Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa
File:                     22035321-9f59-3f81-a882-1edbe11b04c7.roa (raw, json)
Hash identifier:          lrdL7L5NHhC73gyabhgCE+qI/8R3/Jmh1ijdGgSLyXI=
Subject key identifier:   83:D5:2B:12:21:78:24:0F:65:C3:6A:69:4B:8D:67:21:29:A2:F3:BC
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410CAB15B20516CBCFC4AC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:ca:b1:5b:20:51:6c:bc:fc:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a126633f-0597-4e36-b9b9-e701793147d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:4a:78:e4:55:f8:61:7c:d2:b7:27:c0:77:
                    32:58:63:f7:b1:5e:0e:3d:0d:5d:8a:e1:62:7d:d3:
                    b6:d1:6c:ff:75:ab:7c:d0:27:39:f9:42:8e:8e:2a:
                    9c:8c:8b:2f:91:00:1e:07:7b:38:95:71:2e:cd:9e:
                    f9:0f:40:f0:fe:a9:ef:74:5b:01:00:ac:16:66:72:
                    79:29:79:47:f0:9f:d8:16:17:9c:24:31:d5:a6:da:
                    64:70:db:00:23:c0:c4:4f:18:8d:f9:02:7f:bd:87:
                    82:e4:0d:8a:c0:50:0c:1e:38:74:b7:24:49:7b:8a:
                    70:b6:9b:55:a9:a8:4f:c4:70:9f:a5:8b:02:1d:c3:
                    9d:af:ae:59:56:01:1a:3a:a0:92:09:2c:42:57:b1:
                    50:0b:48:45:db:6b:06:ba:f1:9a:6f:ae:9c:99:b4:
                    4e:e9:a4:76:b0:e9:20:79:57:04:1e:f3:0c:19:b7:
                    f5:e0:2a:64:eb:3f:97:1e:4f:86:c6:97:a2:82:fa:
                    9e:17:e7:2f:f7:51:d5:5f:25:68:39:26:dc:61:3e:
                    e9:65:8e:03:f3:64:ec:b6:3b:7f:e6:63:32:e9:4e:
                    8e:d3:87:8d:9f:93:6f:3f:4b:48:5a:9f:42:2a:f6:
                    c5:05:29:5a:9c:c8:2d:09:3a:2d:af:9e:27:6f:3f:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:2B:12:21:78:24:0F:65:C3:6A:69:4B:8D:67:21:29:A2:F3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:1a:17:2f:a9:37:d8:9f:5f:4c:1a:06:9d:1e:cb:06:b1:
         a2:a5:66:3b:64:af:f2:1a:45:e4:87:48:25:24:63:28:cc:7a:
         64:a3:df:21:25:3c:3d:b5:54:66:da:a0:d0:d0:19:35:51:64:
         e6:fa:74:c7:50:89:dc:cc:f7:67:5a:f9:3e:91:8b:18:55:60:
         d1:d2:5b:e4:13:3a:7a:f8:2a:a0:33:11:6c:12:7e:fd:c4:c3:
         c4:b0:e6:c2:c2:da:49:bb:c9:11:40:3d:ae:a4:7c:7c:1d:37:
         c6:3e:99:87:a7:5a:65:2a:a4:06:ff:f2:5e:3f:bd:23:ec:cc:
         82:21:91:0b:fc:5a:93:45:0b:d3:b8:9e:00:1f:19:c2:34:7e:
         51:6d:b9:56:dc:d8:38:44:77:c5:86:28:7b:de:31:85:1c:cf:
         da:0c:48:52:d0:55:d0:1e:54:bc:f4:bd:df:87:dc:9b:88:91:
         02:80:86:fb:ad:23:a9:80:25:76:cf:d4:98:5f:59:96:fd:c4:
         2e:5d:50:40:b9:b4:c1:26:ba:9a:8f:c9:e3:20:3d:a0:74:f2:
         9c:54:05:a1:28:80:c4:5e:5b:66:bc:02:45:a8:d1:ce:7a:16:
         64:fe:c2:40:54:f8:ec:b7:64:36:1b:8a:da:4a:bd:94:b0:f3:
         53:0d:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:49 2025 by rpki-client