Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/844c3700-1804-3140-af65-3ffc7cc33922.roa
File:                     844c3700-1804-3140-af65-3ffc7cc33922.roa (raw, json)
Hash identifier:          TIQQT5xVvq7rVPtlqwjI3MaQaaEm8joNuXtEjIE9Tx4=
Subject key identifier:   D9:11:2A:AE:BB:18:01:0F:57:6D:D2:87:25:06:B9:13:BA:84:1F:E2
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410CBDFE02D9BC534AF1380
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/844c3700-1804-3140-af65-3ffc7cc33922.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cb:df:e0:2d:9b:c5:34:af:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8cadd8f9-9898-40a4-864d-ca5c99f58280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:9c:c2:f3:d2:ff:ee:7b:4c:22:81:84:c3:
                    19:b2:52:bc:4a:8a:57:2a:56:cb:9b:8b:8b:2a:fc:
                    96:20:7a:cc:83:d8:ae:57:96:c6:ae:f1:db:69:b3:
                    f4:32:00:b1:7c:61:fe:9a:9d:73:11:fc:6a:38:4d:
                    3f:56:3f:ed:3a:02:43:c5:de:d6:47:b0:45:b2:61:
                    5e:02:2e:bb:ff:44:36:dc:a7:a2:f0:c6:fc:87:b6:
                    7a:e4:73:05:39:9e:ae:95:6b:be:39:fe:71:a5:9a:
                    c1:06:a2:a6:4d:71:8a:3a:80:de:8e:9d:5c:62:c1:
                    f7:fa:69:28:fb:6b:db:69:fb:e5:64:92:4b:9e:ce:
                    4d:bd:38:d9:7b:0c:bf:68:01:47:80:fe:2e:dc:4d:
                    31:53:23:b4:70:0d:ef:cf:39:90:97:45:09:c5:a3:
                    18:e1:0d:9c:9e:a7:66:e1:f1:0e:e5:fa:66:75:9e:
                    6a:43:8c:40:46:ca:99:1d:1d:ab:4e:ff:f1:cc:7e:
                    df:6f:12:4e:ba:13:0b:27:15:c1:40:f4:d8:0e:9c:
                    38:bf:84:c6:aa:37:cc:f1:50:0b:99:90:8d:97:6f:
                    d5:c2:ed:8f:5a:8e:d9:84:fb:ff:1f:d7:35:34:26:
                    98:3b:fa:f0:3b:1a:22:41:c2:27:8e:05:24:3c:1d:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:11:2A:AE:BB:18:01:0F:57:6D:D2:87:25:06:B9:13:BA:84:1F:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/844c3700-1804-3140-af65-3ffc7cc33922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a8:50:8c:36:79:2f:01:10:c2:30:ee:f1:23:4f:0c:a6:9f:
         99:77:c6:41:ab:b5:bd:33:d0:42:26:ec:a7:70:82:c7:15:6d:
         28:8c:34:30:98:ff:b0:b7:73:8e:b7:e1:1d:ed:6a:47:a7:80:
         50:2e:7e:61:0e:78:f1:33:31:4b:a9:70:88:a1:f2:cb:d6:35:
         55:0d:3f:74:c0:41:2e:41:7f:3d:8d:ba:be:77:65:9a:fd:c2:
         4c:62:cd:d4:c3:f5:c6:b8:b4:9e:e5:33:7d:f7:d2:68:fe:1c:
         ea:97:6b:bd:81:a4:a3:f1:29:6b:ba:bb:67:45:0d:fe:d5:bd:
         65:5b:d3:2e:1b:7f:ba:4a:95:c2:43:fa:c2:4d:0a:d0:26:a4:
         1c:8c:1f:87:27:c3:f6:4a:8a:c3:4f:9a:d3:c4:68:d9:27:50:
         d6:56:76:13:e2:1f:25:ca:94:3a:49:38:99:c7:92:73:0e:1c:
         30:cc:c5:f4:f8:e7:d6:bc:20:4e:f7:51:5f:cf:be:8e:4c:58:
         d5:9d:f8:cf:39:16:fb:c6:5d:4f:29:fc:12:be:c9:79:b1:40:
         9e:1f:f0:29:65:9b:6c:5c:ab:e8:70:24:b1:e7:16:31:ba:05:
         dd:00:2f:d0:69:b2:e2:54:6b:81:92:ec:f2:9d:95:74:32:42:
         ec:8c:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:53:36 2025 by rpki-client