Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
File:                     b01d2239-7b24-3ca6-9965-8de122cf4593.roa (raw, json)
Hash identifier:          d/T4vUuZbupPpsQHLiB8gArtEm4o8CEM2Y3KyhrL+UM=
Subject key identifier:   CE:B8:0A:62:68:74:C3:D7:4B:D1:2F:BD:74:A7:2C:FB:FF:68:41:5F
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A84125062A2752F4DD3E70500
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.22.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:50:62:a2:75:2f:4d:d3:e7:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4cf75e72-9504-485f-9d80-e79545c9f53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:f5:72:a6:70:32:d1:2f:7b:92:63:77:ea:
                    0f:6a:29:98:b9:0f:7f:71:35:2b:43:5e:af:a4:8c:
                    c2:f6:93:27:98:58:b4:50:a5:cf:d0:9d:14:b8:22:
                    bd:ae:98:ff:fa:c1:c4:c7:9d:85:9a:f4:9b:f7:15:
                    7b:a6:73:b9:60:9d:d8:db:e3:c2:45:40:96:b1:d3:
                    a3:c8:ea:34:86:0d:bc:2e:c2:b2:82:c8:cb:97:64:
                    5c:50:3b:e5:c0:74:1d:c3:14:63:ea:f3:5c:dd:a3:
                    ff:6e:ed:ae:49:d1:e1:0b:00:cb:86:8d:e7:9f:c6:
                    1a:f4:7c:97:37:00:34:97:90:2b:3d:0c:c0:6c:dd:
                    52:c7:52:13:d2:69:c6:c5:e6:be:93:d1:ac:b8:c8:
                    82:b6:fb:24:04:c8:a0:12:8b:31:50:d0:2f:62:1c:
                    7b:80:83:03:22:2e:53:8c:28:47:6d:2f:12:84:8a:
                    25:83:7d:0a:05:d8:06:6a:b9:6d:ec:b8:7e:0e:0f:
                    79:f1:47:4f:5f:59:1f:20:ab:cd:aa:9d:e6:11:1c:
                    24:df:66:8c:63:1e:49:45:29:fe:df:bc:17:c3:50:
                    9f:ed:06:e5:3e:b7:13:19:af:61:49:be:b8:df:24:
                    ea:3b:cf:58:b3:66:3a:fe:0b:81:27:7f:83:13:67:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:0A:62:68:74:C3:D7:4B:D1:2F:BD:74:A7:2C:FB:FF:68:41:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:92:ea:02:74:c5:7c:fa:54:76:20:68:93:a9:db:b2:e1:c3:
         e4:fb:6b:bd:6c:9a:3c:25:c8:19:ba:bb:4a:42:ad:d4:5d:6a:
         61:1d:cb:7f:7c:4d:4d:a9:99:81:be:10:fe:c3:94:67:84:b9:
         7a:24:f2:3f:1b:2b:93:1c:8f:d4:9b:62:ad:7f:92:2e:80:61:
         15:67:7e:bf:fc:2a:81:a5:19:a2:53:c9:7f:9f:3b:af:54:b3:
         15:0a:79:de:c9:21:0c:ab:ba:ce:dd:c2:62:4b:0f:90:d3:a8:
         f4:78:2a:f1:a4:6d:03:70:89:b7:ee:27:e5:20:eb:86:11:1b:
         6d:d4:10:a0:32:91:f1:42:44:d1:4f:43:9f:95:ab:67:d8:95:
         12:2f:27:4e:3a:ef:e7:99:3c:af:33:31:32:45:0f:eb:f1:08:
         fb:81:44:53:50:a0:b6:e5:c6:9d:9b:4e:6f:c8:18:1d:95:03:
         72:8b:5d:b0:77:d7:78:89:4a:c5:98:5c:73:50:21:04:d6:d2:
         d0:2e:e9:ce:f4:63:04:57:05:8c:10:6d:1b:2c:69:75:6b:88:
         c7:34:88:c0:e7:4e:a0:10:c1:c8:22:d2:dc:3f:ea:7c:81:fb:
         d9:39:db:44:71:f5:69:8a:e3:0e:78:12:c7:44:77:2b:82:b1:
         79:7a:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:55:28 2025 by rpki-client