Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8af443f5-675b-35e9-99e4-62722db39f39.roa
File:                     8af443f5-675b-35e9-99e4-62722db39f39.roa (raw, json)
Hash identifier:          rQBwtanpJTbwLJ/VZWqGapPRDjUcWO/mHYNwFTXQTh0=
Subject key identifier:   3B:18:86:EB:47:A6:03:37:5E:CA:C5:30:DF:B3:9D:65:5D:EC:1D:FE
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A56004DCD09F4B015F2B846B0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8af443f5-675b-35e9-99e4-62722db39f39.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     13768
IP address blocks:        72.51.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4d:cd:09:f4:b0:15:f2:b8:46:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=ace67c72-ed4e-4e8b-bb89-826b25ca7eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:c6:4d:83:ab:58:2f:3a:ff:d4:85:09:cc:
                    5d:42:0e:85:0f:bb:58:7b:17:fd:f3:d1:b4:fd:36:
                    8f:62:6e:2d:5f:b2:a9:07:1a:9e:9d:a6:75:cd:ae:
                    e5:6f:08:5a:6c:8d:76:71:af:c8:54:31:10:bd:88:
                    17:30:a4:b7:8d:53:44:24:b5:d3:d4:63:fb:53:7c:
                    8f:f7:1d:53:d7:f2:91:d7:1d:a5:a1:ec:a3:42:e2:
                    4c:cd:82:76:3d:19:eb:82:97:11:59:72:d9:cc:ea:
                    f7:66:84:03:b8:a8:70:e8:d4:c0:e8:b5:54:30:e7:
                    3c:27:3f:ee:88:e3:74:0c:ae:57:1d:9d:f9:aa:86:
                    ac:c2:e9:80:d6:b3:6d:fb:86:e7:14:8b:7d:10:d2:
                    74:4f:6d:05:8e:18:9b:cc:7e:08:cf:e0:d1:6f:7d:
                    91:05:bb:cc:b9:78:f2:93:de:d5:1a:5a:48:09:ef:
                    a8:67:1d:81:c3:87:72:66:50:fb:4e:f0:cf:83:29:
                    ad:d6:2a:88:fd:5c:c2:63:67:97:96:98:8f:32:34:
                    5c:22:19:64:85:bf:cb:51:b6:d6:0f:e7:90:30:5c:
                    29:97:28:00:e1:5e:bf:f6:d0:27:f2:37:88:19:1d:
                    93:60:3c:b0:57:fa:69:c1:4f:1c:59:73:b4:ae:e6:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:18:86:EB:47:A6:03:37:5E:CA:C5:30:DF:B3:9D:65:5D:EC:1D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8af443f5-675b-35e9-99e4-62722db39f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:09:dd:cd:6d:dd:27:8f:3b:8d:e5:19:35:99:b6:f9:56:50:
         b9:da:07:2d:4a:48:89:82:8e:04:98:e2:7e:26:81:1c:ef:62:
         20:27:8b:8b:d2:3f:20:42:b4:35:8c:76:17:36:b9:87:40:96:
         7d:b8:46:fb:12:c1:89:e8:0d:a0:40:94:a2:13:8b:ee:dc:4a:
         d3:54:3b:72:30:9d:4e:db:fe:e4:63:77:8c:10:a0:89:38:f9:
         94:ca:cd:a0:e2:10:b8:4f:3d:c8:67:93:c0:5b:69:d5:33:96:
         40:ee:c7:40:b8:cf:18:97:d8:1d:40:08:50:47:34:cf:22:91:
         0c:50:4a:e1:83:0d:f4:df:97:8a:dc:5c:8e:81:5b:2a:c7:ea:
         7b:0d:d9:67:3d:c5:fb:ff:b4:d4:5f:41:30:1f:e9:17:28:0a:
         c0:09:23:2c:b8:da:73:fe:b1:3c:6e:34:0b:ea:7a:c7:ae:d9:
         3f:a9:47:50:87:a6:01:08:5c:3b:63:fc:3d:e0:15:85:ce:e2:
         bd:59:9c:1f:c1:21:d9:56:5e:6e:a0:ed:18:2b:94:f3:3c:01:
         a5:90:45:36:0d:02:67:cd:5a:b1:bf:66:1b:8f:b1:d5:bf:e2:
         c5:56:f5:36:d8:bc:d4:fc:e8:76:ab:8d:e6:c0:2e:fe:ac:9b:
         74:ed:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:34:14 2025 by rpki-client