Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa
File:                     1c02e37a-f047-32b4-8323-635ce419cb78.roa (raw, json)
Hash identifier:          mEK/qKNtmWLh/0vcmxZ7qyK3vsvLC5DmnF3bwUXhS9Y=
Subject key identifier:   DA:37:E6:03:A1:2C:EF:BB:CA:1F:CE:F0:64:1B:A3:DB:F2:34:35:32
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584AE7085E64ED71817062085640
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa
Signing time:             Mon 18 Aug 2025 23:49:21 +0000
ROA not before:           Mon 18 Aug 2025 23:49:21 +0000
ROA not after:            Mon 17 Nov 2025 00:49:21 +0000
asID:                     400072
IP address blocks:        72.22.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:08:5e:64:ed:71:81:70:62:08:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Aug 18 23:49:21 2025 GMT
            Not After : Nov 17 00:49:21 2025 GMT
        Subject: CN=9accde76-0bcd-4792-b538-785f7b596a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:ad:7c:89:c5:46:78:f4:4a:98:79:b8:24:
                    05:23:fb:c3:e4:3d:00:6e:df:62:82:d0:65:f5:c4:
                    5b:67:ec:b3:d3:cd:e6:71:9d:0d:a0:0a:2b:50:63:
                    76:c4:32:58:5a:c4:cb:cc:41:6b:b8:64:86:98:2f:
                    14:c6:22:1c:90:38:e9:da:5a:af:1b:ec:25:5d:32:
                    b3:c3:a7:fe:88:9e:ef:02:0e:4e:70:ae:e5:b9:f0:
                    5b:42:4d:96:72:dd:dc:b4:df:ad:db:d0:93:3b:8d:
                    2b:9e:2d:d4:5b:35:33:1f:c5:88:e2:79:b8:e4:bc:
                    de:ce:dc:c2:03:dc:45:3e:7b:05:cd:7e:34:62:c3:
                    fb:fd:ae:a4:68:b0:0f:99:93:c4:33:a6:07:07:c8:
                    41:f7:3c:23:ba:59:e9:65:d2:39:6c:7e:13:ad:83:
                    82:94:03:53:75:07:ca:fc:2c:73:a0:71:62:d1:6f:
                    ec:4f:84:8d:b4:a1:b5:84:89:21:5c:ab:4e:79:23:
                    7b:63:19:be:20:e0:67:c8:69:3b:4c:5b:36:3c:67:
                    91:aa:32:2d:d9:2c:a2:ec:b4:85:36:14:bd:21:40:
                    bf:68:da:ec:c7:3e:11:67:81:90:72:0c:c1:b7:6e:
                    75:0d:f2:3b:af:a8:58:0e:80:08:5a:eb:42:50:2a:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:37:E6:03:A1:2C:EF:BB:CA:1F:CE:F0:64:1B:A3:DB:F2:34:35:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:13:85:fb:0f:34:c4:5d:0e:82:42:4e:00:83:5e:6f:0f:ee:
         5e:19:93:20:92:e4:90:24:d0:0c:8d:37:ab:5c:3b:7d:ae:f8:
         67:ee:ff:a6:7e:23:6f:08:01:78:6d:90:10:16:44:c5:61:e9:
         5c:4b:32:53:fe:72:6f:16:5b:0d:04:42:b6:7b:45:88:48:28:
         58:46:17:2d:fc:07:6a:2c:08:bf:45:54:da:55:de:d0:ae:cc:
         82:cc:4b:a0:57:73:9d:d8:c7:88:b9:56:00:53:22:0a:7e:38:
         1f:11:a9:0c:ad:3d:35:88:e8:ae:26:63:58:3b:47:71:7b:50:
         1b:fe:31:43:0f:26:a8:b2:3b:a5:e3:95:b4:a1:64:4b:6b:1c:
         c9:d9:71:20:5f:21:b2:ce:b0:d7:b3:c5:92:81:53:a6:47:0a:
         f9:ac:56:67:8b:22:cd:74:b5:10:68:e7:dd:8c:ab:6b:5b:77:
         5b:d8:c2:37:36:3f:d5:33:63:a2:b1:1a:44:35:18:e3:92:07:
         00:53:2c:b9:3e:85:96:83:1b:f6:f2:3f:e2:60:64:25:ae:40:
         68:b4:f0:3a:99:3d:25:a2:a8:d4:70:fe:f8:01:a3:a1:12:a6:
         a8:6a:94:b8:e1:02:57:c3:cb:38:a0:c5:38:77:ca:ab:c3:cd:
         8f:be:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:09:19 2025 by rpki-client