Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/72b46b51-844a-3dea-9901-38bae2fa2877.roa
File:                     72b46b51-844a-3dea-9901-38bae2fa2877.roa (raw, json)
Hash identifier:          ynYTdH6fQsOb+mYkB5l7WaeugJCbOrihuXOF8tEPCrE=
Subject key identifier:   37:96:39:7D:0B:11:B3:25:94:25:A8:5F:F1:CE:4C:7E:9B:B3:E1:C8
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584A331AE689DFAAC157FB9C0900
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/72b46b51-844a-3dea-9901-38bae2fa2877.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     47050
IP address blocks:        173.224.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e6:89:df:aa:c1:57:fb:9c:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=54613d71-e63e-465b-be10-cd7b1f19031d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:3f:a7:e2:8c:9a:3a:e3:d5:5a:c1:9d:f0:
                    f8:27:2b:4b:f1:81:7a:f6:d2:3e:ea:00:5b:6c:b3:
                    ab:71:1b:c4:02:68:aa:45:4d:8b:51:49:ed:82:bc:
                    88:be:57:ae:04:b3:5a:4e:6d:33:32:82:30:9c:f3:
                    c7:36:db:25:05:74:4d:73:ba:9b:d3:24:4b:12:70:
                    b8:19:8b:eb:06:a2:19:34:6e:78:8e:21:2f:5e:41:
                    2e:a0:31:86:08:e8:d5:1c:b7:a5:48:63:99:36:93:
                    f0:03:eb:86:98:f8:61:03:47:5f:77:f4:c0:15:9c:
                    a4:0d:e8:11:a0:f9:e3:5c:29:0b:82:ad:3b:21:c6:
                    f2:ec:ec:20:be:1b:20:e3:a8:3f:04:f8:cb:f4:34:
                    52:3c:dc:2a:78:b3:ad:11:21:c3:92:f6:d0:3c:ed:
                    12:44:74:6b:cc:ff:70:ad:15:0b:7d:62:df:61:65:
                    d5:d0:b3:41:26:57:e9:30:52:56:c8:d1:a0:75:4a:
                    e2:6e:18:dc:7a:b4:2f:df:4f:cc:81:dd:cd:d9:d9:
                    b5:12:48:ae:66:42:f4:e0:47:63:30:63:d7:ab:a7:
                    86:90:b9:cf:2a:76:75:10:4a:74:a4:71:e0:53:79:
                    8c:5a:ba:95:5b:1d:90:f4:8f:20:01:7c:d0:a8:a2:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:96:39:7D:0B:11:B3:25:94:25:A8:5F:F1:CE:4C:7E:9B:B3:E1:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/72b46b51-844a-3dea-9901-38bae2fa2877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:d2:83:29:a3:cf:55:d8:66:9c:37:72:ce:c9:a9:59:af:
         ec:02:bb:76:55:7c:30:70:9e:8e:e8:b8:d8:a2:60:4d:61:33:
         96:60:e0:9a:d0:87:ae:41:b3:5b:35:17:15:7a:4f:6c:fe:a6:
         ad:cb:03:cf:43:06:b5:d3:7f:8b:f0:0b:94:05:a7:d2:60:8e:
         17:7c:19:0a:84:84:8e:0d:49:90:7c:66:fe:92:1a:41:d2:ac:
         16:12:19:f7:2b:5f:11:ff:59:86:13:46:3f:39:0c:55:2c:f6:
         14:83:f1:05:8b:c1:6f:b6:4b:30:91:93:8d:2b:3e:b6:0e:97:
         12:ff:d4:68:21:17:79:e4:ac:8f:52:92:60:04:b3:2e:5a:ca:
         62:9b:46:8b:ae:a9:c8:f1:b8:0b:ce:33:9e:9b:67:8c:cc:8f:
         04:33:62:c1:cf:f9:40:fd:fc:b7:de:eb:d1:0d:4d:de:59:93:
         0b:82:4e:37:7e:67:72:0b:c4:86:2e:04:c0:45:76:da:eb:78:
         67:68:9d:a3:80:7d:b6:ab:b1:50:68:2e:9d:e0:99:f3:66:28:
         1f:cc:b1:68:41:53:be:03:cc:65:fa:7d:7e:c6:4b:f6:33:fc:
         c3:c6:31:d0:84:a0:aa:1a:91:94:26:45:49:fb:a8:70:f8:c1:
         86:15:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:00:54 2025 by rpki-client