Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
File:                     7d4835f7-8713-34b0-b001-5d466717879b.roa (raw, json)
Hash identifier:          EfktssKooyIkmwYOf8Znybrxx7sWZMTFaikgaHiNfj0=
Subject key identifier:   4A:72:38:41:C5:2F:D8:14:7A:F4:5A:F7:41:6F:19:41:CC:38:EC:7D
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285849C904E94A033C2FB0ADB98400
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     54032
IP address blocks:        72.233.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e9:4a:03:3c:2f:b0:ad:b9:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=573d5123-55e9-4844-a6c4-c7b3ae25311d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:8a:ce:6c:97:63:29:cf:3c:a4:1f:eb:5a:
                    ca:60:c1:7f:3b:f1:5d:61:18:90:ad:4f:fe:35:4d:
                    24:53:e8:dd:2b:ef:5a:d1:e4:42:70:88:f3:68:dc:
                    b6:48:a7:40:eb:8a:02:2e:de:96:b9:b8:2c:6d:4a:
                    9e:e6:97:83:f0:52:78:4a:15:12:2f:44:14:1f:41:
                    b4:54:17:23:0c:d5:62:d9:89:08:8d:4f:07:f5:20:
                    b9:11:05:27:0c:b8:38:b3:bb:0c:e7:09:08:81:ff:
                    18:01:68:31:8c:73:6f:20:c0:71:3a:93:f1:65:a5:
                    da:61:e0:3f:b3:17:71:f4:d9:6d:68:87:53:74:17:
                    fb:23:1a:a2:25:0b:84:60:5a:86:de:cf:c9:ac:a6:
                    ae:74:de:a3:28:64:d0:66:f0:9e:36:ed:72:49:a7:
                    1b:fd:49:a0:48:07:b3:5d:19:2e:25:93:bf:92:c2:
                    2b:9e:f6:1e:1b:1d:79:d1:88:5a:ab:08:57:07:b2:
                    c6:a0:f1:f0:6a:37:d4:7b:b8:b0:8a:b1:b1:56:c4:
                    9f:38:4b:5c:04:70:6b:f5:dd:ea:49:9d:bb:a9:67:
                    7c:fe:98:3c:c2:2b:b1:d8:ab:a1:24:00:92:41:00:
                    0f:6b:fc:94:bd:f6:c9:da:16:61:e8:a0:f6:c1:d9:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:72:38:41:C5:2F:D8:14:7A:F4:5A:F7:41:6F:19:41:CC:38:EC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:23:13:a4:f6:ff:66:65:0d:a0:dd:8b:b4:b1:a7:69:7d:70:
         b5:df:6e:ad:20:ae:b9:10:0c:5f:3f:b5:57:5b:86:26:0f:73:
         92:d6:79:77:63:b5:5d:4f:08:fd:79:ee:61:33:cb:12:51:58:
         b1:4c:6c:46:83:23:f5:cd:90:1a:25:1b:83:83:e9:e8:b0:1c:
         7f:ad:a3:4e:39:a5:4b:68:3a:0a:12:fa:dc:73:66:43:8d:50:
         82:19:f2:f8:d6:7f:ab:b5:2d:9f:2f:bf:0a:dc:f5:ff:d1:5e:
         a4:7e:75:d5:67:ce:2f:77:f1:28:7e:f4:08:dc:e0:05:c3:80:
         a0:d7:e0:f2:19:48:38:b7:b6:51:38:15:14:6d:59:e0:81:d2:
         e9:42:83:41:ef:59:d2:f1:a5:95:d7:a8:8c:63:60:71:29:ce:
         ef:fa:4a:cf:35:36:a0:75:62:44:09:c3:f1:20:c1:07:87:76:
         2a:e8:77:b6:7d:8f:db:e5:5a:6a:36:64:21:c2:a6:7f:32:dc:
         73:ac:5e:51:7d:9f:ff:47:3e:a6:2a:fc:1f:65:20:75:a0:00:
         24:3b:fe:5e:6b:e8:82:f1:32:43:f0:5e:94:da:ee:59:e0:6e:
         4a:1e:5f:d0:c8:0e:44:3d:c3:c6:9f:ad:a8:5f:1a:0e:62:d8:
         ff:be:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:48:53 2025 by rpki-client