Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
File:                     fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (raw, json)
Hash identifier:          ZQA+amFxKUDAZHJGpLT/RheGM+EMUfeza9yw0FTkM+0=
Subject key identifier:   D9:F5:ED:F6:AC:EF:EF:25:D0:71:0E:B6:FB:74:04:0A:2C:9A:85:8C
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584A6826034FB2F0862085803700
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     6122
IP address blocks:        165.206.0.0/16 maxlen: 24
                          207.28.0.0/16 maxlen: 24
                          207.165.0.0/16 maxlen: 24
                          209.56.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:03:4f:b2:f0:86:20:85:80:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=f76641fc-4aa3-4aaf-8188-6bc2b3de75c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:3c:57:0f:5a:4e:ca:ae:0b:ca:64:7c:5a:
                    de:44:a4:71:0a:e9:9f:ca:89:b3:59:e3:25:1f:ae:
                    dc:94:ac:be:9f:3b:1e:fb:ae:7f:f5:30:66:89:2e:
                    35:ef:7e:d5:10:f5:ea:0a:62:44:2c:0d:ee:d6:0c:
                    dd:df:c4:82:14:d6:d2:10:7e:ee:db:df:20:4b:8e:
                    28:62:23:ac:e8:c1:77:88:df:fd:56:4c:14:9a:71:
                    9c:69:c7:5a:e9:5f:42:18:98:e6:c4:7a:cc:3a:22:
                    89:18:98:30:3e:e8:e2:00:3e:90:4d:cd:a2:a2:cc:
                    c6:90:89:59:99:23:c9:43:20:d7:dd:8e:e7:52:ad:
                    e0:05:cc:df:22:3f:d4:78:ad:e6:ad:e5:6f:fc:78:
                    71:f9:3e:1e:88:0e:d6:52:ef:d7:e0:b0:b4:fb:1e:
                    d5:88:9a:6a:bb:19:7f:76:f3:a1:2a:77:27:9f:51:
                    7b:9b:82:86:ed:ba:71:5f:8b:3a:05:eb:e0:dd:8e:
                    e0:21:75:54:74:3b:90:55:ee:07:3a:d7:ef:2e:94:
                    40:52:3e:d3:e0:f1:fe:c2:1c:19:b8:c2:ea:51:3f:
                    a3:83:23:cd:9b:c9:72:a6:38:e0:ca:bb:4e:96:aa:
                    df:f8:09:b4:ce:81:7a:d7:8d:57:88:72:c7:8b:ea:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:ED:F6:AC:EF:EF:25:D0:71:0E:B6:FB:74:04:0A:2C:9A:85:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.206.0.0/16
                  207.28.0.0/16
                  207.165.0.0/16
                  209.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ab:fb:2e:1b:a8:10:cf:9e:17:27:65:dd:f5:c7:d5:70:ea:
         cc:87:2e:c2:f5:af:d3:4e:9e:ad:23:83:5e:04:9c:35:c1:df:
         e6:3f:06:91:5b:60:5d:2d:c1:e8:8d:37:44:bd:ee:27:bb:b8:
         1f:72:31:ab:35:1e:ef:89:82:ea:1d:51:f9:d2:65:20:35:d7:
         b6:3d:5f:56:e8:2d:b8:30:4b:61:18:6e:02:d9:f6:f4:4d:0f:
         bd:7c:6f:29:e2:16:91:65:7e:03:bb:4e:77:de:4e:de:17:b9:
         2c:81:49:d5:9e:95:eb:60:25:e5:8d:99:a6:b1:94:0a:35:3b:
         df:61:5c:42:aa:b4:21:be:8a:89:f0:3b:a6:6c:82:fc:7d:55:
         57:18:8e:fe:9a:25:d1:f6:7e:c3:a1:08:c5:10:4c:22:96:30:
         f0:6a:62:42:52:06:d0:35:79:da:7d:e2:b1:61:3e:64:a7:9d:
         71:22:5c:6e:1b:c9:8b:86:49:47:bd:05:a5:e2:8d:cf:0e:93:
         67:c3:b1:30:c7:e5:16:a1:f7:ea:7d:e1:c4:18:6c:05:7b:a3:
         10:86:cd:26:78:fa:40:c1:ff:86:60:ef:47:37:c1:03:07:09:
         cb:44:8e:92:ea:42:1e:eb:92:20:37:02:69:6a:5f:7a:15:ff:
         8e:ea:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:11:15 2025 by rpki-client