Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa
File:                     556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa (raw, json)
Hash identifier:          UvRE9th/xM+2PI8hYaLlQ1Fft6Y+c03s7ub5oeBt2/I=
Subject key identifier:   63:C1:90:79:65:04:BB:FA:D1:35:BC:FC:49:61:74:9D:45:F7:AC:89
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584AC2E107C88125956BB9A0C380
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399244
IP address blocks:        72.5.46.0/24 maxlen: 24
                          72.5.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:07:c8:81:25:95:6b:b9:a0:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=7262a780-4f43-479f-98d7-c92f7cc37017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:fb:ea:d9:8b:a0:44:04:87:96:6c:52:06:
                    67:a8:21:56:15:0e:63:79:d1:21:26:11:ec:72:3f:
                    cf:0d:16:7c:70:a9:7e:e8:6b:49:2f:85:ce:b4:e1:
                    df:a5:64:45:06:d8:f9:e9:0c:bf:34:ac:f4:7a:3d:
                    88:b1:ba:01:41:72:0d:a2:74:17:db:26:0f:ba:27:
                    8f:fa:ca:e6:d2:53:74:35:f5:53:a2:19:1a:e9:f9:
                    f2:a0:a1:1a:e8:87:4e:02:15:3e:1f:4b:90:44:48:
                    7f:c0:b0:c6:80:1e:66:43:32:1b:ec:3a:2e:53:4c:
                    1c:85:e0:e0:9a:42:fe:f2:cb:dd:7b:23:7e:f8:05:
                    ed:c9:c4:26:d9:22:54:63:aa:01:48:c3:20:fe:53:
                    c9:85:8b:e4:cb:ba:59:fd:5c:95:bb:77:90:a4:05:
                    fb:29:ec:12:b3:ce:da:82:3f:0d:a6:30:a4:84:20:
                    e6:75:65:5f:07:ef:15:75:43:d4:1e:49:7e:90:b3:
                    96:01:5f:fa:c4:cb:13:ec:55:3e:af:1b:bd:d8:20:
                    42:73:2c:3a:22:a6:ce:72:ff:a4:70:3e:7c:7a:29:
                    f1:dc:08:10:36:39:87:8a:7e:69:27:d2:76:a6:c2:
                    1c:2d:a9:f7:eb:d6:ff:8f:3f:11:4d:1f:18:ac:5f:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:90:79:65:04:BB:FA:D1:35:BC:FC:49:61:74:9D:45:F7:AC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.5.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:27:3d:3f:2a:16:15:b1:20:f6:e3:ff:05:ec:72:2d:37:
         b2:c4:1e:ca:56:6c:8b:e3:84:a2:19:1b:4e:04:6d:b4:68:59:
         68:b6:68:11:c5:f1:ee:43:3f:5e:12:8e:82:d1:4c:8f:81:b7:
         b1:34:74:4f:e9:30:9a:d3:83:84:af:99:3b:c6:2d:d5:61:ed:
         0c:46:05:da:38:ae:ee:5d:5c:70:9a:5b:c2:5f:27:f9:bc:a3:
         ef:d2:0c:a1:5d:e7:9c:8e:65:f9:1e:83:b4:1f:4b:9b:d0:a2:
         3e:1e:4b:de:07:4c:2c:61:44:0e:15:bf:e8:5f:ab:65:4b:fc:
         cd:de:27:3b:e9:94:55:e0:8f:dc:06:4d:e2:ab:27:2b:42:4c:
         80:04:64:6f:5b:e1:2a:e4:6f:7c:54:68:13:ce:a0:83:38:2d:
         bb:71:45:e6:a1:04:c3:ee:6d:e5:3f:cf:b2:26:64:2a:37:14:
         0f:4d:36:13:0f:33:89:5a:52:4a:f8:b1:f5:ea:58:3f:ca:f0:
         04:c4:90:31:18:89:5c:2d:e4:b7:40:52:ff:e8:7f:db:ac:80:
         37:6b:77:b9:cc:0d:10:0b:60:23:27:b7:c3:26:1a:f3:75:a8:
         04:96:71:05:fe:0f:d9:1d:7d:cb:75:38:36:b3:de:62:7d:a3:
         0f:0e:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:30:46 2025 by rpki-client