Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f0b3dfd7-464e-362f-b1af-d891c621d14d.roa
File:                     f0b3dfd7-464e-362f-b1af-d891c621d14d.roa (raw, json)
Hash identifier:          sDJJ4hNCUIsB3Zw4rED8gwcD4/3fhgQI/JkJwoM/Zus=
Subject key identifier:   89:9D:4A:E3:E0:A0:CE:D7:F8:B3:B6:41:0A:AE:25:A9:3E:18:19:19
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410E3FB247D37256AFDDA40
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f0b3dfd7-464e-362f-b1af-d891c621d14d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e3:fb:24:7d:37:25:6a:fd:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a63fc49e-c0c1-44c7-bb7d-ca188d2b9350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:55:df:f2:06:67:e1:fa:da:c4:d9:35:5b:
                    df:b9:77:bc:2a:42:ba:09:05:66:bb:6c:8c:4d:65:
                    8b:6a:f0:ba:ff:c7:81:ac:b9:4d:bd:ce:48:1e:9c:
                    0c:54:64:9e:9a:63:0d:6d:51:3f:e4:2a:d4:9c:02:
                    bb:4f:28:0d:74:b9:df:26:8c:82:48:c1:87:65:ef:
                    cf:16:2c:de:ad:fa:fb:d6:8c:0f:8c:98:64:93:b3:
                    3d:43:84:f1:50:84:0f:d7:e0:0d:4c:2d:63:55:29:
                    4f:2f:55:5f:15:35:ff:c4:dc:53:1c:4f:82:a3:a4:
                    ce:52:5f:f2:d1:a1:ff:75:79:bb:3d:a7:0b:f2:88:
                    5c:9e:07:0e:33:91:7f:c8:9a:d6:e1:a2:51:ef:fa:
                    3a:49:e9:33:8c:10:76:55:0c:9c:52:bf:0f:7a:63:
                    0e:c3:3d:e4:db:c0:a4:b9:02:e1:e3:fc:31:dd:60:
                    0e:3a:07:39:cb:bc:ad:62:36:a4:24:1d:9f:f1:b2:
                    b1:2a:86:74:3b:5c:7a:03:11:12:06:3d:15:bf:77:
                    4b:b4:14:0e:20:ad:d3:2e:20:d9:f6:f0:22:88:de:
                    6b:c7:5d:42:0d:f8:f1:60:46:af:e5:7b:87:c3:13:
                    f1:b4:26:8c:3a:2d:69:8b:30:2d:0e:77:16:fc:8c:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9D:4A:E3:E0:A0:CE:D7:F8:B3:B6:41:0A:AE:25:A9:3E:18:19:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f0b3dfd7-464e-362f-b1af-d891c621d14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:e7:c0:d1:e0:86:7b:7d:02:fe:0f:75:24:ea:50:45:06:f8:
         31:51:79:56:34:b6:47:5d:4e:64:01:67:bb:4a:54:9c:e9:33:
         85:e2:a3:67:02:f6:11:8d:cd:b8:8b:76:17:da:1d:85:66:91:
         93:c9:35:19:a0:f0:b2:ce:3f:47:31:87:81:0e:2b:7c:d8:17:
         18:ec:c9:21:f0:3e:ed:eb:3c:96:71:fb:f6:d6:e5:c8:6c:cd:
         d8:66:bc:13:6d:d9:ae:2c:9d:ac:35:15:31:da:99:36:5a:11:
         43:c5:3f:7a:08:48:90:eb:f4:f5:71:75:db:34:75:28:45:3f:
         9f:fb:a8:dd:08:4a:78:c7:72:b9:fa:87:68:82:65:af:9a:42:
         dc:cd:22:59:d7:5a:90:0b:50:c2:af:94:6b:d1:51:9b:93:63:
         a1:2c:48:35:4b:1f:f9:38:64:4b:d7:90:ea:52:9e:a7:f1:85:
         a2:7f:c3:7f:e7:bf:88:ab:e1:6b:16:75:15:36:71:53:1c:2b:
         59:4f:14:c7:27:09:43:48:6b:0f:64:56:df:43:01:b5:ee:ae:
         f2:ff:05:21:e5:d7:43:48:12:a9:ee:80:8f:09:81:47:cc:eb:
         29:19:51:ec:18:0d:ba:c6:2f:b4:83:89:d1:3a:2b:fb:d0:99:
         3e:17:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:51 2025 by rpki-client