Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
File:                     893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa (raw, json)
Hash identifier:          jUAj6DjsgfLAWvVvZY+BwR2nRLXg1et167PZXXI44sY=
Subject key identifier:   35:95:5F:22:25:02:2D:9F:70:36:56:7B:D7:1A:DE:A2:B2:D9:48:B9
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858492D82AFAF29A77EB44B951800
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
Signing time:             Thu 13 Mar 2025 20:08:31 +0000
ROA not before:           Thu 13 Mar 2025 20:08:31 +0000
ROA not after:            Wed 11 Jun 2025 20:08:31 +0000
asID:                     834
IP address blocks:        72.9.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:82:af:af:29:a7:7e:b4:4b:95:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar 13 20:08:31 2025 GMT
            Not After : Jun 11 20:08:31 2025 GMT
        Subject: CN=1b4b4df0-fa86-48d9-8489-02f12111b3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:e7:74:70:9b:44:4c:12:76:3b:38:2c:32:
                    e3:e8:1f:68:94:c3:d2:ef:a8:8b:5f:0d:d5:17:7f:
                    dc:2e:53:7f:92:37:3b:79:c2:4e:c1:36:7f:82:5e:
                    64:30:32:8f:61:36:b2:f2:d5:cc:b5:1d:66:c8:fc:
                    f6:7b:a9:3b:57:ce:41:f6:0f:2e:16:ee:6b:0c:15:
                    e7:34:da:e4:3a:a4:a8:4d:e4:a2:fb:4a:e5:e3:a2:
                    77:d4:14:61:e1:d3:b7:48:0a:b0:73:0f:1e:da:93:
                    a1:b8:54:0f:c3:19:76:b7:1f:b6:7a:46:87:4a:75:
                    10:9f:f9:95:b5:f1:8d:68:5f:96:6f:5a:1d:06:6a:
                    49:1a:ee:75:a4:0a:64:d6:73:c0:d8:ce:0d:1b:b1:
                    a0:1b:2b:f4:be:b6:2a:dc:de:ad:75:a8:02:34:c5:
                    3e:1f:57:24:5b:21:a9:3d:1d:10:24:d7:4a:da:e7:
                    c0:78:d8:f9:6b:93:26:02:4e:f5:70:26:16:a0:3c:
                    86:88:32:0e:0f:77:e7:f5:56:ba:57:d5:7d:8c:af:
                    ad:96:76:30:32:5c:94:7a:0f:75:74:9a:dc:9f:fc:
                    5c:98:9b:db:5b:08:a5:fb:82:70:81:0e:31:74:d0:
                    19:a0:25:a1:f8:e5:f8:36:7c:00:05:67:94:1a:21:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:5F:22:25:02:2D:9F:70:36:56:7B:D7:1A:DE:A2:B2:D9:48:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:29:84:e4:92:aa:8f:46:8c:c0:0c:2e:cd:59:8d:75:22:8b:
         fd:c7:6d:6d:9b:59:8a:8e:0e:f8:0c:8b:54:53:97:56:1c:39:
         53:1c:93:44:c7:1e:40:95:28:95:b9:45:d4:5e:e4:b7:55:a5:
         45:fc:3d:9a:d0:26:d2:91:60:ed:0a:7c:6b:54:cf:d4:9d:f5:
         54:08:2e:eb:5a:b2:f7:8f:6c:38:41:c6:15:c6:20:1e:61:02:
         60:23:aa:5d:d9:e9:eb:c8:dc:b2:18:60:c6:b9:80:8d:0b:57:
         72:c2:7c:2f:42:70:81:8f:1e:9b:31:2e:f2:68:02:dd:3b:4b:
         ea:bd:17:53:e7:e3:96:a5:17:1a:25:c9:4b:9f:28:33:9f:b8:
         20:60:ea:49:92:fa:dd:e2:20:2f:93:ba:cc:c2:56:fc:f0:2d:
         80:9b:6f:85:bc:2d:d7:81:30:23:74:94:6f:2c:57:c2:c2:9e:
         8f:32:b5:a6:34:ff:56:bc:81:3a:20:86:1c:1c:82:5e:3b:f3:
         14:4f:f8:b5:77:23:28:94:c6:9b:36:6b:08:52:c8:6c:96:a2:
         97:a1:ff:a3:f3:a5:42:4b:36:ba:ae:8f:28:b9:24:f3:dd:d7:
         dc:5c:2e:c7:0d:37:6b:4b:5f:c8:01:f2:7c:a5:9e:15:5d:37:
         69:6c:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:02:28 2025 by rpki-client