Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/da39c732-e6ac-3b81-bd35-5cac090a4260.roa
File:                     da39c732-e6ac-3b81-bd35-5cac090a4260.roa (raw, json)
Hash identifier:          k4RVJk/JySHOsdez29iTViPbUB5tCs8eMIbe5X8mXbQ=
Subject key identifier:   E3:DC:F7:CB:95:61:F0:F7:17:49:66:35:6A:9F:29:A7:D6:D5:17:8D
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9FB88BE57BBE823269DC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/da39c732-e6ac-3b81-bd35-5cac090a4260.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        72.51.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:fb:88:be:57:bb:e8:23:26:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=cd6d27db-6d55-49fc-88f3-2ae79adcd14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:56:74:2b:bc:49:7d:0c:f8:f0:cb:88:95:
                    f6:6e:fd:49:15:ee:a0:00:15:96:2e:7c:77:ae:7b:
                    10:01:26:cb:7b:60:c3:be:a9:8c:2a:fa:ea:f8:9f:
                    46:5e:84:5f:90:13:b8:99:c9:a9:6c:eb:41:cb:84:
                    70:6d:81:08:46:1e:b6:d0:ae:d0:a8:4c:80:28:ad:
                    d9:a0:31:00:67:50:4f:4e:2e:4e:c6:cd:34:a9:0e:
                    2a:59:11:be:c6:d6:18:bc:aa:5d:7b:fe:e0:53:8a:
                    2b:59:51:62:da:f0:66:21:4d:35:5a:dd:fd:67:d8:
                    ff:fc:8a:50:bd:ca:3b:26:5f:ae:59:10:bc:bd:8e:
                    9c:8c:84:63:48:fc:cb:6c:99:3e:35:30:93:ea:e4:
                    85:8b:80:04:a5:56:54:d4:22:3c:1c:e7:f8:5f:6c:
                    fc:f2:30:1e:cd:72:e9:a4:99:d8:80:25:ca:70:18:
                    cb:e1:cf:df:5f:f5:27:fb:0f:84:fa:1a:c7:1c:68:
                    7e:d2:47:e2:6a:0c:65:c4:a3:9c:1c:b2:11:1b:fc:
                    09:44:92:fb:d1:53:85:8d:a2:5b:dc:b1:3b:ac:c3:
                    0f:23:95:f4:37:23:8d:8e:a5:28:fa:f8:2d:f7:67:
                    c2:ff:51:68:5f:a4:8a:be:b9:f2:01:83:85:87:09:
                    3a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DC:F7:CB:95:61:F0:F7:17:49:66:35:6A:9F:29:A7:D6:D5:17:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/da39c732-e6ac-3b81-bd35-5cac090a4260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:8e:48:5f:52:81:c7:ac:14:12:ca:1e:46:f2:3a:9d:63:
         da:53:57:89:87:8c:61:9a:db:af:00:32:48:7d:0b:3f:b5:09:
         fc:7e:27:b7:a1:ae:dd:d9:c6:b3:98:30:8d:b7:55:6b:91:7e:
         e7:0b:5c:1d:58:a5:e7:dd:8d:33:9f:1a:c3:fa:52:ec:dc:cf:
         8b:86:7e:60:8b:85:29:d4:4e:4e:e1:85:ae:d9:56:42:d3:31:
         d9:07:88:50:ae:22:81:50:61:a6:92:ac:ae:4b:04:51:23:e6:
         eb:41:31:d8:52:7d:cf:fc:31:e1:99:23:ef:58:48:69:01:1a:
         b3:db:eb:a8:4c:06:c4:47:84:05:6f:14:ba:4e:79:8b:4f:dc:
         9e:4b:e8:ee:5b:8a:85:d1:ed:d9:52:9f:ef:a4:5d:2a:87:b2:
         5b:d6:52:66:e7:08:ca:44:e3:00:2d:39:1a:ba:f8:8d:d8:dc:
         e2:f2:98:19:f2:30:80:58:6d:40:08:d7:57:e1:22:cf:16:cc:
         b8:e2:ca:bf:b3:86:e6:10:d1:ab:ff:30:bb:a3:36:cd:ff:75:
         c3:b5:a8:f9:bb:c0:ef:7a:e0:18:e5:35:1c:94:2a:ca:77:83:
         ef:16:bd:f2:85:24:94:4f:d9:47:cf:52:1e:30:5e:cc:b1:46:
         c8:2e:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:30 2025 by rpki-client