Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/aa496333-8120-3a65-9936-f42fcfe2c3a4.roa
File:                     aa496333-8120-3a65-9936-f42fcfe2c3a4.roa (raw, json)
Hash identifier:          8p8yfYjlCaf/xQTV3vZzAQdh7aTwmbrcDNMiRurfNPQ=
Subject key identifier:   A5:E5:A8:67:2C:83:BB:6B:90:69:61:CC:EC:1D:16:33:57:12:AE:E3
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285849D594CDE95FE1E04585EEAD38
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/aa496333-8120-3a65-9936-f42fcfe2c3a4.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        72.51.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:cd:e9:5f:e1:e0:45:85:ee:ad:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=9845ed0e-a9e8-40ce-8752-de173d61cd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:b2:1a:97:32:75:e4:0e:63:da:17:fe:4f:
                    a0:ac:9b:4f:62:e1:e2:85:63:a4:20:23:bc:2e:dc:
                    1a:f8:c3:bd:ff:d1:e5:ec:f3:eb:52:d2:0f:b3:8c:
                    e7:ad:15:89:1a:8a:41:59:0a:9a:51:56:85:d4:cc:
                    2d:c2:86:c6:41:93:38:aa:e9:ab:25:85:69:f6:de:
                    20:c7:3d:37:fb:4c:a7:ed:19:21:d9:9d:40:e3:fa:
                    b9:8d:7f:cd:d5:a0:ea:ac:a2:04:47:82:b8:b9:92:
                    d2:f9:24:20:71:fc:d0:c1:1a:2a:2d:95:95:92:54:
                    92:c6:c1:f0:84:1c:3e:e4:62:64:ed:a4:71:fb:29:
                    65:45:49:7c:59:ca:f5:18:aa:30:37:b0:2f:55:76:
                    37:e3:a1:50:aa:b7:83:48:3e:d9:c0:07:5a:61:34:
                    ef:56:da:53:eb:3a:a7:e7:8f:44:9e:bb:25:35:20:
                    e4:04:1d:af:ed:e0:bd:00:bc:3b:d8:a4:a7:1e:79:
                    6f:6e:2a:2d:60:bb:20:50:0b:1f:99:cf:ca:e0:e0:
                    81:ef:de:33:46:6f:84:2f:f6:4f:12:de:62:e2:b8:
                    65:0c:62:ac:cf:19:62:70:e9:9f:d5:d6:ea:3e:bf:
                    71:5a:a0:bf:58:2c:ee:c5:82:57:f2:ec:8b:e8:f4:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E5:A8:67:2C:83:BB:6B:90:69:61:CC:EC:1D:16:33:57:12:AE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/aa496333-8120-3a65-9936-f42fcfe2c3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c8:a3:4c:32:de:c2:24:70:fe:82:0f:4c:3e:51:d7:c5:16:
         1a:f3:82:14:5a:71:5b:3b:22:fb:05:09:fe:29:d6:89:32:61:
         51:48:63:ae:2b:c9:08:23:4f:b9:68:fc:0b:b6:da:70:a1:e0:
         a1:e8:42:97:18:a5:a0:32:bc:1a:47:82:40:58:31:8f:27:35:
         8a:9f:7c:dc:b7:90:74:ad:94:4d:71:33:12:fe:21:e0:4f:0f:
         7a:0c:05:56:ad:d8:7e:f5:7c:18:f6:b7:e0:c6:80:4a:f1:e8:
         09:e2:c5:8d:50:a5:97:ec:3e:1d:d6:d5:72:65:60:be:e3:cd:
         2b:56:cc:b3:ba:25:6b:97:1f:87:4b:ff:65:8b:6e:1d:46:f6:
         da:1d:ed:7f:e9:3f:09:51:71:6f:ca:33:9a:39:2a:c3:5a:c5:
         30:bb:0c:7c:b7:6d:3e:b3:04:26:0d:2d:27:a0:79:bc:92:c6:
         e3:68:3c:78:06:8f:32:5c:8a:11:0e:5a:6d:fd:6a:a6:91:8a:
         7d:d6:59:db:ab:6e:7a:a9:29:5b:ee:73:24:76:cd:3d:c2:f0:
         4b:e2:62:03:19:34:9a:54:88:c4:59:9f:41:96:72:8a:3e:d6:
         80:34:90:2e:10:9b:2d:ed:59:77:79:81:e9:c7:23:c4:c6:22:
         01:3e:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:05:39 2025 by rpki-client