Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/8cd88115-ad3c-3f60-a96e-05e1840d82be.roa
File:                     8cd88115-ad3c-3f60-a96e-05e1840d82be.roa (raw, json)
Hash identifier:          hTFrY9S6J0WPiWNiNcTGBWMtfaNBjLNwR0r6sq6UJ+I=
Subject key identifier:   F8:F8:CF:9B:64:71:E0:99:18:03:A2:A1:54:AC:AF:97:7A:1C:A6:30
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285849DF5A6E03C917C589EEFD7B80
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/8cd88115-ad3c-3f60-a96e-05e1840d82be.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     33436
IP address blocks:        172.82.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:6e:03:c9:17:c5:89:ee:fd:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=8c4c976b-def6-49c9-93a6-760545568a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:6c:75:5f:8c:8d:7d:dc:6c:19:57:c7:f7:
                    80:95:ec:70:cd:cc:4a:fc:d8:7d:90:a5:5a:4d:67:
                    92:f8:f0:47:02:c0:24:61:79:06:7c:9c:b9:64:4a:
                    bf:99:78:b3:68:c6:28:e3:c8:b0:59:17:bc:7d:7f:
                    dc:f0:4a:d6:4b:d5:f4:13:9b:9e:ab:02:07:61:e0:
                    a9:5f:7b:aa:e1:05:1b:e9:e5:2b:da:33:3a:6c:d8:
                    a7:ff:1c:3f:c4:f0:ea:7f:4e:53:c2:91:6e:7e:1c:
                    48:62:44:7d:be:93:e0:13:0f:c0:ed:f6:2b:16:13:
                    6c:72:16:fb:c1:e1:b9:00:79:7b:c7:4c:2b:1c:88:
                    c8:db:4b:57:94:03:e4:09:3e:20:eb:47:cd:e5:39:
                    ad:7b:db:ea:b7:2a:14:4b:76:08:af:d4:74:d6:64:
                    fb:a6:f1:e0:25:44:0a:c5:ac:f3:f5:e6:ad:ce:c9:
                    79:65:f8:b0:0b:9e:32:af:64:57:63:ef:cb:e7:6c:
                    27:25:5e:68:7e:23:78:ac:dc:10:33:a8:12:fe:22:
                    27:64:f3:07:0e:bf:ac:70:8e:a2:2e:6b:2f:4f:cd:
                    a0:dd:bf:ef:c5:96:22:62:26:ee:7b:83:cc:35:e5:
                    c8:10:03:22:9c:5c:d7:7e:5c:21:a3:54:8a:98:f6:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F8:CF:9B:64:71:E0:99:18:03:A2:A1:54:AC:AF:97:7A:1C:A6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/8cd88115-ad3c-3f60-a96e-05e1840d82be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:93:a4:b1:74:54:69:9f:bc:f7:2f:20:ca:ee:da:8c:50:
         3d:ca:01:b3:2a:0b:a2:f0:43:2e:cc:40:93:fa:b4:69:49:69:
         65:8a:ac:73:f0:9c:fb:f1:2d:84:0b:8e:0e:52:f8:68:99:0f:
         d2:88:42:67:69:3d:56:a9:72:f6:41:21:50:0c:31:bb:9b:01:
         cd:ce:ca:ad:d7:aa:63:5a:0d:3f:ff:02:13:b6:7b:dc:a7:b8:
         fd:11:b9:7a:b0:8d:ed:cb:5d:cd:78:c6:f5:74:5c:33:12:ba:
         fe:3f:ed:bd:01:14:d6:f5:0a:b4:18:fc:b5:93:29:ba:29:9f:
         b6:b4:7a:4d:7a:c6:4d:44:7e:cd:cd:7a:6b:0d:ba:32:6f:17:
         58:92:7a:95:c5:79:56:23:5f:5a:f0:b9:44:88:af:b4:88:08:
         0c:07:82:65:fd:f3:f9:72:02:b6:fd:c5:cc:e0:04:66:80:a3:
         ec:67:01:69:43:08:e1:9a:20:ae:f9:76:78:e9:71:ed:6b:4f:
         74:5e:85:b2:03:7e:a7:9a:2c:7b:fc:88:62:0c:50:51:ff:73:
         4b:30:df:8d:5a:82:47:66:44:a7:2b:dd:91:65:d0:45:de:f0:
         5e:ce:97:dc:90:5e:27:10:72:20:36:99:34:90:77:db:42:0e:
         5b:2c:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:27 2025 by rpki-client