Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/aa496333-8120-3a65-9936-f42fcfe2c3a4.roa
File:                     aa496333-8120-3a65-9936-f42fcfe2c3a4.roa (raw, json)
Hash identifier:          JDn3fUnmZOY0XvPFOapZ8DPEH1pTMEg4Cr08LhvrQ0I=
Subject key identifier:   FA:B5:3F:DF:9E:24:39:F3:1F:5F:A5:0B:28:65:14:3C:FA:D4:21:C8
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584AB650E13BD37F54372357E4C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/aa496333-8120-3a65-9936-f42fcfe2c3a4.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     13768
IP address blocks:        72.51.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e1:3b:d3:7f:54:37:23:57:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=215167b9-ae97-4efd-93b7-8a6ef1e0ec8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:88:6c:2c:48:e6:d3:08:9e:79:7f:c9:31:
                    34:3d:b3:75:09:29:8e:84:e2:71:4c:ba:e4:0a:6d:
                    83:f2:dd:1f:00:a1:90:50:f7:e5:6d:22:11:2e:73:
                    e8:1b:75:03:70:1c:60:02:eb:44:e5:9f:bb:e4:c6:
                    76:d6:27:a8:29:19:37:f8:e9:3a:46:85:d5:44:bf:
                    21:f5:ef:98:7b:a4:e4:f5:88:0e:9d:d6:57:ad:66:
                    47:c4:27:ef:f1:4a:c1:67:56:e8:55:2c:68:f9:e9:
                    f0:0e:64:66:6d:04:0b:cd:b0:56:3f:2e:f7:8a:40:
                    92:70:c7:9b:a4:53:0f:b4:25:0b:b5:cd:c1:09:e7:
                    36:27:c6:b7:38:34:a1:bb:75:fb:ca:04:de:50:a9:
                    ca:23:ff:55:9a:10:ac:89:95:00:25:0f:ab:9d:55:
                    9c:9c:86:a4:b9:21:5a:ee:5a:14:cf:a8:d5:c4:90:
                    f3:51:51:ff:eb:ab:e9:c5:47:85:08:08:9d:ed:70:
                    33:a1:fe:7e:b3:dc:f0:df:f9:eb:e8:b4:bb:f1:1e:
                    c0:74:f7:50:59:34:2c:f5:4c:56:8e:c5:c1:90:4d:
                    5b:75:ba:de:20:89:1f:7c:67:7c:8a:7c:4d:fe:fe:
                    0f:9d:f6:97:f5:d0:da:3a:d8:e0:3f:eb:89:c8:bf:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:3F:DF:9E:24:39:F3:1F:5F:A5:0B:28:65:14:3C:FA:D4:21:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/aa496333-8120-3a65-9936-f42fcfe2c3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:62:eb:f4:f8:50:dc:2f:20:e4:c4:bd:db:3a:e2:04:aa:4b:
         05:9d:9c:96:fe:11:f8:04:a8:c8:f2:15:9c:40:95:fe:f9:5b:
         31:aa:b3:f6:8a:86:3a:02:91:e6:00:31:05:f1:fa:11:df:c3:
         e6:c6:4a:10:1a:23:31:df:f7:6d:f9:de:1d:17:44:6d:30:4d:
         fe:71:f4:81:5e:53:58:e1:cd:6e:94:90:62:3b:75:e4:46:87:
         46:1b:f7:10:0a:44:be:e0:dd:b6:67:60:39:25:b8:d2:bd:10:
         a2:66:41:a6:95:df:5b:40:24:98:a2:a2:8a:fa:2c:13:9f:0c:
         f5:3c:f1:19:15:15:ad:87:75:29:cc:2e:3c:38:23:d0:10:a8:
         b5:fe:e4:02:82:bb:ef:9e:f2:80:36:34:5f:f1:a2:9b:33:5a:
         5a:45:63:f9:1a:09:a7:ad:97:22:36:df:50:4c:b9:14:28:a1:
         c6:5c:16:98:05:1e:7f:5b:8b:f1:24:f3:1a:4b:f6:8c:d9:28:
         cb:bc:9e:7b:df:03:2a:b8:b6:15:78:25:33:7e:62:13:16:33:
         a9:9d:9f:aa:30:01:7b:a4:f9:fc:0d:eb:5b:88:ed:38:94:4f:
         53:b9:47:05:d3:18:b9:5c:e0:81:d7:9e:a7:75:91:4d:76:9a:
         c8:ac:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:03:10 2025 by rpki-client