Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/edfb3dc6-f130-39aa-96cf-7aac626b9ef2.roa
File:                     edfb3dc6-f130-39aa-96cf-7aac626b9ef2.roa (raw, json)
Hash identifier:          Fi7BvTOn5+QUMTCR60leShBECTtnz/cThDM4UyCXGYs=
Subject key identifier:   7A:C5:40:18:B7:BB:0B:C8:C3:84:FB:0A:DB:AF:9A:F7:A6:B0:69:61
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE3E27FF563FC437758600
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/edfb3dc6-f130-39aa-96cf-7aac626b9ef2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.51.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3e:27:ff:56:3f:c4:37:75:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=56b5cbfc-d764-4638-8554-7051a0fa53fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:8b:d8:dd:2a:d5:8f:5d:34:a1:d1:5d:a7:
                    87:09:c9:fa:e9:92:fa:bb:26:bc:4e:d9:86:88:ba:
                    e0:cf:7f:15:c3:07:44:c8:f0:36:46:39:fe:72:42:
                    32:48:cd:15:af:08:51:30:2d:53:4e:66:04:cb:b0:
                    3b:bf:5d:a2:c6:de:63:17:57:d8:3c:e9:0e:ae:b6:
                    2e:1a:23:d4:19:a1:75:02:fa:75:61:64:b5:6d:cc:
                    52:48:ee:14:d3:16:d2:64:fc:df:9f:b7:55:a2:f6:
                    55:9d:39:19:90:04:dd:a3:56:5b:2d:b9:ed:02:88:
                    dc:c2:8d:fb:0b:8b:c5:8c:b9:aa:98:a6:59:f8:42:
                    9e:81:5a:a1:59:8f:ac:c7:65:c0:13:bb:f3:86:fb:
                    25:ec:9c:63:1d:cd:70:e1:5a:ed:b8:8e:4b:b9:3b:
                    d3:39:1d:a5:d4:2a:74:92:ff:09:e7:8c:da:65:b8:
                    63:eb:6d:db:dc:ca:90:72:10:73:45:c4:e0:30:f9:
                    7b:a1:71:c2:f7:75:76:e6:bb:59:17:34:1d:be:fd:
                    00:88:3b:21:e3:90:26:8f:e6:fb:04:fc:48:00:77:
                    85:df:66:34:0f:09:05:54:7a:c4:78:e6:52:15:c2:
                    da:8d:88:f3:9f:14:0f:44:bf:3d:e4:72:6f:4e:d1:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:40:18:B7:BB:0B:C8:C3:84:FB:0A:DB:AF:9A:F7:A6:B0:69:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/edfb3dc6-f130-39aa-96cf-7aac626b9ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:fd:1e:b3:3c:b6:4a:10:e4:ba:ac:23:a6:ba:59:29:4c:
         1c:f8:8a:7b:d8:72:72:6a:b6:f3:1f:86:50:7d:8a:15:7a:1a:
         fd:76:f2:c1:10:17:57:3d:86:0f:11:ca:e0:54:90:59:53:c5:
         ed:9f:87:94:2d:9a:be:41:9b:12:c8:85:ae:39:6f:6f:8a:6c:
         67:19:23:e0:2d:c9:df:0c:77:f3:98:06:87:50:79:f3:30:a2:
         4b:3c:53:9a:25:01:e6:8b:c1:e5:28:11:18:91:49:af:96:ea:
         82:6b:4c:3d:0b:63:aa:cd:56:d2:66:71:00:80:48:b8:d9:e4:
         57:91:4a:da:c3:4e:e4:b3:bd:74:6a:fb:8e:33:19:6f:dc:bb:
         1b:18:68:fa:a7:2b:d4:b6:76:c3:ee:ff:66:17:aa:00:90:29:
         51:e8:53:05:78:e7:fb:b7:93:c1:96:31:d7:94:ec:86:13:66:
         05:8d:26:05:a9:a0:9e:26:f5:8a:f4:6e:69:59:dc:14:0b:b1:
         8e:46:77:a7:db:9e:07:c4:f7:7e:37:38:d4:28:2b:7a:36:d6:
         12:70:0c:ff:d8:61:f3:32:ad:9a:c3:4a:c0:22:62:3b:75:93:
         e4:c5:89:94:d1:4a:d3:a9:5a:69:3e:c4:31:59:f7:65:01:cd:
         3b:3e:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:52 2025 by rpki-client