Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/69cdb9ea-679a-38de-b15d-652112de840e.roa
File:                     69cdb9ea-679a-38de-b15d-652112de840e.roa (raw, json)
Hash identifier:          h3clJAtcYhxCslvNubQQRWCKzgCgQhlzJzCmILAQm5U=
Subject key identifier:   1B:7C:CA:8C:62:82:C8:73:32:A3:3C:94:04:E3:73:77:DE:EF:DC:C0
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F43285848A9961C52EA5AC657C72CCA80
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/69cdb9ea-679a-38de-b15d-652112de840e.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     812
IP address blocks:        72.143.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:1c:52:ea:5a:c6:57:c7:2c:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=cfa6bc7a-40d4-4b9d-8987-3c11fcff0b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:0d:ae:b0:16:54:09:ea:87:43:c8:4c:e5:
                    5a:57:52:19:cd:2a:08:dc:43:67:fd:7b:72:bc:c4:
                    e0:d4:16:76:e6:95:f5:9c:b8:3b:82:c9:f5:c9:2f:
                    c6:a3:c6:0a:2a:1f:58:6c:15:d6:30:d5:b6:53:b6:
                    f9:47:c9:c7:80:60:18:4a:35:02:ae:d1:af:ec:c5:
                    44:e7:f1:b9:3b:22:56:17:db:5a:76:37:69:02:fd:
                    e1:34:3b:ea:e9:78:1e:03:48:3f:ef:3a:a8:b6:c1:
                    7d:21:62:ff:18:0f:0f:8a:3d:95:7a:80:69:b2:53:
                    35:9a:fc:4c:1a:2d:fd:8a:6d:72:66:78:2e:f0:b7:
                    4b:51:4d:52:71:22:34:a1:9e:e2:f0:09:ae:5d:b4:
                    46:5f:fa:3d:e4:52:ad:e5:48:de:e4:7c:3f:bf:9d:
                    29:77:fe:ef:56:15:c6:15:bd:7c:fd:3e:a8:ad:f8:
                    b2:b3:0c:da:ec:3a:17:8f:c7:4e:ff:b8:ca:cb:c9:
                    b6:fb:24:43:bd:22:a0:7a:88:b9:03:eb:fa:ac:84:
                    45:71:4b:34:26:b9:6e:95:ca:fc:8c:fd:ad:e9:3e:
                    30:2b:f2:04:c6:bc:77:28:06:34:e5:ac:02:ef:60:
                    23:7d:74:72:d0:5e:e6:41:61:fe:5b:21:5d:ce:a4:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7C:CA:8C:62:82:C8:73:32:A3:3C:94:04:E3:73:77:DE:EF:DC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/69cdb9ea-679a-38de-b15d-652112de840e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.143.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:22:2a:c2:dd:ca:ff:30:62:c1:90:07:c8:07:10:f5:1e:
         12:e2:07:33:e7:f4:f3:b3:b5:82:51:d5:dc:bc:b9:0e:20:e8:
         8e:a1:56:8e:df:04:92:56:e2:4c:21:f0:0d:1a:b7:ea:a9:de:
         1c:06:2c:c7:41:0b:6b:45:3d:fe:03:05:77:99:f5:17:05:65:
         1f:dd:db:a4:21:4f:d4:a2:13:e1:e6:07:85:ed:86:12:0e:bd:
         06:93:f7:c4:ea:58:8a:8a:93:eb:46:fe:09:35:e9:f4:10:97:
         ac:19:d2:82:81:b4:ec:e6:6c:e2:80:9e:61:1a:0a:ae:2f:fb:
         94:c9:f1:34:be:19:c5:fc:b5:3c:63:ca:5a:81:5c:44:d3:a2:
         af:03:09:f1:13:da:1e:24:a7:29:d1:e1:ab:7b:d5:59:ba:9f:
         0a:e9:b6:be:f9:c8:e4:10:28:7a:45:3e:99:82:68:3b:fc:2b:
         ff:ec:6b:a8:79:7d:da:ac:ed:c2:c7:05:c7:15:48:ba:29:98:
         7a:c6:8f:6d:4a:4b:da:a1:3a:9f:2a:dd:d0:f2:4a:3d:40:3b:
         6e:a3:2d:07:b6:45:79:7b:8d:f2:4b:ce:3b:92:7f:85:cc:34:
         fd:00:d7:16:c0:b4:c5:73:ee:c6:12:22:d6:6a:5d:ab:34:b5:
         b6:be:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:15:53 2025 by rpki-client