Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3a7b5809-3eee-3361-9b39-9c533f085fec.roa
File:                     3a7b5809-3eee-3361-9b39-9c533f085fec.roa (raw, json)
Hash identifier:          7hW3yns6nda46HqbMz3MC3G1vS+jWWMgVNlTDKPMiAA=
Subject key identifier:   D2:25:0C:A7:45:3A:BC:D6:73:6D:6A:3C:FC:A5:53:7E:54:F6:20:75
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A841245F892F902B6A7413F00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3a7b5809-3eee-3361-9b39-9c533f085fec.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:45:f8:92:f9:02:b6:a7:41:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=82db2e59-e7cd-40b4-ae71-9932ef2eb3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:69:6e:b8:39:6a:1e:33:0b:79:f7:0e:72:
                    93:6a:77:64:3c:9e:02:b2:55:32:4f:c2:bc:bd:11:
                    2b:94:ac:02:f5:5b:7e:88:b5:06:62:8d:2b:04:24:
                    d9:f5:46:d2:b2:ff:b5:17:c3:e6:9d:8e:d6:02:c1:
                    16:34:c6:76:dd:99:7d:3e:02:44:52:3e:f1:a2:30:
                    6a:58:56:10:3a:2b:7e:b6:66:f7:2b:0a:b8:a4:17:
                    94:5f:b6:e3:fb:0a:b5:7b:b8:38:11:cf:4f:f6:8d:
                    5b:f3:0a:40:e5:50:0e:c9:fd:88:a8:8f:df:92:0c:
                    a8:9c:4e:f7:23:af:dd:ec:07:a3:ca:6e:ce:52:42:
                    29:29:71:9b:35:c4:06:17:58:bc:7f:b6:2d:18:29:
                    bd:43:0b:43:2a:4c:47:ef:7d:6b:dd:a8:14:47:54:
                    65:0e:a3:02:04:c2:7b:90:bf:3a:34:39:a0:a2:22:
                    ff:14:d8:a0:13:95:84:75:e0:17:f6:58:72:19:cb:
                    c5:75:db:e0:02:06:af:72:b0:ab:c3:67:bd:0c:6a:
                    20:26:43:3e:75:4f:95:0f:4c:b8:3b:8b:58:60:e0:
                    a1:f8:ac:84:a4:3a:2f:ac:e5:da:5c:7e:f9:b0:33:
                    13:1a:a8:a6:b0:74:e2:c0:4e:25:49:81:9b:c9:79:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:25:0C:A7:45:3A:BC:D6:73:6D:6A:3C:FC:A5:53:7E:54:F6:20:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3a7b5809-3eee-3361-9b39-9c533f085fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:32:bc:34:60:ac:7e:0e:37:e7:fb:7d:9f:e0:9c:bc:69:
         cf:b8:e9:7e:d5:a4:e3:b6:c7:fa:de:55:b9:95:b1:77:c3:e7:
         ed:61:e7:25:88:18:d2:80:98:83:c2:33:d4:e9:0a:7a:7d:64:
         79:04:fc:40:9f:3a:a4:74:ff:a5:07:78:af:7f:85:a1:5f:98:
         0d:28:27:11:b9:6c:c4:78:6f:e5:01:f9:ad:c0:96:bf:06:6a:
         78:d8:7a:e0:5b:13:a2:d0:f5:8a:ff:2a:81:9e:04:14:e6:bd:
         e2:29:46:ff:cb:ed:ac:eb:bb:db:db:e7:d4:78:38:c4:f4:e5:
         34:37:b9:71:b0:ca:83:be:d3:22:11:6f:6a:20:5d:fd:d9:88:
         3e:37:7a:cb:eb:8f:5b:54:73:04:ad:ed:ee:ae:70:b5:00:be:
         17:0c:c8:fd:d7:e7:da:78:36:69:1d:c8:57:33:f1:ca:ef:f8:
         73:85:70:4f:b7:d3:3c:77:b5:06:a1:1c:36:14:f6:65:89:f4:
         fd:43:fe:1f:2c:bd:88:be:34:50:92:90:a1:44:0a:82:ed:e6:
         3b:02:c3:8c:37:3c:aa:fd:50:77:ca:28:8f:08:ec:a7:40:de:
         55:4c:f3:a3:a0:92:29:fb:a4:64:87:77:3b:f2:ab:b4:7a:22:
         2e:dc:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:08 2025 by rpki-client