Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa
File:                     2b65cf01-009e-38e7-b721-99f99e5f39de.roa (raw, json)
Hash identifier:          Zp93RBAOGG0yKYqHKOZ3/qamcY8drWAD6VQFF2BUwTM=
Subject key identifier:   40:10:DE:58:D9:49:9D:FC:01:44:F2:E4:83:1C:EC:CB:85:96:91:B2
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE41C66EA6C6A36C366580
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.51.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:41:c6:6e:a6:c6:a3:6c:36:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=143d811a-c329-4778-a094-788fa7d83fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:7b:10:4f:6d:18:b1:59:cf:3e:87:9a:e8:
                    ac:78:3e:a3:bf:a8:69:57:0c:6c:22:13:82:09:af:
                    31:c8:c9:33:8c:da:85:15:57:22:19:3a:dc:d1:d2:
                    d0:e4:a7:c6:88:b3:a4:f8:ba:d1:de:4f:b9:41:af:
                    f2:b0:7f:56:9a:70:43:11:25:12:a7:ac:96:29:f1:
                    c9:a2:ea:72:23:6a:7a:47:e5:fe:6e:2c:8f:34:c9:
                    09:90:cd:15:da:47:7a:ec:14:99:9c:e2:60:60:32:
                    f0:a5:3d:ae:73:df:be:10:65:2a:2e:c3:a9:1a:a1:
                    c8:ae:7c:4c:89:04:88:3a:ec:e0:dd:00:c0:54:78:
                    ce:f7:31:2b:45:57:cd:bc:10:33:83:62:a1:0b:2c:
                    93:87:6f:4b:f6:30:3a:e8:53:14:d9:d0:20:90:27:
                    2e:82:2e:42:28:5e:de:3c:e8:b4:2b:3d:3b:84:73:
                    15:7c:19:cd:0f:f2:e7:77:22:67:d4:d5:bd:d0:48:
                    8a:ce:2d:73:2c:f9:d2:21:48:fb:63:aa:ae:17:dd:
                    3e:db:96:88:b5:6b:fd:49:33:01:a0:f5:38:56:22:
                    53:60:3a:18:4b:8b:64:e5:f1:46:61:fb:b9:b7:17:
                    68:6e:cc:53:48:97:ed:e3:6b:70:19:bf:a7:10:b1:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:DE:58:D9:49:9D:FC:01:44:F2:E4:83:1C:EC:CB:85:96:91:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/2b65cf01-009e-38e7-b721-99f99e5f39de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:48:a8:00:54:e3:6e:30:81:70:79:45:0d:40:f6:2f:27:b9:
         ec:78:a6:76:5e:7e:33:02:33:15:a6:3a:6a:9c:7e:03:b4:f9:
         40:ab:17:37:e2:a4:48:a8:d3:37:65:b2:03:3c:fa:84:8e:fc:
         de:84:f6:d6:86:77:df:54:4d:cd:ac:48:e1:69:9b:2b:19:1f:
         24:75:5f:4f:33:dc:85:dc:64:db:9e:bf:b3:eb:92:24:68:cb:
         49:87:c9:59:df:6d:2f:b3:b0:42:12:b1:a7:b7:9c:2c:87:3d:
         29:9b:ce:5d:de:23:51:55:ce:2e:ee:29:c1:b9:8c:2b:41:3f:
         72:31:c0:3e:31:c4:e8:d0:52:b1:9c:4d:2e:fe:f8:b5:54:b9:
         5f:fe:da:91:61:c7:d3:6a:b6:f8:4b:f5:90:b9:d2:ea:e5:22:
         3e:6f:e2:04:2a:98:21:a8:f1:ac:a6:31:62:31:4a:ee:22:c4:
         c7:53:72:81:83:c3:dd:df:14:b4:a5:a6:1c:77:49:e5:81:88:
         56:da:f4:c3:ca:1c:83:d9:1a:c1:79:1d:db:e8:5c:a0:75:7b:
         90:59:e6:f3:0b:9a:55:2d:14:12:a7:32:11:9d:00:10:d2:d5:
         98:de:1f:61:ac:19:be:57:4a:cb:51:30:3d:28:cd:24:ca:88:
         c1:ca:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:52:11 2025 by rpki-client