Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa
File:                     0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa (raw, json)
Hash identifier:          u/TBtLNBxihOunZLdN2w734I+tZ63l0mx8WpNkDCdsc=
Subject key identifier:   D5:C7:4C:3E:4E:99:DD:44:D7:32:6F:F3:5C:10:FF:7C:8E:F5:DE:2C
Certificate issuer:       /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial:       010D0C9F4328584A8C190E7EA5C6B407745D7A00
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa
Signing time:             Thu 17 Jul 2025 10:04:25 +0000
ROA not before:           Thu 17 Jul 2025 10:04:25 +0000
ROA not after:            Wed 15 Oct 2025 10:04:25 +0000
asID:                     5650
IP address blocks:        72.18.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:19:0e:7e:a5:c6:b4:07:74:5d:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
        Validity
            Not Before: Jul 17 10:04:25 2025 GMT
            Not After : Oct 15 10:04:25 2025 GMT
        Subject: CN=57d3fef5-4a79-4fb1-9547-7d6f54d4cdbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:5a:f4:0f:83:0d:42:0f:01:3d:fd:6a:90:
                    d4:6b:ea:2e:69:d1:39:40:1a:12:19:59:6c:b9:a5:
                    35:30:40:9a:30:5d:13:5b:e1:e7:48:f6:ac:0b:28:
                    5a:be:95:d0:32:4a:76:30:9a:ab:16:88:ff:f1:ce:
                    1b:43:db:62:16:02:75:a9:83:f8:07:ce:d4:e4:3a:
                    6e:9f:55:05:02:75:02:29:5b:8e:48:db:7c:d8:52:
                    35:7c:43:9f:af:af:5a:8c:8a:f0:c4:ce:95:f4:da:
                    53:1d:c6:6b:3d:31:c1:ba:1e:cc:8e:15:53:48:38:
                    76:34:fe:6d:ac:36:f3:93:20:58:a8:59:e4:6f:64:
                    07:02:58:64:83:e4:6a:e0:e4:74:97:01:62:0b:36:
                    7c:39:67:16:71:9b:c1:00:fd:d7:7e:79:6c:2e:d9:
                    37:37:9d:ec:cd:31:21:ae:e3:31:fc:01:fa:01:45:
                    a6:80:b7:68:b3:a7:08:06:b9:01:16:7e:57:8f:94:
                    35:e8:89:b3:70:4b:99:46:5b:92:4e:7e:3e:8e:a2:
                    c1:af:b4:60:f7:95:a3:59:73:c6:f4:3e:10:15:15:
                    9d:19:03:54:60:f7:85:f6:a2:d3:b9:19:3f:1c:af:
                    2e:09:5e:83:5e:22:a2:fd:bb:f0:81:19:35:27:ab:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C7:4C:3E:4E:99:DD:44:D7:32:6F:F3:5C:10:FF:7C:8E:F5:DE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl

            X509v3 Authority Key Identifier:
                keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:bc:af:72:af:50:1e:e8:7e:a1:6a:09:10:44:0c:32:7d:
         db:65:79:18:15:f3:43:9b:80:54:c3:c9:7d:c0:e3:af:2d:e1:
         81:4f:e1:4d:44:86:c0:78:fe:61:cb:3c:b9:51:11:33:65:b0:
         d9:f3:61:3e:60:1d:9a:c5:d2:53:0b:6f:3b:a5:f7:6c:90:7a:
         bb:49:30:a5:1a:95:85:6f:71:4b:3a:b1:06:fb:24:0d:e4:32:
         ab:51:88:e8:1b:06:06:c9:d7:e8:75:12:17:e8:86:15:92:5b:
         1f:b5:4e:f2:3d:b5:60:4d:45:83:33:b3:0a:66:22:c2:ed:79:
         3e:f1:c8:54:3e:39:50:8a:1d:0f:73:45:63:8d:0a:3f:86:eb:
         8e:b8:ce:57:7a:22:68:a8:8f:d8:89:9a:32:02:0d:90:76:de:
         b4:a8:8f:a9:74:07:9f:b2:1b:6d:46:fd:3b:4e:df:d4:82:87:
         55:d0:50:ca:bf:5f:54:47:f9:12:96:4e:21:61:93:7f:4c:37:
         90:7d:7a:6b:78:f4:e4:6c:5c:81:6b:e9:d9:3c:63:2a:f5:8f:
         72:12:4d:fb:3e:d8:34:30:60:7e:b6:91:3a:db:dc:ae:50:d4:
         24:4c:53:df:4b:bb:27:bc:7b:a2:7e:b6:a0:d4:da:01:88:51:
         50:c2:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:22:47 2025 by rpki-client