Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
File:                     cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa (raw, json)
Hash identifier:          kcZvAJizy/t6RSbWIjFAslBzX/qNcu0HxncWBjjS72c=
Subject key identifier:   45:AB:71:68:35:83:25:14:C4:D8:81:DC:59:4E:DD:A6:10:7B:14:52
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849FB84D4BDA91684BC3C278480
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
Signing time:             Mon 26 May 2025 15:09:22 +0000
ROA not before:           Mon 26 May 2025 15:09:22 +0000
ROA not after:            Sun 24 Aug 2025 15:09:22 +0000
asID:                     23316
IP address blocks:        72.37.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:84:d4:bd:a9:16:84:bc:3c:27:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 26 15:09:22 2025 GMT
            Not After : Aug 24 15:09:22 2025 GMT
        Subject: CN=360751f0-1a9d-4e74-8ada-6d254f3d36c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:b4:8b:d0:d2:18:82:85:ff:b5:8b:1f:d5:
                    9d:2e:49:5e:f3:f1:bb:93:80:39:78:f2:ab:4c:ec:
                    0a:54:a5:b4:d4:bd:b5:0e:dd:57:54:bc:7e:9f:7e:
                    9b:82:b2:7e:5e:6e:6e:b6:3f:4f:2f:14:25:11:bf:
                    13:d9:b1:e7:f5:41:11:f4:4e:38:20:4c:01:90:a5:
                    5e:14:56:e6:08:67:05:b0:ab:f1:f1:a9:c1:3d:e1:
                    68:60:72:46:13:9a:f9:88:84:e3:cb:b7:c9:d4:20:
                    9a:5b:dd:4f:44:24:a3:3f:99:92:72:0b:64:e7:e5:
                    0c:c1:1d:9d:da:fc:07:ad:6e:5b:37:41:83:20:6e:
                    06:d4:9a:cb:8e:02:e8:3b:dd:1a:64:5b:ae:49:92:
                    f7:8a:e9:61:e2:35:66:00:83:8e:4b:f0:ef:f1:99:
                    4e:01:58:97:61:dd:85:f0:c1:29:27:65:19:97:2f:
                    26:48:3f:87:84:1d:b5:70:17:ab:7b:94:b2:59:04:
                    ce:a2:e0:7b:ad:06:49:b9:05:27:88:c2:be:aa:25:
                    99:b8:7e:4d:11:36:0b:36:60:03:6b:23:3b:e7:44:
                    8c:74:d2:8b:70:9f:51:ba:a5:ab:c6:18:ff:92:58:
                    0a:3c:ee:9b:3c:c0:b3:2b:ba:15:92:e3:75:2f:79:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:71:68:35:83:25:14:C4:D8:81:DC:59:4E:DD:A6:10:7B:14:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6a:3b:73:89:ab:d3:0d:ad:2f:02:0f:3a:cc:4c:34:9d:87:
         a7:ea:49:d5:46:f0:7b:64:7c:ed:11:a9:2f:6d:d8:3c:d0:93:
         06:f9:e1:1b:73:81:02:32:11:78:76:c5:75:82:33:13:42:b9:
         9c:d3:27:5e:91:a5:68:35:0d:8c:2c:49:ae:94:12:4f:6d:e2:
         b5:94:bc:b8:ec:bf:f8:b1:3c:52:cb:6d:da:c6:88:f2:7a:c9:
         11:4f:6f:4d:c6:b0:36:6e:a6:af:cb:60:80:6e:08:af:ea:87:
         fa:d9:75:5a:ee:52:48:88:a0:21:16:c6:86:f7:fd:31:91:b2:
         04:b1:ea:a3:c1:d0:2a:25:87:2b:77:69:53:4c:56:08:0a:80:
         34:c8:35:76:01:8b:d8:b1:73:a8:4e:0b:e3:c3:a5:e1:30:03:
         1c:db:ff:ef:5f:75:f6:62:bc:16:3c:ad:00:55:0d:44:ad:97:
         2d:49:56:c3:7c:33:2b:cd:b3:b8:e8:36:11:9e:48:32:98:1d:
         57:1a:74:f9:21:18:6c:14:66:a5:bb:3d:b3:48:4e:8e:1a:dc:
         dd:76:f4:62:9f:e1:85:7c:72:17:64:9a:62:58:c8:5d:f2:fb:
         e8:de:57:d9:70:11:b3:ca:70:60:8c:41:1d:1c:c7:60:5f:e6:
         bd:92:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:33 2025 by rpki-client