Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa
File:                     41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa (raw, json)
Hash identifier:          YAiJH6oj5z5m6dQJJliWLFbRqcVU/PecPhh6JwEcYJ8=
Subject key identifier:   D9:E7:35:5C:BC:FF:6F:7C:BA:37:84:20:3E:BC:F5:55:38:E3:4F:B1
Certificate issuer:       /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial:       010D0C9F4328584900216EBEE368600A176F3740
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     62164
IP address blocks:        72.18.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:6e:be:e3:68:60:0a:17:6f:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=42c7405d-aa26-44ac-ac15-5cd1d0f7ee2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:8e:21:88:e5:4c:1d:b8:8a:1c:e3:54:21:
                    29:00:1d:35:46:62:47:91:b9:e3:22:1f:af:e7:b3:
                    67:43:39:e7:cc:32:d4:b2:02:a2:62:d0:14:d6:05:
                    30:47:7b:65:66:f2:f5:9d:ab:c1:d9:21:90:0f:43:
                    3c:74:e8:65:e0:0c:84:d9:d4:79:c7:a8:c3:03:4b:
                    63:cd:e1:85:39:77:3d:a0:2d:ea:6d:17:b7:7c:c7:
                    af:8c:4e:3a:31:5d:e6:fd:36:cd:aa:f6:a1:98:7e:
                    10:84:22:3f:67:c7:6d:4f:ae:f9:eb:ed:a4:c1:8f:
                    da:2a:99:16:a1:e8:94:6a:39:08:d7:ef:0f:03:13:
                    f9:80:51:9f:d3:d0:d8:8b:f2:53:83:e1:c6:db:0f:
                    14:a5:ca:79:38:37:a0:72:c5:b0:99:4a:99:67:45:
                    d5:f8:29:63:26:19:f4:c1:b8:80:42:a5:bb:04:ef:
                    67:26:81:83:e3:37:32:ba:b1:10:27:d2:5a:2d:6f:
                    2e:28:c2:b0:5e:ea:96:54:f0:bc:2f:01:b7:fd:03:
                    14:9e:79:4b:15:a5:a5:fe:97:fa:66:44:9d:50:1f:
                    6b:9b:35:ee:e9:ab:fb:1b:4d:66:c9:91:2f:a8:4f:
                    45:59:58:54:2b:02:a8:28:08:43:58:5a:49:40:15:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E7:35:5C:BC:FF:6F:7C:BA:37:84:20:3E:BC:F5:55:38:E3:4F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/41a4aeb3-f9d3-3abd-ae83-c0cce907513e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl

            X509v3 Authority Key Identifier:
                keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:55:f5:fd:42:be:16:56:2b:58:66:2a:ba:59:32:9b:db:c8:
         30:63:0c:dd:84:f8:80:a1:fa:1f:26:47:24:c7:93:9e:fa:17:
         8e:38:fa:dd:ad:2a:a1:c3:15:5a:7d:e2:85:99:ff:5d:fa:03:
         fe:db:c8:f2:50:9e:f9:bb:55:df:03:28:25:cf:63:a3:a2:08:
         42:ec:84:1a:82:66:c2:62:47:3a:31:ce:ed:66:c5:c7:12:17:
         15:21:fc:8b:0d:81:1b:1a:dd:0f:38:0b:aa:a2:ea:1d:eb:d1:
         1f:96:38:f7:dd:09:66:49:d1:7e:29:d9:46:48:18:27:17:d5:
         6c:44:1e:73:6e:17:20:c4:86:17:6b:6a:b4:88:5f:de:0e:88:
         1a:f9:eb:ac:d5:d7:96:80:b3:c2:7c:a5:7a:b0:5d:5e:7e:71:
         b1:c9:b0:4b:92:57:36:e9:d0:71:d7:5e:f7:ba:0f:31:cc:c8:
         84:47:5a:47:ae:d2:b8:cf:12:bd:ef:ba:71:77:2a:d8:7e:d2:
         0b:43:8b:c0:57:85:ba:d1:b6:99:e9:eb:7a:a0:2a:37:67:84:
         53:7b:bd:60:f9:ae:5b:10:c6:e0:00:8e:e3:f7:77:7c:3d:69:
         97:5d:4d:02:09:cc:81:92:09:01:ce:47:9d:d9:75:b4:38:54:
         22:bc:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:23:14 2025 by rpki-client