Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/44d0771d-835f-3836-9e55-2620e44e7ec7.roa
File:                     44d0771d-835f-3836-9e55-2620e44e7ec7.roa (raw, json)
Hash identifier:          gFfu1O0Ms/i4HOgqTQIHB41J1TJAgIuzUr3r5BGLHj4=
Subject key identifier:   15:BF:30:E8:14:65:A2:8F:49:0F:CA:E9:EF:2B:5D:86:E9:92:A0:A0
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A841244D79D4AB17F0BF1FF80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/44d0771d-835f-3836-9e55-2620e44e7ec7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:44:d7:9d:4a:b1:7f:0b:f1:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9ea6145c-3ebe-445d-ad3c-b6bdf6902e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:f2:f8:a9:64:7c:71:6e:09:52:98:67:8d:
                    5a:61:be:54:86:42:94:1a:d8:4f:48:ea:dc:1d:81:
                    af:72:da:f4:b8:18:e1:83:07:e2:a5:c0:75:02:0f:
                    0d:7c:4e:79:2b:a7:93:1f:99:35:69:a6:e7:dd:99:
                    fc:d2:a7:18:6e:9f:07:79:53:b7:96:78:f5:e4:e1:
                    6c:53:9f:36:f2:59:e0:4d:2b:bc:f2:5c:15:18:55:
                    9d:0b:2c:bd:a4:72:6c:0d:f1:ba:a9:73:49:6a:b8:
                    16:59:51:53:ed:75:6c:db:ec:d1:fa:d7:ca:1e:6d:
                    84:7c:c4:86:22:98:01:96:08:73:7b:16:c8:a4:a4:
                    5d:81:6c:5a:f3:4f:f9:02:0a:fd:2a:14:04:b3:79:
                    70:5b:92:8b:24:36:2d:00:9a:ac:cc:6e:2b:3a:25:
                    94:01:dd:98:4a:8a:76:c1:32:76:70:d9:47:4d:6f:
                    e1:89:45:b8:c2:29:e0:8a:f9:02:cd:96:10:b0:17:
                    e8:6a:b7:ca:5b:ee:38:94:52:45:e0:b4:0c:36:bc:
                    04:90:46:bc:d2:3a:15:71:27:4e:7d:d9:48:83:d8:
                    03:58:64:04:07:ee:30:af:cc:40:09:c6:bc:63:7d:
                    ec:74:3b:ec:a4:e9:de:b7:b0:fb:99:7b:28:cd:c9:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:30:E8:14:65:A2:8F:49:0F:CA:E9:EF:2B:5D:86:E9:92:A0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/44d0771d-835f-3836-9e55-2620e44e7ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:a0:97:b3:b0:dd:98:9c:24:cf:e2:9b:3b:6c:44:db:c9:
         c0:ec:d3:a7:83:54:82:f7:52:fa:1f:cb:c1:08:74:d9:ee:9d:
         a0:35:61:2d:07:3f:ed:ff:05:cf:1e:24:b3:99:bd:bd:ad:9b:
         48:59:92:e9:80:c8:8a:06:af:27:17:95:88:53:38:10:c2:70:
         6b:42:b0:1e:71:09:8c:56:c8:11:fa:f3:b4:b9:0f:77:0c:44:
         1d:95:0a:da:5e:20:5c:d7:8b:8c:79:d7:51:16:63:77:77:08:
         97:d0:67:a3:e6:5c:47:8b:15:21:e4:5f:4a:58:c2:23:e4:bc:
         3b:ed:b7:5d:73:47:f9:ef:04:e6:fc:39:4f:01:89:c7:13:01:
         62:30:13:36:e1:89:7d:d3:17:7a:1f:2d:7a:32:68:fa:bc:6b:
         f1:65:28:13:4f:fc:50:4a:b7:7b:7d:c6:05:98:f6:10:ae:9f:
         a6:4b:04:19:9e:65:ff:39:25:fc:6f:9e:b4:44:ce:07:5d:8e:
         76:8c:70:c2:9a:8f:db:ee:c9:ca:78:f0:65:7e:a0:8a:be:2d:
         35:9e:66:9d:e6:aa:a0:4d:85:3a:40:df:ff:13:dc:3d:84:11:
         82:41:5b:f0:c4:2a:69:45:12:bd:d4:62:2e:3d:3c:e4:87:b3:
         ae:9c:0c:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkTXnUqxfwvx/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OWVhNjE0NWMtM2ViZS00NDVkLWFkM2MtYjZiZGY2OTAyZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Ly+KlkfHFuCVKYZ41aYb5UhkKUGthPSOrc
HYGvctr0uBjhgwfipcB1Ag8NfE55K6eTH5k1aabn3Zn80qcYbp8HeVO3lnj15OFs
U5828lngTSu88lwVGFWdCyy9pHJsDfG6qXNJargWWVFT7XVs2+zR+tfKHm2EfMSG
IpgBlghzexbIpKRdgWxa80/5Agr9KhQEs3lwW5KLJDYtAJqszG4rOiWUAd2YSop2
wTJ2cNlHTW/hiUW4wingivkCzZYQsBfoarfKW+44lFJF4LQMNrwEkEa80joVcSdO
fdlIg9gDWGQEB+4wr8xACca8Y33sdDvspOnet7D7mXsozcmptwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBW/MOgUZaKPSQ/K6e8rXYbpkqCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNDRkMDc3MWQtODM1Zi0z
ODM2LTllNTUtMjYyMGU0NGU3ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMioJezsN2YnCTP4ps7bETbycDs06eDVIL3Uvofy8EIdNnunaA1YS0H
P+3/Bc8eJLOZvb2tm0hZkumAyIoGrycXlYhTOBDCcGtCsB5xCYxWyBH687S5D3cM
RB2VCtpeIFzXi4x511EWY3d3CJfQZ6PmXEeLFSHkX0pYwiPkvDvtt11zR/nvBOb8
OU8BiccTAWIwEzbhiX3TF3ofLXoyaPq8a/FlKBNP/FBKt3t9xgWY9hCun6ZLBBme
Zf85JfxvnrREzgddjnaMcMKaj9vuycp48GV+oIq+LTWeZp3mqqBNhTpA3/8T3D2E
EYJBW/DEKmlFEr3UYi49POSHs66cDN8=
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:50:00 2025 by rpki-client