:5d:38:d8:ef:3f:40:e9:21:10:
                    e4:cd:8b:bb:68:68:27:12:c8:f4:8d:f2:09:95:a5:
                    4a:a4:95:f8:e3:ee:4d:8b:77:df:82:57:71:63:ff:
                    04:9e:4a:92:3a:72:0a:96:5c:23:f8:4c:90:6e:49:
                    c2:3e:ef:ec:9c:17:e7:fb:89:0d:97:12:7f:16:69:
                    39:82:3f:f4:b6:39:23:b7:a0:18:c9:f9:73:20:3b:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:11:F0:66:08:60:D2:00:0A:83:05:25:5B:2A:9B:8D:68:D8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:a5:c1:ee:6b:21:21:3a:40:74:2b:d7:39:46:7b:ff:03:
         a3:2e:d7:91:0f:7e:01:53:2e:3e:08:70:bf:83:77:64:21:7c:
         3e:8e:e3:03:ee:e9:50:51:fc:91:5b:be:8e:cd:5d:07:ae:87:
         84:68:bd:99:dc:b3:e0:1b:4a:61:e1:6f:da:a2:35:44:ea:99:
         11:b9:26:8b:ab:b2:0e:18:23:ff:a8:21:66:fe:f1:b4:e4:e2:
         38:3c:80:23:35:9f:7e:e0:64:af:0d:98:ad:c9:ce:81:1b:e7:
         51:55:14:9e:96:77:2c:04:af:00:3d:10:f0:21:f3:d9:66:7e:
         28:5c:50:53:0e:b4:b6:51:b8:17:81:c9:d1:8b:eb:4d:d5:73:
         6e:73:4d:6e:36:7b:dd:de:9b:ab:44:74:d1:4f:62:d0:2c:bf:
         8d:3f:ec:54:70:49:5b:06:67:8b:7a:d7:07:a8:17:ad:c6:8b:
         e1:f0:98:3a:8d:a9:ea:27:e9:b1:fe:1a:e7:5a:0c:cc:06:b4:
         c0:d6:c5:99:09:f8:31:4e:e5:c9:69:8f:3c:36:ef:13:5d:c6:
         ea:48:2e:a1:6a:f8:ff:41:c6:a9:73:46:b5:75:0b:03:76:bf:
         4f:be:26:af:54:04:2e:e9:ae:ac:49:ad:06:b7:fc:11:d4:ce:
         6a:8f:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:04:15 2026 by rpki-client