Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa
File:                     51d3ada2-a449-3854-8c76-b066b8ac2408.roa (raw, json)
Hash identifier:          znmgQ5SVXGzv+3G/tOuD3dKvRSWUwyTL30x8UAf+xRE=
Subject key identifier:   49:71:87:3A:A5:A1:FC:5D:DA:F6:E1:DD:67:20:B8:59:55:9D:14:0E
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584A9FFBA597A2403FFE82EADF00
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     55091
IP address blocks:        198.73.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a5:97:a2:40:3f:fe:82:ea:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=bf3a865f-d275-4024-84d9-9d8cbd102bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:78:78:26:30:5e:15:2c:ec:27:dd:94:2d:
                    ea:f3:d7:21:61:f1:4c:8a:d1:98:a2:d2:67:63:e2:
                    e1:5a:06:69:31:11:5a:29:18:86:0e:41:43:2a:31:
                    6e:69:ab:15:88:bb:ab:a1:ae:22:d8:e6:b5:6d:b2:
                    a5:96:44:60:59:96:57:11:f1:d7:da:b5:0d:16:b9:
                    62:a8:39:b1:91:22:24:fc:c7:a2:03:6e:82:12:cd:
                    e0:e5:d4:6a:48:2f:f3:cb:7a:b4:df:1d:f3:53:50:
                    c8:4e:46:ed:26:e5:cf:fd:63:3a:cc:66:b3:c0:f8:
                    d0:5a:57:50:3d:90:ee:28:88:cb:10:56:0b:f3:3e:
                    34:4f:70:c4:8c:f9:8a:6e:82:60:33:4e:7a:cc:9e:
                    04:18:b2:1e:e6:67:a2:0a:68:d8:b4:36:af:9b:ee:
                    80:d5:c2:5a:5f:49:e5:e1:1a:1a:af:7d:84:50:43:
                    b7:86:84:f9:f9:8d:f5:3a:27:df:93:35:41:d8:bb:
                    31:3d:f3:0d:c8:e6:b4:ce:29:ee:46:48:7b:08:e3:
                    32:b0:33:b1:c5:8e:c5:50:0a:c8:96:73:09:79:61:
                    0f:d5:b6:b7:10:88:66:b0:c0:2f:e1:a6:2b:19:15:
                    10:6a:37:4a:18:bb:b6:e9:1e:9a:34:0c:e8:cb:f0:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:87:3A:A5:A1:FC:5D:DA:F6:E1:DD:67:20:B8:59:55:9D:14:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:c2:4c:c1:ae:42:dd:4e:86:51:88:dc:a0:9f:b9:d3:67:
         39:07:8a:f5:e3:a9:8d:39:ce:d0:22:89:2d:b0:c4:c8:a9:d3:
         89:e6:ee:3d:68:bd:43:96:5b:75:26:5a:f7:f6:a6:0d:fb:5f:
         c4:c9:86:52:2d:4a:89:36:07:a9:94:28:40:71:58:f2:08:60:
         81:6a:bf:3e:14:45:8a:61:8b:7e:7c:25:49:c0:4f:37:f8:d0:
         d3:1f:83:89:41:83:56:84:eb:d1:77:7a:9e:c9:67:8f:d6:94:
         2c:22:f4:29:03:3f:af:46:e8:78:85:33:f9:a1:01:ac:66:e6:
         f0:34:97:2e:2f:09:69:bc:38:2d:2a:88:3d:6a:56:76:9b:75:
         4e:d7:49:b2:40:dc:9d:e9:94:b9:a1:60:08:6d:d5:dc:65:86:
         66:69:dd:6d:de:6c:e9:70:61:96:3b:af:3a:be:7b:e2:12:84:
         f9:26:4c:2a:77:69:58:9e:2b:78:05:9c:8a:0a:2b:a0:73:3c:
         6c:c1:a1:b1:8a:d3:68:e8:07:eb:c0:93:17:1f:16:b4:24:04:
         ba:a4:32:26:63:23:96:36:9c:b9:13:be:1d:14:17:65:a8:d6:
         69:75:2b:ee:10:e5:5e:2a:0e:a1:31:6e:55:02:f7:02:4b:d9:
         64:52:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:55 2025 by rpki-client