Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/4a4c019c-866a-3f57-b0a5-bf9605704819.roa
File:                     4a4c019c-866a-3f57-b0a5-bf9605704819.roa (raw, json)
Hash identifier:          Kgt7CZPOdnb+s9T2yRWUEarHuLfypmREkdZBayFmCSQ=
Subject key identifier:   41:79:57:19:97:8A:DC:2B:51:D7:E1:B3:83:CD:BF:0E:E1:DA:4C:DC
Certificate issuer:       /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
Certificate serial:       010D0C9F4328584A7A4B44B6E794CDC1C724AA40
Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/4a4c019c-866a-3f57-b0a5-bf9605704819.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     62862
IP address blocks:        72.15.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:44:b6:e7:94:cd:c1:c7:24:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=619db86b-25af-41ee-91c9-3eba051affb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:00:2f:1e:47:01:e8:ab:13:30:5f:06:2c:
                    a1:5d:8f:80:a2:5c:46:a8:72:e3:ba:c4:4e:1a:65:
                    51:b0:b0:8c:42:95:61:96:d7:18:cc:02:99:53:85:
                    3b:e5:db:bf:eb:0a:e1:5e:90:61:ce:ba:b5:a6:ce:
                    ec:a5:99:d3:41:87:91:8e:bc:b0:0e:b5:b4:5c:08:
                    75:a2:d5:9f:43:0d:2f:d5:dc:73:54:08:1a:7e:57:
                    c8:fd:c7:96:90:91:d7:4b:00:5d:17:34:5c:af:b2:
                    5a:92:5c:38:99:f5:da:1a:07:6c:6e:ed:e5:41:dd:
                    90:a3:95:77:bc:eb:39:2c:6f:27:ad:dd:d2:02:6e:
                    ac:59:3e:5c:63:55:e1:ee:53:c6:38:9a:43:71:6c:
                    c2:ac:aa:a4:3a:b9:3f:09:b1:4b:1a:e3:fd:9c:ef:
                    87:44:da:14:26:4c:e0:f2:e4:f0:e5:ca:94:19:9c:
                    a1:29:e8:1f:12:bc:f6:46:c4:6d:9d:28:bb:52:d0:
                    bc:7b:19:7b:18:07:64:05:77:22:bd:2f:ff:bb:3d:
                    27:45:a2:b5:f4:ab:b2:bd:2b:b0:2d:7f:c8:a1:85:
                    74:40:51:dd:12:fb:b2:ea:5a:9c:04:af:a0:69:ec:
                    09:90:e9:88:1b:90:de:94:be:8b:9f:b4:2a:ad:ec:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:79:57:19:97:8A:DC:2B:51:D7:E1:B3:83:CD:BF:0E:E1:DA:4C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/4a4c019c-866a-3f57-b0a5-bf9605704819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl

            X509v3 Authority Key Identifier:
                keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9b:95:db:e0:ba:2c:eb:78:b5:c3:7a:89:1e:e1:f0:d1:9f:
         66:0e:85:0a:fa:0a:8a:7c:ba:ff:fc:07:73:6e:ad:79:fc:fd:
         aa:5f:0c:1d:42:38:d1:2f:51:59:78:db:ab:a9:e1:cb:16:a5:
         aa:73:b2:50:60:70:b6:04:e8:00:2b:db:db:b1:a4:e4:fc:2f:
         eb:d3:da:3d:80:1e:4a:d5:1b:2d:86:ec:8b:be:9f:67:46:e8:
         97:b3:e1:de:aa:95:79:96:71:0e:6f:e7:2b:85:f2:2f:23:4c:
         e7:99:2c:6a:5f:2b:58:c8:42:e4:7c:44:7b:e8:0a:09:65:d9:
         bc:0f:a0:8f:bf:98:67:ec:20:32:37:4d:69:ea:3d:b7:dd:de:
         8b:31:1e:51:58:5c:06:41:44:61:f0:2d:65:bb:9a:1b:eb:63:
         9e:2e:66:42:4c:4c:2d:c0:1e:39:52:23:3f:46:a3:42:72:ea:
         00:15:6b:7a:5b:6e:08:ad:e2:ff:3f:80:83:f0:11:9b:23:53:
         69:e7:c6:48:96:1b:aa:a1:63:47:f0:47:41:0f:e5:a7:0d:64:
         9b:b4:a9:8a:f7:30:68:cd:69:be:cd:76:a8:6c:b5:97:c2:a9:
         09:1e:2b:60:a8:f5:2e:26:6e:44:15:7f:60:ec:d8:05:b9:22:
         de:70:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:51:57 2025 by rpki-client