Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/fcb717ed-71f9-3e9f-8d09-d9d60ddc24d0.roa
File:                     fcb717ed-71f9-3e9f-8d09-d9d60ddc24d0.roa (raw, json)
Hash identifier:          G8L6UcKUuyuWxnVXlAf6KVWC0UVa72yy1uz0R0sCsmQ=
Subject key identifier:   D9:4D:13:A3:D6:2E:8F:23:81:EE:71:87:25:67:1C:90:62:39:0E:2E
Certificate issuer:       /CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Certificate serial:       010D0C9F4328584A6DBB377E54F2A1F00C0A0140
Authority key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/fcb717ed-71f9-3e9f-8d09-d9d60ddc24d0.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     13977
IP address blocks:        72.87.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:37:7e:54:f2:a1:f0:0c:0a:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1cee84-663d-43bc-bc24-3b0050eff749
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=a248d8eb-810c-4ad3-8007-25bde10e8d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:58:35:61:90:67:f7:16:d2:c7:19:dd:b0:
                    13:84:f1:a0:1c:69:6c:d5:db:bf:37:24:03:04:0f:
                    03:10:b2:c0:37:e4:b3:f4:83:60:79:16:46:30:99:
                    ec:da:39:06:4f:3d:48:f2:c7:19:b5:11:f3:8c:4e:
                    34:2c:d8:ca:6e:08:c5:92:fb:f0:96:76:e5:e6:82:
                    3d:43:46:fb:06:47:90:71:47:e9:b1:cb:ad:d6:f5:
                    53:fa:34:a8:43:5c:d4:fe:b1:ca:80:74:15:a2:11:
                    0a:c2:0a:af:b3:07:9a:71:7f:be:a5:2d:c5:0f:14:
                    70:a4:19:8a:3c:d9:cd:b9:4e:27:6b:8a:7e:f6:eb:
                    53:28:c1:6f:91:c6:2b:e8:17:91:a5:62:3e:82:5d:
                    29:48:d2:ca:ae:d5:87:6a:85:a8:cd:3b:40:34:a3:
                    dc:87:89:de:5c:0a:96:0e:c7:ca:ac:dd:a1:d1:a3:
                    5c:03:43:c7:05:25:e3:d8:67:a2:2a:4d:9f:32:7b:
                    30:66:92:21:c6:ce:07:0f:2c:b2:da:61:0c:85:b7:
                    e6:43:2f:10:47:a2:92:cd:3f:34:89:cf:a9:98:75:
                    77:3a:72:6b:9f:0a:53:38:a3:5e:bb:97:0c:e8:7b:
                    2d:27:93:5b:d4:aa:8a:36:ac:52:d8:f3:8e:bc:15:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:13:A3:D6:2E:8F:23:81:EE:71:87:25:67:1C:90:62:39:0E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/fcb717ed-71f9-3e9f-8d09-d9d60ddc24d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl

            X509v3 Authority Key Identifier:
                keyid:D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.87.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:46:63:76:a9:6d:82:87:f3:b4:87:c9:f4:2a:9e:a3:30:
         10:22:ee:2f:5b:d8:93:f2:5a:98:18:69:40:6c:18:2d:f4:be:
         54:1a:78:60:2b:07:95:3f:4f:ac:50:da:e4:0e:8b:ee:eb:ec:
         0f:85:a5:d3:eb:78:e5:4b:5e:2b:0c:a9:69:25:f3:97:2b:d2:
         89:e9:6a:c8:fe:0a:a0:96:73:f4:3d:ca:bc:af:64:96:75:3f:
         71:24:2b:75:6e:79:39:bc:80:07:3d:b5:f2:c3:26:de:f2:6e:
         c2:e4:3f:d2:ac:1d:33:da:b7:80:52:c4:49:bf:79:9d:57:11:
         ac:5d:5f:35:c0:0e:49:fd:b7:5c:f9:10:c5:bf:98:cb:2f:9d:
         e9:3a:ce:5c:24:42:d5:05:ab:f7:4a:8e:0f:65:a8:d4:96:75:
         64:84:e4:35:ae:b4:6d:4f:60:76:04:2f:98:07:44:a8:82:69:
         3f:48:a9:09:90:6a:1e:51:7c:07:53:aa:3b:34:09:ea:06:f7:
         7e:8d:17:8d:b2:8c:29:68:0d:52:62:27:1c:bb:e9:d4:61:3a:
         43:ad:c6:86:ca:5a:07:0f:a8:a1:29:44:b0:2a:ab:4b:a4:00:
         c5:01:3b:9c:ae:9a:d0:58:26:0b:c1:ce:66:5f:44:74:83:f8:
         ec:9c:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:34:16 2025 by rpki-client