Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa
File:                     22035321-9f59-3f81-a882-1edbe11b04c7.roa (raw, json)
Hash identifier:          gNcbu2f7+U4Swwoo9KAbvPFfKfp/m3JYcyhV+IIUQEQ=
Subject key identifier:   17:6A:2A:1F:7A:26:73:0F:8B:F3:90:CD:D3:85:6F:F8:99:D4:56:70
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9FB9BB266C098B3F914D0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        72.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:fb:9b:b2:66:c0:98:b3:f9:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=66ed7a98-9c16-4d0c-973c-df6228c2eb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:54:cd:2c:f9:25:63:9e:0b:36:88:cd:c4:
                    51:59:5a:51:dc:57:ce:97:ce:9a:0a:70:fa:b9:60:
                    f2:0c:ab:a4:56:63:f4:3f:8b:fb:99:8a:f7:8d:dd:
                    15:b7:ec:67:16:76:ed:09:a7:c0:9a:66:e7:54:1e:
                    b2:23:b6:68:85:ee:fa:52:88:5a:0c:a9:25:c8:31:
                    8c:91:36:8d:60:17:f9:ec:a1:c1:9e:e0:6c:1c:79:
                    6f:68:dd:9a:97:b8:c1:bf:85:36:3b:ab:a0:f7:a3:
                    36:b6:6b:50:46:a3:d3:af:5f:c9:97:a0:46:44:f8:
                    39:19:df:cd:f5:0a:dc:83:7f:d5:7f:80:0b:0f:77:
                    34:61:6e:8a:fc:08:3b:bb:1b:07:46:99:01:0e:5f:
                    ec:24:12:ba:d0:06:a0:ff:f5:41:26:78:d0:6c:9d:
                    90:1a:c3:2f:98:a8:13:c9:fb:9d:37:d5:66:c0:70:
                    23:8e:51:f4:35:fa:cf:34:e3:f6:29:44:88:9b:32:
                    e1:be:64:ab:de:c7:3b:a9:65:87:0a:46:6b:ed:e7:
                    21:5e:87:b3:71:1e:bd:08:bd:36:ab:48:41:fb:f1:
                    6f:7d:f0:86:d9:04:bf:56:97:ec:70:61:c7:a4:39:
                    55:86:ae:fa:cb:67:de:f8:85:2b:ec:c3:75:d8:c2:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:2A:1F:7A:26:73:0F:8B:F3:90:CD:D3:85:6F:F8:99:D4:56:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c7:b7:c8:09:c2:ae:e0:49:18:ae:8c:6b:85:eb:83:d5:2c:
         54:59:8d:ca:f2:c2:46:f7:09:05:ee:fa:bc:6a:85:c5:f6:a4:
         86:61:cb:25:fa:78:38:b6:ec:e5:bc:d8:28:c8:23:8a:d2:81:
         df:68:a5:0e:05:a9:4e:a4:f7:e5:98:3f:32:4f:9e:8e:cf:73:
         89:a2:1a:40:22:b4:c3:cb:02:0b:a9:62:75:be:57:55:7c:c1:
         d9:f3:8e:48:80:08:c5:9b:99:a2:9a:90:6f:1b:4a:40:e4:fb:
         5e:68:d0:fa:1d:80:44:24:16:cd:ae:ae:21:70:30:b3:59:ac:
         7b:e8:0d:91:ca:98:c7:fc:31:9e:7a:af:30:b6:98:4a:a1:5e:
         e0:8d:04:b5:f4:83:14:35:b9:7b:58:ee:19:fc:2b:74:6f:63:
         f7:f9:ae:dc:83:5e:7b:36:b4:7a:a4:a8:23:d7:dd:08:6b:2a:
         7e:d4:01:ca:a3:50:74:52:28:f4:f4:9c:9d:b7:58:64:98:33:
         e3:e9:be:f5:43:83:dd:84:4f:24:9f:be:6c:48:46:eb:8c:ff:
         05:90:92:88:ff:ea:22:36:24:98:81:e2:a2:9b:b2:6a:90:9b:
         de:c8:93:ba:12:0a:a7:b8:7e:94:ec:cb:f9:1c:29:cc:4f:33:
         68:16:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:08:30 2025 by rpki-client