Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa
File:                     2b65cf01-009e-38e7-b721-99f99e5f39de.roa (raw, json)
Hash identifier:          bwSoihAcUWKxDjeTeoGiTVPA8+VZ//S2s9qscsbiUFc=
Subject key identifier:   FD:5F:27:F4:60:95:37:EC:C4:0D:59:C2:C2:93:DE:20:D2:9E:11:D7
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A84124591939C9B191EB29680
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:45:91:93:9c:9b:19:1e:b2:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6ff51f38-858e-4783-a3db-8188c7ad7be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:2a:de:47:64:d6:53:63:76:2d:56:6d:13:
                    ec:3e:3b:40:25:93:36:47:44:43:14:eb:c2:98:8b:
                    db:30:b8:f4:d1:aa:63:47:59:1a:01:f8:8e:2c:5e:
                    a3:60:35:6c:56:6c:fc:d7:2b:9d:2d:a9:db:88:bb:
                    57:30:ca:5c:a9:fa:94:6c:29:b4:20:0b:b8:4c:fb:
                    3d:6c:6d:b0:b3:65:8a:48:1a:26:9b:56:6a:43:91:
                    61:57:bb:ec:c0:8e:af:2e:51:d0:19:aa:22:68:8d:
                    2e:21:e6:cf:89:33:61:b3:fa:32:a6:15:11:11:b7:
                    99:73:80:ef:89:7d:a9:3c:ef:e2:f0:48:19:35:61:
                    d9:e8:96:f7:cb:a4:94:28:37:c5:b9:f9:20:df:f8:
                    5d:70:4c:7a:35:5b:b5:97:d6:69:aa:b7:9f:b5:98:
                    18:ee:69:bd:eb:78:63:9e:3b:1d:e2:fe:1d:4d:80:
                    cd:9c:86:aa:76:5c:89:9f:39:51:d9:d2:69:ac:64:
                    f4:61:0f:f7:5b:53:6d:37:2f:7f:09:62:b7:ba:e7:
                    65:57:4d:5f:a2:8d:1d:96:9a:fd:4d:88:06:32:0b:
                    ad:69:b0:26:90:81:54:db:df:23:03:10:04:00:fb:
                    db:21:0c:b5:bb:a7:68:4c:16:86:ac:dc:5a:6e:32:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5F:27:F4:60:95:37:EC:C4:0D:59:C2:C2:93:DE:20:D2:9E:11:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:fc:19:d8:90:b3:b2:3f:f0:a0:7d:1b:1c:b3:1a:8b:e9:
         2d:ed:4c:1b:b9:8e:47:a8:a9:2f:c4:ac:99:dd:bb:c2:79:81:
         27:09:5d:a0:68:02:48:d1:df:6a:b5:3d:35:4f:76:67:0f:52:
         72:8e:fa:32:96:c2:7c:5a:cf:d9:3e:4f:74:82:bf:45:c5:9a:
         b3:e6:f8:5d:2a:75:c6:bc:fd:b2:10:30:c3:b1:65:e5:3c:54:
         22:17:f5:b9:35:a3:be:3c:fd:6b:4b:d5:b4:43:6d:18:f1:00:
         28:7c:13:1f:36:8c:08:e6:15:31:47:1f:82:03:8f:c8:1d:63:
         22:2d:dd:4e:88:6e:40:e0:9b:00:c9:86:11:23:f0:d1:16:4f:
         69:59:2e:b3:e5:1d:4f:4a:95:2f:4c:8b:99:f1:c3:1e:c9:07:
         e0:f5:4f:97:3b:af:15:b9:7a:f2:b7:c0:53:bc:b1:9c:dd:b4:
         d1:57:7c:e9:b7:c6:4f:ad:4b:9b:a1:ef:63:b0:c7:e6:d2:d5:
         b2:c6:03:c2:15:44:3a:54:3b:a5:54:b7:6c:67:6c:59:ff:a5:
         a4:9e:6c:32:8f:a7:6f:10:02:ef:1d:96:0f:90:8e:fa:79:3c:
         c0:a4:ee:cf:c6:46:87:06:1d:2c:d3:07:62:1f:c7:d1:30:1e:
         51:1a:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:42:49 2025 by rpki-client