Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
File:                     064a5eec-8029-3054-85ec-74c43a35dabf.roa (raw, json)
Hash identifier:          kycWuSodtTw7dPK7DCdppMr5wVb77CL6NVpDRs46Ii4=
Subject key identifier:   FE:E1:AC:E7:D5:F3:EF:67:AB:8F:47:A1:41:85:70:2A:A6:C8:87:A0
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584919417A10E20D5BCAB77E3500
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     20205
IP address blocks:        158.247.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7a:10:e2:0d:5b:ca:b7:7e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=a986e3a9-e2f7-489c-8726-4f384f2335fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:2d:65:ff:47:34:9e:40:cc:16:24:ae:90:
                    24:b2:ca:3f:4d:72:26:96:47:7e:45:1c:1f:e2:96:
                    15:a1:e3:30:88:45:4e:4c:04:99:ad:b8:a5:b7:2d:
                    f6:fe:ac:fd:c3:72:d9:39:db:4b:98:73:a8:d3:fd:
                    b3:22:87:f1:83:5d:55:8e:64:db:86:22:3a:8c:09:
                    87:e8:59:39:da:13:8a:6d:d5:64:7f:3b:e9:4f:85:
                    68:93:d2:f2:11:2b:77:e4:e7:a7:ed:0e:bd:85:4b:
                    b9:f1:2b:0c:d5:52:cd:70:34:64:f0:f6:28:93:ce:
                    69:2c:14:b5:97:43:44:a6:89:24:d4:e5:e5:27:9e:
                    76:e3:86:d4:a5:3c:ef:f5:5f:65:0c:52:11:cb:da:
                    e6:a2:25:21:2a:2d:c8:12:c8:ce:71:6e:35:cd:7d:
                    31:bb:ce:bd:76:4d:87:84:3e:d0:cc:c4:86:04:33:
                    5e:5c:a6:6e:dc:86:1e:06:00:e6:fd:8a:76:c5:7a:
                    4f:fa:24:5a:e8:d9:1f:75:ad:04:31:2f:56:04:c0:
                    29:5e:88:78:63:31:34:35:18:a1:be:f4:30:2f:86:
                    99:7c:e4:87:d9:c4:fe:1f:c4:8a:ae:a0:05:d4:3e:
                    99:b8:b9:a3:df:0e:66:c3:eb:a1:21:0c:c1:3b:ac:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:AC:E7:D5:F3:EF:67:AB:8F:47:A1:41:85:70:2A:A6:C8:87:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d3:01:e5:45:33:da:48:60:43:a2:0d:e4:08:9a:c4:99:91:
         a6:4f:12:8a:da:19:8e:5a:20:72:54:35:db:0e:6c:20:83:01:
         ff:6f:af:6b:a0:80:08:c5:16:fd:bb:db:8b:a4:fd:28:9c:b1:
         f7:61:ea:1c:c6:c8:29:bb:be:e2:94:45:dc:43:77:fc:2a:c2:
         f4:32:c4:b8:af:8d:4c:76:8f:94:78:31:86:69:ef:98:a9:b3:
         2f:b0:ab:22:5d:f2:47:b1:7a:fe:86:94:5f:c7:bc:c7:48:31:
         d6:6e:96:24:a9:d7:c6:42:40:75:fd:d4:fb:fb:2f:0f:b3:d8:
         ca:60:9e:d0:14:01:2b:7c:0f:84:1a:63:aa:76:88:69:85:b2:
         9a:e6:fd:c3:a1:62:f9:23:ad:b8:95:c9:f5:74:a0:85:29:dc:
         28:46:6a:a6:cf:ad:ad:ab:ed:f6:18:87:40:90:a3:37:b6:6b:
         b2:f0:36:f4:5b:a5:4e:05:b6:d9:24:66:61:aa:e7:7f:7f:75:
         9b:ab:cf:b0:43:bf:d9:30:e0:3a:68:17:8b:18:d8:33:27:b3:
         2d:b1:b4:af:22:90:94:ef:1c:28:18:f7:d5:68:9f:94:af:34:
         b2:e5:04:35:03:c6:e6:be:b1:d8:93:8f:7e:6e:7e:71:30:64:
         2b:83:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:05 2025 by rpki-client