Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9316efd-820f-34d2-9407-7dd25cb0bc8b.roa
File:                     e9316efd-820f-34d2-9407-7dd25cb0bc8b.roa (raw, json)
Hash identifier:          V8qRNooFH3BQ9R5QjG3UloUHVoE2QvEPQc6RqIq+in8=
Subject key identifier:   CC:CA:34:5D:2B:1D:7A:9D:B0:68:B4:B6:A7:44:A9:EF:40:12:41:72
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B5B7B772ED450A3B9F0B890E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9316efd-820f-34d2-9407-7dd25cb0bc8b.roa
Signing time:             Mon 29 Sep 2025 16:55:02 +0000
ROA not before:           Mon 29 Sep 2025 16:55:02 +0000
ROA not after:            Sun 28 Dec 2025 17:55:02 +0000
asID:                     0
IP address blocks:        72.238.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:7b:77:2e:d4:50:a3:b9:f0:b8:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 29 16:55:02 2025 GMT
            Not After : Dec 28 17:55:02 2025 GMT
        Subject: CN=739c6c49-42f4-4b6a-bbb6-a94cc5a3fe06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ac:2e:c9:fd:60:b3:1d:b2:33:fb:db:7b:7e:
                    ec:ae:09:e5:3f:ff:ed:c6:82:2d:bb:0d:82:37:e0:
                    f9:8f:56:ac:d2:ed:fd:78:92:3e:61:f6:95:53:b8:
                    0c:db:f6:df:2d:5d:03:9d:38:7d:6c:59:58:bd:22:
                    ed:28:67:82:29:e2:60:e3:e3:00:b9:01:65:cd:97:
                    48:21:47:a9:56:68:1f:4f:95:49:5b:3b:34:5b:e8:
                    af:54:ff:2b:0c:0c:02:a6:87:55:d5:52:a1:9d:25:
                    0d:85:d7:c6:84:88:ac:d3:b8:f1:60:51:e6:a7:7c:
                    6b:15:bd:f6:6d:f1:ec:b5:97:32:8a:2e:ea:fc:02:
                    12:11:69:46:06:d6:7a:f9:40:c8:ff:da:77:40:eb:
                    df:28:97:6e:96:1d:2d:22:a8:a0:57:12:9e:f7:c9:
                    43:39:39:7b:5c:0e:9c:0d:56:4e:c7:9c:15:1b:b5:
                    35:56:61:04:1f:d4:b1:47:f7:b4:99:9f:9c:0b:ea:
                    b6:88:fa:19:90:3e:25:0c:52:fd:55:0b:b8:44:c0:
                    cf:28:a0:39:50:4c:b3:67:b5:f5:43:15:bc:8c:69:
                    5f:14:9d:9a:fe:6b:db:59:80:bd:f2:de:57:64:cd:
                    eb:f1:0b:f7:12:14:2b:5a:60:10:60:99:b8:e4:62:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CA:34:5D:2B:1D:7A:9D:B0:68:B4:B6:A7:44:A9:EF:40:12:41:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9316efd-820f-34d2-9407-7dd25cb0bc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.238.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:fb:ee:2a:d6:1b:bd:cd:76:d3:e2:bc:b5:cc:f6:cf:2b:
         46:97:7a:9f:ed:20:b6:30:a3:ce:84:4a:98:d9:35:e7:13:aa:
         2f:65:6d:8a:8c:3c:fb:fc:d1:a7:d9:f1:9e:20:13:7c:ee:06:
         22:69:a8:95:9a:02:e9:a9:d7:7e:a8:58:75:55:f5:66:c3:ed:
         8d:95:f0:95:7a:de:3a:51:77:09:71:3b:16:2a:ce:81:4b:09:
         33:8e:99:f2:92:ce:c2:12:1b:f9:c0:48:16:28:49:5a:4a:1e:
         62:d8:ca:92:ec:66:42:5f:b9:4c:a1:73:ee:2e:08:43:ee:6b:
         a3:38:a0:b8:9c:46:9c:fd:55:b5:02:62:64:c6:bb:9f:eb:85:
         23:ce:69:29:dc:4f:9d:ef:02:e0:f1:34:b8:8a:28:d4:9c:49:
         3e:6d:2b:ff:45:8b:85:fb:6a:f8:1d:ac:94:ff:41:f3:b4:7c:
         9c:7a:45:c2:c5:8d:57:85:81:bd:f0:39:f5:60:1c:f5:d0:ca:
         ac:cb:b6:57:7e:52:a6:b8:9e:b3:58:84:a6:25:ae:a6:49:28:
         d1:50:2f:8e:7a:9d:e7:71:68:ae:c2:ce:ce:44:4e:ed:8d:68:
         37:76:2d:94:96:db:da:ba:f4:cd:40:1c:34:20:85:96:99:6f:
         7d:62:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:41 2025 by rpki-client