Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/844c3700-1804-3140-af65-3ffc7cc33922.roa
File:                     844c3700-1804-3140-af65-3ffc7cc33922.roa (raw, json)
Hash identifier:          vXSTh1uikig3i1/pu+FXypJM8aJQFp1o9do6gGj51Ao=
Subject key identifier:   01:B5:5D:04:FD:6F:DC:ED:81:94:30:C2:47:A4:AB:2F:F9:90:BB:5E
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9FAFB47219224F3E2A800
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/844c3700-1804-3140-af65-3ffc7cc33922.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        72.51.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:fa:fb:47:21:92:24:f3:e2:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0342c228-a1f7-4a89-8271-fd3a332c9c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:3a:44:de:e8:bd:c8:94:72:71:27:9d:42:
                    b9:9e:2f:98:52:a5:17:0c:3e:6e:35:a0:0c:67:32:
                    54:f2:78:c1:04:74:09:ff:14:86:42:bb:eb:18:42:
                    bd:5a:51:4c:8a:68:e4:71:2c:c6:a4:5e:b6:88:11:
                    c1:a2:fb:2f:c5:d8:e2:ad:89:13:f9:85:c9:06:8b:
                    88:4f:13:cc:7a:85:df:b5:a2:a4:14:2f:2b:b2:b9:
                    eb:81:6f:27:d8:da:f7:b9:5a:a2:fc:b0:19:46:7f:
                    e6:4e:34:84:a6:26:57:67:ab:8e:c4:a6:6a:ec:1c:
                    66:24:61:cc:e4:6a:b1:60:8c:e1:0d:27:05:9b:d4:
                    9f:ae:02:eb:01:f5:c6:92:f4:02:ce:d7:b8:30:d5:
                    c9:a8:eb:4c:a9:c4:a8:3a:f6:f7:3f:79:ba:a9:b4:
                    8c:e4:2f:c2:60:c5:74:73:42:c4:f4:72:1a:bd:ea:
                    63:16:50:d6:60:03:6c:94:b0:66:cb:10:4e:2a:07:
                    3b:bc:73:e0:82:77:93:a5:b7:65:06:e5:08:e3:3e:
                    85:fb:3d:99:bb:51:6f:91:6c:0f:31:a4:3c:fb:cb:
                    77:c8:77:a1:10:b7:2b:9e:1a:72:38:bd:fe:c4:40:
                    72:c1:9e:25:58:de:b7:f5:12:1f:51:b2:17:6a:7e:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:5D:04:FD:6F:DC:ED:81:94:30:C2:47:A4:AB:2F:F9:90:BB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/844c3700-1804-3140-af65-3ffc7cc33922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:6e:0e:87:fc:c0:f2:81:36:b5:49:fd:9c:fe:34:6b:15:
         41:57:63:ca:25:b7:44:eb:e4:59:c6:af:03:a8:08:42:99:7f:
         69:8d:ec:0e:a7:d0:94:75:02:d0:9f:3e:f6:84:14:ee:dd:72:
         7f:9f:d7:50:74:83:a8:88:0e:5d:7b:47:a5:49:7b:90:30:67:
         03:d8:d1:1c:3d:98:a5:02:5a:8e:2c:c4:34:9d:74:0e:12:89:
         ec:ce:5e:54:1b:20:df:18:ed:fd:3e:35:8c:12:01:e6:ef:71:
         b5:13:76:7f:a1:91:72:ff:76:f7:87:f2:95:a9:65:38:ff:a1:
         0c:bf:24:a0:9c:33:7d:62:6f:0e:78:c7:6c:76:0d:5a:7d:53:
         ac:87:8d:be:34:1a:20:96:d2:d6:24:37:67:23:9f:ba:71:c7:
         e5:91:a9:7e:0c:74:13:58:70:e3:8f:ab:0f:cd:ca:51:73:54:
         76:f9:cf:ca:e1:7f:04:04:20:c2:5b:56:e6:1f:a9:f2:c9:f7:
         c3:d3:65:5e:da:2f:e7:68:77:56:6e:1f:bf:5f:f2:9e:b2:ff:
         45:26:6e:c9:23:6f:84:67:96:bf:06:54:06:93:0d:e9:e8:71:
         68:0a:2b:62:5f:bc:a8:c8:a3:e4:2f:e5:f5:1a:68:fa:28:19:
         7d:4d:db:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:33 2025 by rpki-client