Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/66d03116-596d-3b68-aceb-7b1bbd45ea37.roa
File:                     66d03116-596d-3b68-aceb-7b1bbd45ea37.roa (raw, json)
Hash identifier:          8cuPmRAlCGAiSTswuO5dXiyRVDuiSxb9UREdfhsygfE=
Subject key identifier:   D5:5E:74:0E:B0:73:8B:9B:CC:98:A1:2C:FD:72:C7:83:04:17:2E:07
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A698B1F17183CE0C1CE1D79C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/66d03116-596d-3b68-aceb-7b1bbd45ea37.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     7922
IP address blocks:        172.111.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1f:17:18:3c:e0:c1:ce:1d:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=ce2d01db-db3b-420c-b75d-99b3934a0545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:a6:1c:ed:15:6b:27:0e:83:bf:24:c5:92:
                    1e:09:d3:e2:14:4f:b9:08:0a:90:ed:a0:93:bc:20:
                    40:7a:aa:e3:c2:84:32:e9:71:8c:61:81:43:63:17:
                    f7:a6:f3:2f:30:1e:90:3c:8f:2c:29:25:96:dc:46:
                    18:eb:3e:e1:34:ed:f5:2e:2d:b7:0f:7b:0d:97:c4:
                    79:a5:73:b3:6d:c0:66:41:61:c8:95:94:ac:1b:63:
                    d2:06:e5:64:a9:da:f4:d9:e3:e5:c5:ab:5e:67:c1:
                    12:df:61:c7:62:0f:20:42:e7:5c:23:13:1e:91:72:
                    c9:49:9d:c0:f0:4e:bc:1c:eb:44:97:73:17:09:8c:
                    67:be:6b:b8:7f:7b:49:eb:60:f0:43:86:7c:32:0c:
                    03:00:db:2e:4c:07:5f:6f:27:84:55:90:d6:a3:ba:
                    9b:75:18:09:40:05:ea:4b:4b:b0:2e:02:59:98:b2:
                    e7:72:92:54:81:41:f3:e5:79:59:6d:77:dd:e4:0b:
                    50:d6:2a:11:37:65:00:59:c2:b4:24:bc:e5:50:73:
                    bb:39:9c:d7:e4:59:29:ec:84:a2:b0:b3:f5:da:a4:
                    5f:f4:e9:98:16:e9:73:98:65:71:de:f8:cf:42:e3:
                    82:4e:c6:f4:c8:41:d0:19:1c:96:b7:25:a9:79:93:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:74:0E:B0:73:8B:9B:CC:98:A1:2C:FD:72:C7:83:04:17:2E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/66d03116-596d-3b68-aceb-7b1bbd45ea37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:d5:e8:80:f3:1d:20:bf:86:a1:97:20:ec:71:d9:0c:8e:
         f4:2e:fb:7a:42:ab:4c:bf:80:c4:9d:9f:58:39:f1:af:c3:d9:
         49:55:02:6f:e3:3f:df:08:14:d8:ae:30:4b:62:e5:b2:75:27:
         95:44:db:61:9d:af:35:9e:5d:30:fa:5e:5d:d4:0a:f2:df:b9:
         0e:90:06:8c:50:07:9b:16:53:03:87:99:3f:96:cd:dd:f5:86:
         f3:5f:5f:20:d5:76:c2:18:07:76:75:c3:ab:93:76:cf:de:fc:
         a9:b5:3d:fa:5d:b8:be:86:b2:dd:f4:8d:6d:0d:3e:80:bf:4c:
         da:15:22:ab:e4:12:a7:88:44:63:fa:9a:19:ab:fd:e1:9f:7b:
         aa:d6:9f:39:79:26:83:bf:55:aa:81:48:57:05:50:08:31:27:
         bb:97:9f:58:9a:62:50:c8:01:ca:3a:ef:65:0a:c6:27:5e:27:
         93:85:30:82:63:ef:29:73:ac:ef:0d:f2:97:f1:2e:3a:55:2c:
         78:bf:e9:f8:46:05:7a:35:1b:ed:2e:94:05:25:ed:41:b0:e7:
         f3:10:bc:3d:90:48:88:9b:9b:ed:77:ea:46:ec:7a:f3:16:7a:
         fc:ec:ec:3a:8a:d9:9e:97:ed:27:97:bb:ad:a0:08:c1:36:c8:
         88:62:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:22:07 2025 by rpki-client