Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fed377e9-bd90-3fae-b492-d454f9c9f590.roa
File:                     fed377e9-bd90-3fae-b492-d454f9c9f590.roa (raw, json)
Hash identifier:          V/FQnZoTcS3U1gebZb3WQPrGNR7PShzb0gf9Y2/kZZU=
Subject key identifier:   29:69:76:BA:B2:A8:1C:BC:C0:99:E8:CA:34:A2:BD:35:F6:41:11:A3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDDF734DDCF2AFFC716E41E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fed377e9-bd90-3fae-b492-d454f9c9f590.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     63219
IP address blocks:        72.52.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:34:dd:cf:2a:ff:c7:16:e4:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=6b78f8bb-e4a6-4773-930f-8501ed7fc799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1f:46:91:a3:6c:30:a4:55:16:5f:0c:b2:b9:
                    45:8b:09:cf:59:15:ca:18:cb:6d:5e:90:4a:41:f4:
                    d3:d4:79:1e:97:87:5e:16:5d:43:10:33:5c:fd:b1:
                    e2:f0:54:93:b4:04:28:d8:03:3c:73:ee:60:ea:d4:
                    0f:cd:ed:5c:00:7d:1e:dc:9d:20:bd:a5:79:5e:69:
                    a9:03:62:3e:14:0b:06:b5:99:7d:c2:25:b0:04:18:
                    1d:37:5a:4b:d3:75:5f:1b:f0:15:4e:5d:3b:63:4b:
                    8a:ec:d9:a6:fd:a5:c7:6e:d2:7a:d7:42:9e:d8:dd:
                    d3:2a:75:a6:f3:ec:08:1f:d4:37:ff:f4:d2:c5:e2:
                    ab:79:1d:97:08:f7:f2:f5:e0:a1:f8:e8:dd:f2:4c:
                    e2:05:53:17:60:06:f5:ef:25:25:26:c2:cb:73:81:
                    49:d2:27:bd:55:d6:49:a0:90:02:aa:b0:e6:61:fb:
                    63:2c:46:e9:7b:97:65:27:0e:d3:3d:d6:5d:15:ed:
                    4b:8b:b6:23:51:b5:fa:39:ae:b9:58:37:c5:49:62:
                    c5:f9:10:6e:f9:c5:3f:aa:be:71:23:77:3f:34:cd:
                    2a:e8:2b:f0:e9:a2:44:37:ae:9c:46:f7:27:e8:e7:
                    44:07:1e:97:20:14:21:62:22:c5:07:94:1a:ba:d0:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:69:76:BA:B2:A8:1C:BC:C0:99:E8:CA:34:A2:BD:35:F6:41:11:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fed377e9-bd90-3fae-b492-d454f9c9f590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:d4:95:2e:e6:18:9b:7e:79:74:95:97:cc:05:e7:99:7d:
         40:3e:fe:fd:3e:c7:9c:40:4f:79:17:34:4a:c1:d8:c1:b3:ee:
         02:f7:8a:3c:fe:38:7f:70:19:81:a2:32:82:53:06:4e:c7:24:
         bd:ce:4a:7c:28:02:74:69:82:a3:51:38:0d:4d:0d:cd:f5:27:
         9e:ea:a8:98:32:62:88:cc:14:d7:b6:54:57:67:b4:a6:04:5f:
         a9:ea:1f:46:60:e7:a4:09:9d:9b:92:5b:f1:b5:26:3d:8e:9e:
         c3:ce:87:d3:4a:57:f9:f3:e6:5d:13:96:9f:85:1e:29:ad:e8:
         0d:2f:79:19:e4:16:78:9e:a3:f8:74:26:dc:36:1e:46:11:c7:
         90:43:c5:3f:17:a9:97:f0:66:97:e6:42:c6:ac:b3:26:91:84:
         4e:35:2f:36:99:41:00:dc:79:4d:2d:69:52:30:f7:3f:95:d1:
         49:c3:4e:a4:a9:cb:5d:56:c8:71:f7:39:5b:00:9e:03:75:5f:
         aa:e7:07:ca:70:cc:15:b3:74:f2:17:72:c3:41:23:31:61:2c:
         3b:65:e7:56:fa:9f:d8:10:07:f8:2d:70:f1:32:a9:bb:56:21:
         2b:94:75:5d:d3:23:3e:4f:70:ca:c0:76:b9:b9:eb:a6:ad:f6:
         43:73:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:33 2026 by rpki-client