Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/72d292cf-5081-3148-8146-3ea47350a35e.roa
File:                     72d292cf-5081-3148-8146-3ea47350a35e.roa (raw, json)
Hash identifier:          zy7oBW8+HNPL+H3g+v2nctpxciqjwYcUCqrJB3G8mfw=
Subject key identifier:   FC:62:7E:39:BC:51:E2:5C:0C:90:80:C8:4B:A6:E4:F9:37:2E:5C:88
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F43285848EF6163DCBF3504BBF5893C80
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/72d292cf-5081-3148-8146-3ea47350a35e.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     40555
IP address blocks:        162.223.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:63:dc:bf:35:04:bb:f5:89:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=dc4cbb7f-bee1-4b8d-9ed7-5c5cfff515c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:a6:f8:f5:4a:65:25:c6:2f:38:c8:47:a1:
                    ae:3d:a8:2f:5d:88:6a:ee:ec:48:f2:07:c0:b2:b5:
                    50:95:ed:b6:95:13:59:8a:3c:e5:74:aa:88:73:60:
                    09:f0:6e:5f:80:0b:7d:06:aa:5d:37:09:77:77:dd:
                    8c:da:f5:09:69:59:a0:b2:74:89:b4:37:30:f4:2b:
                    94:50:d3:25:73:e9:d2:c9:da:5d:e5:11:da:18:64:
                    81:93:92:81:d1:71:73:c5:80:8d:2c:47:2e:27:e4:
                    ef:ec:3c:39:2b:30:4c:70:ca:b3:67:db:5c:30:2f:
                    e3:18:f9:08:5b:e7:e5:6b:f5:73:5c:eb:2a:b9:f3:
                    46:23:46:78:ff:ac:91:07:31:c2:39:ce:56:0e:49:
                    1e:0c:c4:68:bb:29:7a:72:f9:f7:56:85:87:ba:77:
                    1e:d1:1b:5e:81:53:3b:d8:b8:85:4f:e5:75:29:55:
                    17:4d:88:ec:23:fe:16:87:af:bd:8f:b6:65:40:a5:
                    95:9d:ae:ed:48:86:5e:de:4f:9b:39:07:00:08:69:
                    3d:85:f9:fb:09:59:3d:8f:87:34:63:a2:90:9b:eb:
                    9b:8d:a3:c1:79:f3:73:7c:a8:c7:d7:dd:02:80:55:
                    63:7f:21:d4:54:37:cb:02:67:c3:1f:5f:c1:f3:7d:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:7E:39:BC:51:E2:5C:0C:90:80:C8:4B:A6:E4:F9:37:2E:5C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/72d292cf-5081-3148-8146-3ea47350a35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:5b:aa:b1:4a:1d:23:09:dc:be:b4:11:2d:90:68:77:3c:
         a0:1e:e8:34:31:5f:21:f0:41:86:eb:58:f8:a3:9a:1e:b2:dc:
         76:9f:f2:16:30:d1:fc:ff:73:58:fe:eb:37:fe:98:e3:8f:11:
         f5:a9:5a:09:e7:63:07:1a:3a:0f:8f:06:75:ab:0b:70:26:79:
         77:1e:8a:8a:e7:22:74:5c:69:8e:93:7a:9b:fe:26:32:e3:54:
         80:10:c9:1a:6b:81:d9:70:f0:58:15:36:39:ce:24:88:64:ba:
         ad:d6:a3:5d:c7:5b:73:3b:36:2f:b3:c2:d4:e0:df:35:36:ff:
         53:e8:76:cc:2a:51:7c:01:c7:d1:89:27:3a:ec:81:68:25:a6:
         52:5a:82:b9:af:d5:fd:68:66:f7:d5:91:b7:33:45:51:9e:1b:
         72:d8:5c:c4:48:a7:79:d3:3b:e0:8c:4c:2f:8e:07:42:5d:a0:
         c5:53:28:f3:54:03:8d:35:8f:bb:36:73:af:77:55:46:0d:0c:
         fe:e4:fa:ed:09:4f:2c:09:1b:76:b5:5c:7a:8e:c6:e5:67:df:
         63:4f:93:7d:28:a1:cf:67:a2:29:54:52:4e:7c:cf:5a:55:3e:
         d1:09:f6:03:87:84:e1:6e:24:22:24:86:e7:54:58:f5:b6:e7:
         ea:76:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:11 2025 by rpki-client