Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/3e72fe9b-fb31-357c-908d-5316eaea2020.roa
File:                     3e72fe9b-fb31-357c-908d-5316eaea2020.roa (raw, json)
Hash identifier:          iv2v8vmt2DE8Es2gJcH3s5ec6XTjRCqz6pgR8WUlGWA=
Subject key identifier:   CE:8E:B9:97:E4:FD:5D:65:A7:87:E5:35:17:33:35:67:C4:2B:BB:76
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F43285848D0ABB489F12B6A360C0C1600
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/3e72fe9b-fb31-357c-908d-5316eaea2020.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        205.156.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b4:89:f1:2b:6a:36:0c:0c:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=b2830ffd-a4c4-4a09-9437-702095921782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:a6:49:7c:6c:60:b2:f5:12:0e:4d:1d:e6:
                    44:5c:e5:0d:09:50:92:78:7e:3b:09:81:63:e8:18:
                    b4:b6:08:d0:6d:9c:81:87:0e:9f:79:cc:81:46:e1:
                    7c:49:79:6a:9d:22:61:6a:88:7e:32:e4:f4:3e:cf:
                    36:e2:a9:32:a6:a0:8f:18:45:6a:2f:b5:bb:9f:cb:
                    c9:db:1f:0b:f9:19:f7:23:80:4c:96:58:c6:03:ce:
                    10:b8:9d:8e:7f:e7:80:6e:d3:ba:36:65:1c:6c:14:
                    d7:26:96:90:72:13:46:20:4c:d4:0c:1d:c9:2e:8d:
                    97:78:38:94:f8:48:70:df:e3:f5:73:e1:72:19:49:
                    60:a0:3a:64:d6:dd:03:3a:b1:e1:2e:59:39:1e:21:
                    59:03:1b:3f:ed:58:a0:d8:f6:6f:4e:14:a1:d6:1d:
                    63:f5:49:f6:66:e4:ff:b3:e4:f1:fa:e7:60:29:db:
                    3c:0c:bf:dc:29:68:6c:a9:4f:cd:81:d7:69:1f:76:
                    78:62:41:56:2c:e6:7d:3d:b2:b7:89:5c:2e:7d:24:
                    32:76:11:30:4a:19:97:be:25:17:fa:8d:ba:93:f4:
                    e0:86:54:16:39:2a:c5:41:af:6a:52:6b:16:fd:aa:
                    36:4a:49:bd:1c:e6:b4:2c:36:e5:8f:93:b7:0b:bd:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:B9:97:E4:FD:5D:65:A7:87:E5:35:17:33:35:67:C4:2B:BB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/3e72fe9b-fb31-357c-908d-5316eaea2020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:6c:e8:1c:a8:5b:94:92:68:5d:5c:00:b8:c1:8a:30:60:
         5b:5e:38:c3:61:cb:0c:be:2f:7d:fa:ed:83:3a:5d:f2:7e:0e:
         42:a8:0e:1f:1b:8c:f2:17:1e:41:7a:84:8c:fc:dd:14:0d:05:
         87:e4:9f:b2:50:af:65:cb:a3:76:07:1b:a3:8e:56:2b:62:1d:
         71:52:51:d7:ca:da:30:c5:c8:1b:a8:d7:db:c6:c5:cc:62:36:
         22:4b:c1:bf:d9:8f:f6:a3:10:4e:ea:82:8a:a2:78:0c:1c:22:
         16:db:03:06:92:4b:6e:92:24:82:99:ed:ae:3a:96:58:f9:8b:
         bc:c7:04:c8:b4:86:28:17:4b:97:81:24:03:12:85:62:f9:a6:
         9d:6d:bb:b8:35:8d:f5:9b:1f:6d:96:aa:d2:31:d7:b3:ca:89:
         40:90:92:c3:c2:16:a1:0e:ba:82:a1:7b:61:90:3b:c0:44:15:
         b7:ef:ca:0a:d8:47:43:49:cb:c1:77:90:0b:63:f6:16:5e:e8:
         d7:b4:ad:e9:af:2d:ff:15:b4:13:ca:db:79:8f:a5:c3:ef:37:
         94:5a:5b:4b:70:d6:57:c1:45:b5:88:89:57:93:66:58:fe:2b:
         fc:8f:95:fc:56:7c:81:fb:1d:ce:16:a3:cb:27:32:aa:e3:0d:
         93:11:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:22 2025 by rpki-client