Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa
File:                     cec281ba-09c0-37f8-92de-50b5e586cb84.roa (raw, json)
Hash identifier:          /raUFvU7kRr3xR6C4xFzR9uzUVny5VDlLcrM5671U24=
Subject key identifier:   70:DD:B0:64:AC:2E:B9:8E:0D:71:52:07:40:7B:EB:BA:27:2E:E6:DD
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8412550A2011C891F1ADD8A8
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:55:0a:20:11:c8:91:f1:ad:d8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=511a7489-2803-47ad-a5f0-ff1ee2e9c5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:1d:73:3e:e3:98:a7:4f:69:87:10:29:1a:
                    c8:ba:da:62:8a:cf:a6:94:a8:86:d2:b9:a6:65:be:
                    b0:f1:56:07:25:1d:e5:8f:28:42:35:b2:21:e7:d5:
                    e7:3a:48:8c:88:8c:30:d2:61:29:a6:c5:ed:f6:58:
                    76:1e:6b:c2:ca:b6:28:8f:2e:ac:c6:2d:a4:3e:45:
                    d0:28:44:bf:5d:d6:e0:3e:09:ba:ab:70:22:71:f6:
                    42:73:fb:30:89:d4:06:05:a3:31:fc:82:c2:57:bc:
                    dc:cf:d0:73:36:6f:0f:ae:cd:1f:36:fd:6a:6e:86:
                    ef:70:5a:f9:b5:1a:61:45:c2:7f:14:27:16:df:6f:
                    b0:85:95:9a:45:9b:5b:68:a5:1c:25:bc:7e:4e:41:
                    60:52:19:84:ff:4d:ef:df:fb:74:74:f5:72:f6:3a:
                    b2:6a:01:e7:40:46:aa:c1:31:73:9e:d8:b1:ed:6a:
                    65:e2:aa:0e:72:43:b1:09:fa:38:7c:cb:94:9b:b3:
                    d8:5e:81:95:6e:23:c2:2c:4e:64:a5:74:ea:ff:22:
                    61:02:20:77:ee:1a:18:0f:cd:4b:43:56:63:ed:9b:
                    71:2e:6d:4c:9b:fc:3a:3f:bc:03:87:ff:1a:ba:11:
                    f2:ad:1a:44:08:06:f9:b6:33:44:0a:58:c9:b9:81:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DD:B0:64:AC:2E:B9:8E:0D:71:52:07:40:7B:EB:BA:27:2E:E6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cec281ba-09c0-37f8-92de-50b5e586cb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d2:3d:9b:af:ca:cd:8e:39:90:d8:db:9a:71:26:55:d3:50:
         3c:d6:56:86:5f:5c:b1:8b:0c:55:81:7d:10:ca:af:49:74:fd:
         af:06:c5:8a:47:92:89:bf:c2:cc:b3:05:de:01:57:24:b6:f9:
         8e:4c:11:fe:cd:81:23:0a:56:b1:db:70:38:63:bb:3c:fe:ce:
         3d:93:a8:54:0b:b6:01:13:a7:13:3c:0f:5f:bc:1a:15:cb:28:
         95:ef:85:95:43:8a:0a:c4:36:d4:09:8e:73:68:c0:ae:0c:07:
         11:b2:32:bf:4c:21:9c:51:93:ba:f5:80:38:5f:55:c2:ad:fb:
         90:b1:b4:90:b7:36:d2:e0:18:39:04:57:30:90:76:08:4d:6f:
         23:06:e6:b4:1b:28:37:78:0d:46:3b:36:7c:0b:4e:ea:2a:f9:
         e2:72:09:14:b2:48:8a:2e:be:97:2e:a4:05:28:ca:c7:75:34:
         3b:2b:d9:83:7f:ee:77:27:9e:07:33:04:c3:50:6f:62:87:63:
         e6:74:09:9d:0d:16:74:3d:64:6e:d9:07:68:ff:25:5f:f4:d7:
         74:51:60:2d:26:bc:8a:ef:8c:8d:73:35:80:f9:24:eb:b9:23:
         3e:7c:ab:c4:15:05:50:a7:a9:35:6a:49:a8:35:0f:cb:ea:be:
         8b:25:ec:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElUKIBHIkfGt2KgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NTExYTc0ODktMjgwMy00N2FkLWE1ZjAtZmYxZWUyZTljNWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/sdcz7jmKdPaYcQKRrIutpiis+mlKiG0rmm
Zb6w8VYHJR3ljyhCNbIh59XnOkiMiIww0mEppsXt9lh2HmvCyrYojy6sxi2kPkXQ
KES/XdbgPgm6q3AicfZCc/swidQGBaMx/ILCV7zcz9BzNm8Prs0fNv1qbobvcFr5
tRphRcJ/FCcW32+whZWaRZtbaKUcJbx+TkFgUhmE/03v3/t0dPVy9jqyagHnQEaq
wTFzntix7Wpl4qoOckOxCfo4fMuUm7PYXoGVbiPCLE5kpXTq/yJhAiB37hoYD81L
Q1Zj7ZtxLm1Mm/w6P7wDh/8auhHyrRpECAb5tjNECljJuYGvIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDdsGSsLrmODXFSB0B767onLubdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2VjMjgxYmEtMDljMC0z
N2Y4LTkyZGUtNTBiNWU1ODZjYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbSPZuvys2OOZDY25pxJlXTUDzWVoZfXLGLDFWBfRDKr0l0/a8GxYpH
kom/wsyzBd4BVyS2+Y5MEf7NgSMKVrHbcDhjuzz+zj2TqFQLtgETpxM8D1+8GhXL
KJXvhZVDigrENtQJjnNowK4MBxGyMr9MIZxRk7r1gDhfVcKt+5CxtJC3NtLgGDkE
VzCQdghNbyMG5rQbKDd4DUY7NnwLTuoq+eJyCRSySIouvpcupAUoysd1NDsr2YN/
7ncnngczBMNQb2KHY+Z0CZ0NFnQ9ZG7ZB2j/JV/013RRYC0mvIrvjI1zNYD5JOu5
Iz58q8QVBVCnqTVqSag1D8vqvosl7M4=
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:13 2025 by rpki-client