Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/0fc197b1-97ba-3adc-8274-afdfc3baf329.roa
File:                     0fc197b1-97ba-3adc-8274-afdfc3baf329.roa (raw, json)
Hash identifier:          RrRuKqVsohNp3G1/wUboawcUR2sRpUpwaffJDHchRsE=
Subject key identifier:   2B:03:7A:39:67:A6:3B:73:59:51:1C:70:EE:C3:30:43:89:AD:F5:08
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849FB859C570B60E43FDA67EE00
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/0fc197b1-97ba-3adc-8274-afdfc3baf329.roa
Signing time:             Mon 26 May 2025 15:10:56 +0000
ROA not before:           Mon 26 May 2025 15:10:56 +0000
ROA not after:            Sun 24 Aug 2025 15:10:56 +0000
asID:                     23316
IP address blocks:        72.37.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:85:9c:57:0b:60:e4:3f:da:67:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 26 15:10:56 2025 GMT
            Not After : Aug 24 15:10:56 2025 GMT
        Subject: CN=4d0c34a3-699d-43b9-9339-33d5011e4aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:3d:aa:ee:b4:3c:a5:30:8e:a7:df:ae:a4:
                    17:7b:dc:ea:04:49:90:95:6d:e0:a5:af:a5:7e:15:
                    55:e7:e2:ee:02:e9:24:2e:c9:20:cb:74:53:e2:e1:
                    ee:e7:af:0b:52:1d:8b:95:41:6c:29:d8:40:52:1f:
                    a1:c9:e9:7b:5b:6d:91:e1:72:82:9b:0b:d7:e1:4f:
                    5d:56:32:20:cb:1d:06:d4:a5:ed:6a:37:82:14:30:
                    7b:d2:15:5d:2c:c2:35:54:9c:2b:82:2a:5f:1a:cd:
                    17:f2:ec:00:ea:03:54:59:92:c2:16:7c:93:d6:91:
                    5a:e5:78:ef:71:a2:ba:d2:78:10:42:b5:a5:cc:08:
                    ee:e5:5e:fd:f6:fc:fd:a5:d1:72:28:a5:76:63:4f:
                    16:b7:6b:53:f8:ed:3a:e0:06:2c:f4:c7:2c:a4:2b:
                    eb:1b:e6:55:c8:1a:2b:e5:bb:66:ba:ac:39:13:0a:
                    61:49:4a:35:61:83:e9:2a:ed:e7:5d:2d:83:f1:12:
                    82:1f:54:12:09:df:4e:b0:3d:ce:80:10:70:c4:bd:
                    fb:68:f9:ec:9f:b2:dc:53:07:01:7e:19:e8:ea:7c:
                    44:21:0e:36:24:9d:97:44:64:45:19:ef:66:8d:ea:
                    ce:39:5a:ef:1a:87:ad:db:93:ae:1b:d8:11:a7:ba:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:7A:39:67:A6:3B:73:59:51:1C:70:EE:C3:30:43:89:AD:F5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/0fc197b1-97ba-3adc-8274-afdfc3baf329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:33:2e:b0:f4:68:e4:4d:a8:1d:e4:96:18:5b:27:95:95:
         45:d2:c8:ba:2d:b6:4c:91:a4:e2:ac:32:10:ad:07:9a:79:7e:
         2b:83:d0:a5:bf:d5:f6:b0:05:97:c2:3f:aa:0c:ca:c2:00:6b:
         fd:a0:69:a7:58:a4:49:4c:ba:0f:e5:9f:d5:c6:ad:48:53:09:
         c9:a3:fd:d3:91:26:5f:b2:dc:35:d9:41:77:d0:d9:1e:e3:76:
         4b:7c:77:a9:a9:f2:04:f7:0f:b1:60:5a:3a:4e:92:53:e0:c5:
         37:fa:00:c0:d6:08:51:0d:a1:60:5d:b0:f0:4c:1b:8e:78:8a:
         c5:05:dc:ac:a4:63:08:8c:e5:67:0e:10:72:fd:74:dd:af:6a:
         f2:2f:b3:59:25:c5:d6:58:41:38:14:8c:0a:9a:09:21:3a:a9:
         ed:59:c5:55:de:c7:af:b6:ab:ae:b7:41:fa:65:79:df:b1:44:
         e0:fd:40:4f:3f:2b:17:58:16:d5:d2:ef:c7:39:b8:a8:16:5e:
         f3:6f:70:c4:7f:ff:3c:36:bd:9b:e6:3a:75:3c:3f:6f:98:7a:
         05:26:92:64:25:bf:4d:bf:f9:14:f7:df:9d:72:aa:51:9e:41:
         1b:1d:5b:ca:f2:96:e8:46:5e:27:5b:ae:3b:2a:89:a3:53:0d:
         3f:8c:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:25 2025 by rpki-client