Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa
File:                     11d14097-e30f-38c3-8223-9ffc2a986371.roa (raw, json)
Hash identifier:          gf84TGoq04EAQMZV42xkP1OwZfdtl3rPxBCUh88KFCQ=
Subject key identifier:   56:BF:04:E6:DE:9E:D6:28:E2:61:22:C9:23:E2:7E:0D:3B:1A:90:4C
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584A1895479E3B6770790613BC00
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     33436
IP address blocks:        172.82.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:47:9e:3b:67:70:79:06:13:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=8c486880-ec06-4100-bdb6-360c6a81be09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:5f:ce:70:b7:a3:86:aa:d8:d5:e4:be:62:
                    cc:1a:5a:16:a4:21:bd:a6:dc:dc:a4:68:4f:82:a2:
                    ea:9f:da:9a:4e:bd:b4:55:73:d7:fc:a0:a6:44:c0:
                    6b:63:56:db:e6:1a:df:c6:71:cf:be:8d:f5:18:04:
                    b8:96:6f:01:03:6e:28:c2:5e:d7:e2:9a:10:d6:a0:
                    f8:e3:6c:b1:9d:96:51:19:89:2e:40:f9:27:df:4e:
                    20:a2:ec:c7:4b:56:d5:85:e4:b6:8f:9c:80:12:57:
                    bd:84:56:03:d0:b7:4b:a8:f2:58:d9:6e:95:b8:ed:
                    ad:78:8b:33:b4:d6:4d:a8:bd:22:ec:65:e0:3a:b4:
                    56:32:06:f9:59:09:49:1a:93:28:1e:08:a1:e3:00:
                    f3:b2:1e:c9:3d:65:a2:e4:9b:84:31:54:28:cc:d7:
                    04:a8:a5:26:8a:32:ac:8c:51:96:ea:c5:54:5e:4b:
                    9c:6b:8e:75:e3:2d:b6:b9:b4:0e:5f:07:78:f4:6d:
                    b1:ec:2d:e6:2d:91:a2:8b:ec:58:f5:1b:f1:9f:64:
                    7d:48:d7:54:4d:f9:ee:46:40:81:58:35:db:5e:f6:
                    70:0b:cb:e3:f7:83:09:32:dd:a6:20:b7:93:04:bf:
                    8d:4a:42:8c:fb:0e:47:e5:80:ae:ce:2e:12:9d:b0:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:04:E6:DE:9E:D6:28:E2:61:22:C9:23:E2:7E:0D:3B:1A:90:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:57:28:52:ec:93:cc:a7:11:df:09:55:94:f8:e8:ec:11:
         24:bd:6c:d9:37:df:19:59:02:ac:43:67:d3:b5:57:eb:a1:c2:
         ad:3b:d2:e4:2f:06:0b:7c:3c:07:04:ca:96:4c:a1:99:05:1e:
         8c:a9:0b:3f:fe:ea:42:f5:7c:1c:b6:5b:a8:20:bf:a0:54:cc:
         2f:a9:54:d4:54:d6:d8:9a:17:75:d8:0e:6f:83:f1:a8:b7:9a:
         a7:d2:21:88:c9:61:8d:11:3b:35:a8:d0:e5:5f:ac:31:9b:f4:
         93:0b:ab:9d:79:ea:f4:82:70:6b:af:fd:be:a9:f9:ad:a6:2c:
         8c:17:ad:3c:e7:e5:b8:b1:b7:e9:64:78:5c:c2:30:4d:45:75:
         d4:f1:13:86:08:3a:08:84:26:36:f2:f1:63:4c:92:35:85:9d:
         2a:6c:03:ce:aa:2f:84:1f:30:65:54:54:37:22:1f:70:a9:0d:
         d2:24:40:f9:db:51:20:41:f5:47:87:a1:c3:14:c9:22:c6:19:
         2b:7e:28:e6:8b:13:c6:6c:7d:b7:7d:8f:b8:8b:39:4b:7a:0e:
         5f:48:79:1a:c2:e9:95:bf:37:63:ac:20:92:0e:75:01:fd:9c:
         a3:be:bd:b4:92:12:57:54:b6:1b:dd:83:ac:52:00:ec:ab:51:
         76:51:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:34 2025 by rpki-client