Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/9bd982eb-8f20-3f73-a136-5adba594a4f3.roa
File:                     9bd982eb-8f20-3f73-a136-5adba594a4f3.roa (raw, json)
Hash identifier:          jhZtHEw0yNKJ6mKCRKtrqr+31j4rdbYcnpIspqmohME=
Subject key identifier:   A3:01:18:00:3E:E3:03:A4:28:6A:02:05:85:7C:04:09:9E:E7:B4:C9
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9FAE8CF54B78140D70660
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/9bd982eb-8f20-3f73-a136-5adba594a4f3.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        72.51.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:fa:e8:cf:54:b7:81:40:d7:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=125f0684-f96c-4d17-8bd6-9c9e5b48aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:0d:2b:3f:af:96:78:77:7b:e8:80:95:97:
                    b0:34:89:47:3c:68:bf:92:ad:80:5f:fc:be:0e:4d:
                    d1:32:02:9e:ab:b4:6b:69:c7:30:21:a8:e4:5f:14:
                    95:a8:e4:29:e6:de:0b:11:16:c6:ec:fb:fe:37:ff:
                    16:3d:1f:80:6f:03:d1:e7:f9:56:5d:61:5f:1c:53:
                    c8:ed:ba:04:e9:bf:73:5c:6e:9c:14:76:0b:4c:f4:
                    88:55:37:9f:74:c7:37:d9:ad:ba:1c:44:c3:10:34:
                    49:0d:32:7d:12:49:87:5d:ca:77:d0:ff:d8:18:ed:
                    33:c3:47:fb:f6:d7:d2:f4:96:12:13:e6:66:05:f9:
                    d4:d5:33:4d:1e:cc:ea:31:6e:ab:14:a7:6e:fe:ec:
                    9f:d4:24:42:99:5d:ae:cd:70:fb:0d:aa:d8:5b:83:
                    e6:f8:ff:84:b5:ba:d9:b6:be:31:c7:ed:09:4f:d1:
                    76:0d:67:6e:7d:d1:46:82:5d:cb:d7:b1:e3:8e:9d:
                    93:ec:95:47:62:40:8d:73:f0:f6:c9:19:66:cb:46:
                    a8:f4:3b:d3:96:21:02:be:4b:a9:7d:47:f2:a1:af:
                    f7:2b:a6:90:d0:19:df:6b:6b:7d:3f:27:ea:8d:39:
                    f2:cc:19:28:06:85:ef:70:ba:ed:0c:a6:49:f4:42:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:01:18:00:3E:E3:03:A4:28:6A:02:05:85:7C:04:09:9E:E7:B4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/9bd982eb-8f20-3f73-a136-5adba594a4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:1d:a9:03:49:a1:44:21:8c:51:27:19:c4:c0:57:10:e3:
         7f:05:ce:0f:c8:ae:62:69:9c:be:48:cd:0f:cd:69:75:fd:c0:
         d3:ae:2e:6e:c3:4d:a1:25:52:95:e3:ae:3d:f6:fe:36:0b:1c:
         de:30:1c:7a:da:0c:ba:9f:82:b3:9e:01:17:29:6e:2f:25:50:
         4f:75:a0:0c:bb:c4:2a:f5:ec:60:e4:37:f2:52:8d:76:1c:c2:
         f2:00:41:26:9b:8a:e9:75:bc:44:60:b9:04:0b:5c:83:e7:62:
         c6:d6:86:35:02:53:a4:bd:a4:4a:84:0d:82:09:f1:a4:da:0f:
         a2:e0:a8:c7:f0:bf:da:30:c6:8b:8d:50:b0:89:bb:8a:37:7b:
         94:1a:c5:62:08:52:ec:23:b9:15:6d:ed:73:ce:5c:37:db:be:
         52:ac:06:f0:12:71:cc:26:3d:01:28:33:a6:ab:89:8e:0b:77:
         fa:2e:47:b7:37:8e:9d:93:d1:31:34:db:82:a4:fe:34:7a:c4:
         64:86:76:e6:95:ec:c5:7a:d1:82:0d:1a:45:4c:88:cd:ee:ba:
         31:fb:96:a9:60:f0:81:eb:d2:ef:64:56:3a:00:df:11:58:58:
         ea:73:db:a2:70:19:ec:e8:80:9d:a2:32:d9:67:85:f5:c2:83:
         64:d2:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:02:49 2025 by rpki-client