Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/db8a7879-1feb-3b09-951c-71fc16735d65.roa
File:                     db8a7879-1feb-3b09-951c-71fc16735d65.roa (raw, json)
Hash identifier:          3I5oxCPOs2DL67lASC9WYGilLPhcD74G0itCckkI+QQ=
Subject key identifier:   E9:33:0A:E3:74:25:0D:EC:07:A7:74:04:71:C1:DD:8A:54:F5:10:A6
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584AA160C8FAC8401145240A1720
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/db8a7879-1feb-3b09-951c-71fc16735d65.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     215046
IP address blocks:        172.111.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:c8:fa:c8:40:11:45:24:0a:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=716ba209-a145-4a47-8d50-51275e5e40d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:ad:74:22:b0:63:79:b7:64:47:f9:01:ff:
                    f8:f7:d4:8b:83:64:b8:fc:54:93:66:6f:df:db:c0:
                    b2:da:52:20:f1:13:5e:ff:be:c1:4e:25:80:e1:d8:
                    45:f6:33:57:6b:96:3c:e4:93:a0:66:9b:05:96:a9:
                    c5:fa:7f:89:c8:65:97:e4:19:6b:2f:b1:4e:e2:0a:
                    35:07:08:f3:fd:5a:a2:07:3a:a9:e0:df:e4:cf:33:
                    1d:61:d4:ae:42:6f:c6:68:d5:9c:72:41:ae:a4:b5:
                    e7:73:50:fa:28:5a:33:33:6c:16:73:e9:76:c2:50:
                    7a:db:c6:04:b0:1d:5f:61:f3:45:1b:a5:4e:bb:69:
                    7e:37:89:ed:4e:f3:6d:f9:15:af:f5:b0:32:f3:a7:
                    b5:c6:a6:f1:8b:23:66:79:4f:9b:9b:0c:a5:50:8c:
                    3d:af:f9:3e:94:d5:3a:42:48:b3:7d:7b:1e:53:b4:
                    f9:5e:8a:b9:47:5d:6e:ab:b8:9a:43:91:c1:ef:54:
                    d8:5d:09:73:6b:3d:b3:1c:e3:95:3e:57:6e:d5:4d:
                    25:6d:96:7e:0f:ee:55:25:1f:c3:a8:92:09:b2:97:
                    7a:e0:8d:65:ca:00:42:6f:00:41:29:b8:a6:6e:9e:
                    df:0d:60:f4:7e:65:b2:f3:d4:ff:ef:ca:a7:9b:9b:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:0A:E3:74:25:0D:EC:07:A7:74:04:71:C1:DD:8A:54:F5:10:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/db8a7879-1feb-3b09-951c-71fc16735d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9f:b9:61:e5:0b:65:bd:2d:29:73:a8:e4:69:33:9b:0f:10:
         14:94:1c:de:61:02:35:85:2a:c1:96:b0:b3:3f:c0:3c:d0:a3:
         39:bf:e3:73:57:da:81:d7:de:32:eb:5d:4b:f0:14:f1:ba:1e:
         d2:67:fe:17:6f:fa:fd:89:bc:30:d9:00:8c:b5:21:dc:e8:96:
         5f:4f:6a:29:66:2b:c4:41:ac:be:3a:26:2d:73:0f:92:00:80:
         cf:d2:13:a5:16:e7:38:c0:e7:86:d9:8c:d2:5c:59:35:31:24:
         36:85:c8:fd:9b:e2:8b:cd:11:0b:12:67:e5:a1:35:30:21:5c:
         2d:c7:fa:a3:5d:21:e1:f2:58:52:60:51:69:21:b4:04:e8:5a:
         a3:ef:70:79:c3:af:38:44:74:62:e4:e9:48:6d:2c:10:18:9a:
         7e:cc:78:78:19:36:c2:79:61:e8:30:aa:bf:cc:0f:72:12:59:
         5c:79:e0:5f:df:f9:c1:e9:65:f8:9e:23:d8:94:5b:8e:05:30:
         9e:f1:b8:bd:1f:12:4a:8d:d8:4b:e2:71:7b:29:71:7c:bd:b6:
         bc:b6:3f:3a:4e:da:3c:05:d0:44:6c:b7:7a:0f:63:40:8a:53:
         f6:b9:bb:4d:b9:ce:11:da:47:8a:a2:dd:11:a2:74:93:77:ca:
         4b:c4:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:41 2025 by rpki-client