Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/31ba7e6f-e69d-3543-b998-e46050865716.roa
File:                     31ba7e6f-e69d-3543-b998-e46050865716.roa (raw, json)
Hash identifier:          tEwg9NRe9NgyN7QDwpWo14lihnx3QTC5E8FAP+NqCgg=
Subject key identifier:   8D:1D:1F:A0:C6:38:5F:7E:27:BB:EB:D2:DD:5D:F1:8D:79:05:A3:50
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BF3A607E1174A445E8780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/31ba7e6f-e69d-3543-b998-e46050865716.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        72.10.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f3:a6:07:e1:17:4a:44:5e:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=1f778668-68ba-4edc-9a7d-1955caf0f54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:5b:22:83:3f:41:72:03:97:7a:ba:3a:cc:
                    d1:da:65:ad:29:6d:81:a0:1d:79:75:9a:6d:4b:24:
                    29:7e:8e:1b:b8:1c:57:19:d6:30:4e:47:4a:21:16:
                    55:68:b5:61:b4:e0:a4:44:26:2d:d4:ab:c3:53:76:
                    cc:31:51:3b:ae:1e:04:17:d4:33:74:1d:cb:40:58:
                    bb:98:e4:90:c4:fa:87:c1:c3:41:0c:2b:92:7c:39:
                    6d:a2:f5:60:55:ed:77:37:78:ca:73:2c:a2:15:53:
                    3c:41:21:6c:9c:42:fc:bf:6d:53:7c:95:d2:83:3c:
                    80:b7:e7:2f:3e:12:be:04:bd:9d:20:6d:c9:3b:36:
                    f9:77:83:eb:93:3e:e2:c1:21:be:22:50:e0:c0:7a:
                    f9:38:bf:db:ea:ed:1c:7e:43:dc:c5:23:f3:8f:74:
                    2c:66:a2:6b:00:1f:32:c1:96:f0:52:bc:eb:38:36:
                    26:d4:60:d3:54:e4:4f:4e:0a:e9:7a:ca:d1:f5:78:
                    60:d8:2b:73:5d:5e:3b:ed:85:ef:c2:76:5a:48:bf:
                    7b:62:64:9a:78:9f:b7:68:22:00:d4:3c:9b:51:82:
                    fa:2a:49:f3:9a:c5:1a:cd:2e:cc:42:a6:d9:a8:60:
                    7b:39:64:32:9f:1d:af:3f:2e:97:0f:28:32:b6:a1:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:1F:A0:C6:38:5F:7E:27:BB:EB:D2:DD:5D:F1:8D:79:05:A3:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/31ba7e6f-e69d-3543-b998-e46050865716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:09:ea:d1:f2:e6:fb:23:68:00:8d:f7:d5:4d:2e:f3:7f:f7:
         a3:e3:b9:f6:b5:bd:27:a9:e1:24:a7:f1:b2:b5:84:8e:89:5f:
         2d:38:cc:cd:d5:eb:07:04:79:51:bd:97:7a:47:40:9a:50:ec:
         d0:71:f9:e6:e1:95:27:a8:56:be:0c:bf:f8:73:b1:5e:90:1a:
         84:d0:34:21:42:f1:f3:6c:4d:87:14:18:28:3c:c4:8e:56:d6:
         b4:ef:88:e9:61:35:60:87:3f:9f:e6:5e:c3:8a:d8:cf:7c:12:
         b6:22:47:c4:2f:94:8b:61:be:99:6a:8b:79:d1:4b:94:9d:34:
         6f:8a:74:c9:06:4c:9b:e4:24:e3:2e:d1:45:9a:54:e6:de:4f:
         06:d4:53:1e:c7:75:cb:54:26:2d:da:29:e6:87:64:80:00:1a:
         a7:58:4c:c8:e2:de:21:48:2d:e8:9c:b8:85:91:3b:7d:18:3a:
         6a:a1:34:cc:1c:b3:3d:8d:8d:62:7d:2d:f1:e8:3d:0c:05:24:
         9e:f9:53:40:15:01:02:f6:40:5c:08:23:96:d6:aa:e1:e0:bc:
         3a:33:9f:b2:f6:a4:6d:40:84:22:cd:8a:7a:27:d7:38:61:c2:
         26:dc:66:5e:86:ba:a9:a9:b3:82:c6:e0:82:2d:31:0f:e5:9c:
         e9:5d:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:43 2025 by rpki-client