Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa
File:                     9bee539c-0054-392c-9ac9-97ce6a432743.roa (raw, json)
Hash identifier:          z4I5SazXbBteQRzEY5sC6IQh79ynzviBBhFSr3eecEs=
Subject key identifier:   9B:DF:11:E4:4D:7C:5D:45:A8:67:A3:E5:AA:00:D9:41:0A:7E:E3:1C
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A74B5DF36B4D82B83C82F2640
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     198949
IP address blocks:        72.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:df:36:b4:d8:2b:83:c8:2f:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=2835e6f6-7c39-4905-a8bf-5fe27da40e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:0e:9c:20:a5:b1:88:db:35:10:af:7b:f1:
                    78:e2:33:d6:9c:61:2e:e5:54:af:06:16:86:01:93:
                    4b:82:f9:7e:67:60:4c:c9:65:ae:70:67:c5:79:4b:
                    01:15:3d:69:ed:a7:b3:5b:d8:98:59:0b:c2:24:d1:
                    1f:d0:2b:1d:2a:3f:cc:cc:87:db:86:0c:77:b7:93:
                    15:76:c8:20:ee:1f:a5:67:0d:49:c1:a1:da:4c:a0:
                    e4:27:9e:2e:99:4b:19:ef:8f:a6:93:62:f9:8c:e8:
                    6d:04:fc:16:a6:cc:60:84:22:9f:8a:43:55:ab:5b:
                    22:e2:18:73:4b:a2:41:3b:cf:9e:28:d0:57:a6:2f:
                    a7:fa:0e:db:bb:8e:75:92:b1:40:0f:b9:ac:60:bf:
                    fb:f3:f9:97:73:86:38:92:60:25:a9:af:99:ec:f6:
                    c0:b1:d7:1b:3a:e2:6c:4a:cd:b7:a9:fe:c5:28:30:
                    e7:63:03:29:e6:2f:ed:91:e7:e4:6f:48:d0:e5:91:
                    03:14:53:a5:73:82:dc:ea:39:70:84:4d:d2:89:da:
                    e5:37:12:28:1e:b4:d5:c7:83:8a:29:2e:fe:a8:89:
                    f6:24:19:93:7c:84:90:48:73:52:b1:8d:1f:a4:50:
                    22:df:3f:35:d1:d3:2b:b4:b8:fd:d6:52:de:88:1c:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:11:E4:4D:7C:5D:45:A8:67:A3:E5:AA:00:D9:41:0A:7E:E3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:95:0c:d5:51:eb:54:81:d5:c3:e4:46:f7:b3:19:31:bf:3c:
         fa:c2:7f:c7:98:71:cf:28:7e:25:2d:50:42:ff:b6:56:a2:df:
         11:d3:32:c6:1a:5c:11:15:f7:f0:5c:f4:54:44:c5:d9:74:f9:
         f3:1a:f6:71:9c:af:df:a4:2a:fb:5e:34:6a:7e:c6:6a:2f:91:
         3d:e9:68:1c:e3:52:29:b7:0b:5b:06:7a:b2:86:34:51:19:18:
         88:b1:2a:b6:c5:cf:ed:7a:e9:69:c1:02:5d:82:af:28:60:98:
         0c:f4:47:51:fa:c7:65:01:86:c2:d8:e1:86:97:10:49:72:ea:
         e5:87:1f:c2:04:2e:2e:ea:71:43:d3:aa:cd:fc:0e:42:41:28:
         8d:6b:a2:22:f0:41:d4:b3:a8:64:be:f0:46:45:9e:7c:f0:68:
         98:e6:d7:eb:19:4e:85:55:1d:ea:16:ee:30:49:93:43:24:cf:
         4c:a0:01:12:ed:6d:22:d9:4b:ad:96:94:b4:22:1b:3a:1b:c3:
         59:dd:88:d4:11:74:63:10:c3:f9:8e:68:ae:a5:0f:99:82:e4:
         0d:d7:05:ba:fc:72:d8:42:8b:ab:71:48:20:dc:45:ed:75:0e:
         bb:66:ca:82:ab:c9:a4:a7:e9:cb:c3:39:e2:b0:3f:57:89:8c:
         9c:75:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 15:37:14 2025 by rpki-client