Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/72fce457-1300-3535-8191-4c07807d19b5.roa
File:                     72fce457-1300-3535-8191-4c07807d19b5.roa (raw, json)
Hash identifier:          OnTnhiVnUxcjdyuoIxJIuObRdxOLCT+tvoaNGeOuiGE=
Subject key identifier:   E9:BD:68:E5:DF:4F:26:07:2A:47:98:55:CF:81:3B:01:9E:CC:C2:97
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849F17FACB6B5B692F18D041C60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/72fce457-1300-3535-8191-4c07807d19b5.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397373
IP address blocks:        205.186.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ac:b6:b5:b6:92:f1:8d:04:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=5ece2b62-992b-4252-b946-bb6ca3c72fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:61:08:15:cc:8e:71:7d:51:da:31:ba:60:
                    1f:25:21:73:d6:fb:36:18:46:40:3e:77:cd:3a:a4:
                    94:5f:e3:0a:7e:b9:f1:d0:68:c3:73:e0:08:d6:b7:
                    aa:58:e9:2d:14:d2:23:bf:dc:74:bc:ac:f0:6d:ed:
                    01:46:56:72:99:d1:41:24:52:0e:a7:dd:72:cb:10:
                    f5:22:ae:57:6f:a2:3c:fe:58:02:fb:b2:23:af:e6:
                    5a:9f:c6:dd:e3:c2:3e:69:d9:69:02:2b:76:37:84:
                    b8:41:ca:31:ee:c3:e6:57:98:b6:e5:fe:e4:76:57:
                    c4:ab:18:01:f7:e3:10:8e:d1:d8:8a:05:5a:b5:58:
                    eb:c3:5c:25:43:7c:5d:a1:6a:c9:a4:2b:85:9e:3e:
                    f8:5e:53:75:61:b8:0a:4d:77:29:a6:77:4e:72:1f:
                    f4:fb:a6:f4:83:aa:95:7b:89:a6:09:ba:87:a9:e7:
                    15:df:af:92:49:ea:24:a7:a5:48:78:97:2e:8e:25:
                    62:09:18:e6:91:38:c5:d5:59:62:56:df:7a:d4:7b:
                    f4:fc:d1:e4:37:26:34:72:35:7c:64:5b:8a:5c:61:
                    d3:66:08:84:54:22:40:b2:ae:6e:35:6f:75:87:cd:
                    0a:ae:ea:37:93:94:e9:33:4f:c4:d7:7f:ef:61:13:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:68:E5:DF:4F:26:07:2A:47:98:55:CF:81:3B:01:9E:CC:C2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/72fce457-1300-3535-8191-4c07807d19b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:5d:8b:99:aa:7c:97:bb:f6:b3:5b:18:be:db:3e:e5:b5:
         49:e8:d6:e1:c9:49:df:b9:c4:45:b1:fc:ae:75:e9:0f:b5:f8:
         47:9a:77:ad:87:63:4f:a2:33:9d:ff:ba:79:76:b4:46:5e:e1:
         bb:df:11:11:17:28:fe:b6:21:b8:25:10:0a:ba:97:5c:0a:30:
         19:12:96:0a:39:be:92:28:01:55:10:0d:a7:2f:33:f1:20:d5:
         4d:b5:78:3f:e6:70:8e:4f:66:33:67:a8:ba:74:da:eb:08:f5:
         2a:f6:60:30:ec:30:43:e5:57:80:e0:0b:c5:22:56:18:87:e4:
         e1:ce:d9:d0:37:1a:9a:1a:f5:7e:32:39:2d:6c:2c:5c:2a:f5:
         78:ab:eb:68:54:dc:4e:7e:a6:a1:2c:73:41:9f:32:ac:3f:a2:
         14:fa:38:f9:ed:cb:0e:38:c1:aa:d9:be:91:a7:6f:5a:e7:d4:
         65:8d:26:80:e7:8b:28:4b:eb:0c:fb:9c:66:07:21:83:40:5c:
         9a:00:0d:aa:ff:71:0e:9f:15:e7:ed:54:04:a4:fb:88:65:f5:
         4f:47:e2:5d:85:47:5f:ef:8f:ca:d8:4e:fc:51:59:99:a7:80:
         09:e3:30:d2:c8:17:29:83:dd:17:92:0e:c3:f6:1b:1d:f0:28:
         ce:ef:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:45:18 2025 by rpki-client