Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/6670d963-f49d-3958-840d-44d85ca2c48c.roa
File:                     6670d963-f49d-3958-840d-44d85ca2c48c.roa (raw, json)
Hash identifier:          EsPUS6AJYo85Pc1XSPOjxe22y+ahUzEf5jamdN4k0+w=
Subject key identifier:   56:82:56:D7:B3:C6:D7:E4:B0:C7:49:4B:B3:33:13:18:B0:67:AD:E9
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584A77C8A0C6DF38D16327EE8500
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/6670d963-f49d-3958-840d-44d85ca2c48c.roa
Signing time:             Thu 10 Jul 2025 03:26:12 +0000
ROA not before:           Thu 10 Jul 2025 03:26:12 +0000
ROA not after:            Wed 08 Oct 2025 03:26:12 +0000
asID:                     24429
IP address blocks:        72.254.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:c8:a0:c6:df:38:d1:63:27:ee:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jul 10 03:26:12 2025 GMT
            Not After : Oct  8 03:26:12 2025 GMT
        Subject: CN=50f88c6a-0707-46cb-87ee-2a0cab33ccbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:db:d5:d7:42:56:2a:8e:25:10:3f:1e:dd:
                    7d:55:39:64:c8:82:08:ba:21:fd:79:fb:92:34:9e:
                    fb:be:19:22:23:49:f9:a6:e8:94:57:13:fe:92:bc:
                    f7:81:b2:d9:fe:36:01:a8:8b:a7:37:42:c2:8e:0f:
                    b8:b5:4b:6b:24:3c:22:35:51:91:e5:40:d7:0a:a9:
                    8e:65:a8:71:11:e9:5d:b9:23:7d:f9:b7:8c:d0:bb:
                    75:92:25:30:89:42:5c:9b:8b:84:3d:7d:fc:4a:b2:
                    05:56:67:2a:15:58:a8:c1:2c:f3:7a:ee:6b:1b:fa:
                    9a:ce:f9:81:64:e0:46:0d:42:a5:14:98:9c:d6:b3:
                    24:eb:63:9f:1a:17:c6:15:4c:02:24:f9:17:99:b6:
                    93:d7:0d:39:5b:84:ee:d1:b5:ce:ba:35:80:73:e1:
                    03:b5:e1:bb:dd:da:87:a5:35:5f:73:cc:2f:58:66:
                    18:5b:36:f8:61:39:b8:47:c7:c9:ac:a8:c4:c3:89:
                    13:80:30:ab:34:52:da:6e:20:fe:1b:b9:78:63:32:
                    38:57:96:be:67:e2:45:93:ba:f3:66:95:7e:c5:d2:
                    ec:f8:7c:a0:67:81:f2:0c:84:51:8a:9f:65:4e:7a:
                    3c:9f:5c:d4:12:3c:10:94:a4:7b:9e:fb:7c:30:36:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:82:56:D7:B3:C6:D7:E4:B0:C7:49:4B:B3:33:13:18:B0:67:AD:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/6670d963-f49d-3958-840d-44d85ca2c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:15:ab:b5:df:77:2e:eb:e5:91:ad:b4:9d:a8:97:25:3a:12:
         4d:62:31:c0:8b:7e:b1:9f:32:4a:0b:f8:b9:8e:81:96:42:c0:
         07:f4:09:6a:16:d8:65:33:f8:ab:b7:26:fa:d6:90:fb:16:52:
         36:4b:ae:7b:eb:f9:1e:94:36:8f:90:bc:06:6d:8e:8e:94:e3:
         33:d2:31:7e:5b:5f:89:55:f6:83:6f:a7:1e:b0:85:07:10:5b:
         6b:09:9a:fc:63:b2:d8:ce:6f:e1:d5:2b:88:6d:34:b6:b4:45:
         fc:67:c6:79:01:b4:d1:16:49:a7:0e:b5:b4:38:28:80:70:b2:
         02:5a:8d:d1:15:79:c1:a7:4a:ca:ed:8d:5e:cc:ed:d5:e2:dd:
         ae:9d:4f:6b:55:11:7a:f4:7e:46:61:6a:5e:78:bb:9a:6e:5f:
         a4:92:00:19:7f:5d:c3:86:39:0f:41:43:41:94:66:9b:d9:07:
         3e:69:a5:2e:8c:6f:11:10:3a:9b:35:16:bb:49:a1:20:23:91:
         b3:33:7a:c6:63:29:2c:27:dd:96:de:5c:ad:4d:b9:a9:7e:50:
         b8:48:07:1b:f2:5d:a1:e7:46:4b:52:d1:04:1d:af:9c:7d:f4:
         2f:18:ec:7a:6c:bf:21:a3:e1:1c:ae:b5:ea:d9:b3:5b:0c:d5:
         90:96:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:30:26 2025 by rpki-client