Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa
File:                     7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa (raw, json)
Hash identifier:          aFmj6HnoHcSM2VCCO6ojQkiegI+tB5LPjJCaPMm/1iU=
Subject key identifier:   31:C1:A5:3E:62:58:41:B1:A0:1A:76:CB:24:B1:EC:31:77:D1:07:49
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584A6825F7F8C031633E657F9200
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     812
IP address blocks:        72.136.102.0/23 maxlen: 24
                          72.136.104.0/21 maxlen: 24
                          72.136.112.0/21 maxlen: 24
                          72.136.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f7:f8:c0:31:63:3e:65:7f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=5299841e-5671-46f0-89b6-cff6258fb094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:5d:03:71:96:e8:48:3d:e8:24:c4:3e:4c:
                    e9:a8:1b:d1:38:26:08:ee:69:a2:46:95:ac:d7:f0:
                    5a:87:16:aa:a6:d7:56:8f:60:6c:32:6d:ee:2f:5c:
                    b0:c4:91:5b:49:c7:aa:b6:28:9c:98:e5:f9:91:8c:
                    0d:7a:c3:9d:61:12:5a:55:27:0f:64:1e:1d:24:d9:
                    5d:ad:8f:ff:36:e6:88:f7:87:5b:03:46:c3:23:15:
                    a1:65:88:ad:68:f8:d2:0c:d7:c0:08:67:95:c1:4a:
                    2d:c6:5f:b6:78:43:19:28:c8:05:6f:20:e0:73:b0:
                    4a:3a:a8:da:de:c5:30:1e:9c:16:e5:2e:81:43:59:
                    44:15:16:a9:6b:09:5b:10:aa:76:7a:a1:52:50:a7:
                    97:fb:7f:73:6e:73:8f:02:d0:72:3d:27:2f:77:59:
                    e0:10:78:b9:4a:77:d2:e5:cd:94:6e:35:d4:40:86:
                    e8:21:57:b5:2f:d0:0f:00:b6:ab:d3:5b:a7:ba:1c:
                    f8:5f:d2:68:1e:01:a7:3f:ed:33:87:6f:0d:91:56:
                    65:b8:71:2a:85:40:76:01:be:e0:6a:3e:c1:3f:a3:
                    b9:24:7a:fe:86:ae:7e:09:b5:3e:fe:a8:cc:5f:0d:
                    d0:ef:cc:b4:ba:fc:bf:77:81:84:93:ea:0d:83:69:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:A5:3E:62:58:41:B1:A0:1A:76:CB:24:B1:EC:31:77:D1:07:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.136.102.0-72.136.123.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:17:d6:82:14:1d:4f:76:80:92:28:ad:63:52:8b:93:c0:fc:
         77:6f:e2:80:aa:91:bb:75:0e:e8:6e:a4:16:e5:e6:53:35:b3:
         bd:fa:41:a0:3d:88:6d:4c:a3:71:b7:d0:b6:4d:18:44:b7:55:
         56:74:f7:96:99:ac:d5:29:8a:bf:79:b7:ef:04:b8:bd:be:49:
         0d:47:74:47:d6:d4:65:08:d0:77:ae:e8:23:4f:4d:5f:16:28:
         17:cb:20:5e:70:60:0a:f2:93:d5:8d:64:d1:0d:fa:9e:e7:0a:
         ea:c3:9d:83:d6:64:f3:ac:fb:48:c0:12:a2:9e:12:0e:91:ed:
         1f:4c:f8:f6:a2:dd:c4:ec:c9:f9:d9:76:4b:ac:06:f9:e9:d7:
         cd:2e:04:25:d9:de:96:fb:9b:88:f0:93:84:db:b2:83:62:82:
         a7:9a:b3:c5:bc:e9:a3:4b:c1:5e:ce:af:95:a2:1b:c5:4d:04:
         37:d7:7b:bb:ab:62:54:16:55:5c:43:a6:a5:51:a0:cd:7a:b3:
         e0:0a:ad:52:8b:01:a6:ea:f5:e0:a4:82:f6:01:7c:d0:51:78:
         0c:77:93:42:2b:c7:1b:50:23:18:ae:11:82:69:30:25:c8:6b:
         b9:95:72:bd:ea:69:93:18:cb:b2:58:e3:0d:7e:49:99:cd:c1:
         ea:fc:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:10 2025 by rpki-client