Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa
File:                     37d8317a-63d8-3727-8121-5e81bc5e9a95.roa (raw, json)
Hash identifier:          X+dn/eVUFjsazQ3FG+YGUKmhKgEFlXBe5dMZIk2rxoc=
Subject key identifier:   71:FD:7F:1A:93:A9:28:F9:56:45:7F:BE:0E:4A:13:7D:9D:41:A5:88
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F43285848EF61584BCDA197AAC435B200
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        72.13.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:58:4b:cd:a1:97:aa:c4:35:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=0df158b9-54f2-4bda-a3ac-583eb06f072a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:f7:c4:95:2b:51:c9:68:cf:4f:3e:f3:2f:
                    91:6d:5b:23:c5:5f:02:51:2e:9e:78:61:f8:c2:32:
                    81:6e:e9:66:7c:34:9a:e8:69:57:65:96:c8:88:61:
                    62:b0:ee:b8:02:2a:19:8f:83:42:ff:54:1c:45:cb:
                    bc:23:9a:fe:b2:39:06:bc:cd:5c:24:5f:56:be:8e:
                    f1:83:4f:06:9f:b1:76:f5:0f:1a:7c:a6:57:0c:5f:
                    c6:b8:bf:c2:98:03:1b:a0:cc:fc:b9:25:97:3f:36:
                    95:85:47:03:b2:73:67:6e:e7:7d:62:33:ab:0d:1b:
                    3a:97:dd:c9:84:5b:e0:6c:b7:4d:aa:29:82:78:98:
                    ad:f4:fc:e5:e7:bf:85:4c:79:49:d8:a9:17:7f:8b:
                    5f:3a:d1:14:14:b5:5b:17:24:44:64:d4:27:71:ca:
                    45:24:2f:2f:a1:46:06:67:74:bb:4f:c2:e6:41:8e:
                    6e:19:43:a3:48:32:a3:c1:14:9f:44:00:e0:9b:87:
                    50:40:9b:90:ee:51:8b:53:2f:ec:90:36:a4:b8:25:
                    7a:0e:8c:77:6a:c2:56:9b:25:13:06:87:95:bc:cd:
                    b9:8c:56:07:69:09:0f:46:d8:b3:e2:ad:76:63:3c:
                    4b:58:05:8a:c3:4b:17:f7:e0:ed:13:3a:8d:8c:90:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FD:7F:1A:93:A9:28:F9:56:45:7F:BE:0E:4A:13:7D:9D:41:A5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ca:a6:8a:86:7d:b3:3a:c6:94:fc:f9:31:b3:7f:91:f5:aa:
         05:38:cd:fd:a7:74:62:c7:3d:cb:ba:f5:50:7b:ac:69:57:f9:
         af:0f:f6:9e:98:6f:8c:94:c3:98:e0:a9:d0:b7:ef:ab:82:b5:
         9f:f2:b0:f8:cc:a6:b9:22:42:12:67:b4:d3:6d:89:f1:99:82:
         e1:02:11:20:69:4a:10:09:a8:bb:f1:ba:34:1e:84:c5:a6:e8:
         ff:56:53:82:b6:12:47:17:76:31:de:80:dd:c4:b2:e1:dd:a6:
         cd:1c:67:3d:b4:4f:9f:bc:56:6b:4e:3b:d5:9b:6d:0b:4c:f9:
         7f:88:3e:5d:0a:4c:a4:60:2e:93:03:e2:67:72:35:c6:04:f3:
         88:98:e7:44:39:19:9b:08:a8:63:78:ec:0c:80:d4:42:2c:01:
         2a:19:e8:00:17:20:ee:21:ba:20:dd:cd:64:96:e1:54:c1:72:
         b2:38:81:8b:d0:ab:05:c4:a3:5f:93:11:e1:c3:32:e6:43:04:
         74:1a:46:f6:ff:c3:76:ce:a8:51:26:46:c6:22:e6:b5:ae:77:
         3f:10:ef:b4:5c:48:f2:1e:18:fc:09:b6:ec:50:f7:4e:a1:22:
         aa:7b:8b:74:4c:cc:15:e3:5e:ba:7d:c4:f3:0f:28:f3:ad:3a:
         19:0f:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:20 2025 by rpki-client