Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa
File:                     d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa (raw, json)
Hash identifier:          S73nFs1npKsED2S3mgsY8ofWjv7LggVa1RqS2PwcHc4=
Subject key identifier:   01:8D:5D:2A:0E:80:BB:69:B3:FF:7F:BA:D5:86:09:50:CC:FC:ED:20
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AD71F7C5BD21F693BED984B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa
Signing time:             Wed 13 Aug 2025 07:03:00 +0000
ROA not before:           Wed 13 Aug 2025 07:03:00 +0000
ROA not after:            Tue 11 Nov 2025 08:03:00 +0000
asID:                     2914
IP address blocks:        72.245.192.0/21 maxlen: 24
                          72.245.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:1f:7c:5b:d2:1f:69:3b:ed:98:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 13 07:03:00 2025 GMT
            Not After : Nov 11 08:03:00 2025 GMT
        Subject: CN=bac5da21-d6b7-4c0b-a265-bcd1858d95f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:a2:e7:71:7b:ea:44:34:94:fe:b2:99:5d:
                    f3:84:d0:20:c0:5b:f5:81:64:c0:60:57:b0:67:1d:
                    05:48:52:16:85:7e:a0:1e:4e:6d:c8:21:84:75:63:
                    af:46:ca:40:d8:b8:1c:e3:0b:d7:4e:69:1b:18:81:
                    2a:ce:58:8e:89:98:6f:91:a1:06:c6:5f:85:04:0b:
                    e6:d7:87:17:23:86:9f:30:ac:9c:b0:6a:3a:03:cf:
                    39:58:8e:c1:b0:43:31:1d:ec:24:81:de:f1:8e:d5:
                    9e:19:00:72:44:e0:88:8a:01:30:7c:bf:92:7b:18:
                    39:01:36:7a:c5:35:c1:80:58:41:f3:2f:75:6c:a6:
                    43:41:d2:4e:b4:24:93:2a:00:02:49:87:c0:de:b5:
                    64:d7:f6:99:7f:82:dd:42:7f:24:8e:d3:a4:b2:fc:
                    b9:3a:a4:1f:51:60:25:9f:73:1b:59:53:79:ba:0f:
                    2c:de:fb:ff:2d:e2:8c:f1:d3:6e:10:ad:29:be:6b:
                    5e:6c:05:f4:72:1b:0a:2c:1b:bd:02:04:fd:77:c2:
                    e7:72:6f:ca:8c:9a:49:63:c8:5d:f4:f8:9a:d2:51:
                    b9:eb:ec:80:93:62:62:95:da:72:31:41:eb:3a:a3:
                    16:67:2a:d7:8c:69:c5:82:64:b8:c8:b0:dc:71:0c:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:5D:2A:0E:80:BB:69:B3:FF:7F:BA:D5:86:09:50:CC:FC:ED:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.245.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:c4:bf:f2:a9:f6:06:47:80:b7:28:9e:79:29:b1:fc:a6:
         e7:39:fd:d2:61:eb:44:90:46:db:76:1e:bc:ce:49:46:9e:29:
         69:d0:55:3f:8a:5c:1b:84:9c:19:24:d1:23:d2:f0:10:e7:0f:
         e4:ae:2c:6f:66:0a:75:af:06:24:58:8c:81:de:6c:e8:39:0b:
         8c:83:3a:c4:d2:a7:17:6f:2a:b5:b9:e1:cb:02:b8:85:d9:df:
         2b:29:c3:f7:25:af:15:08:7d:5c:e4:26:40:d2:37:32:ca:b0:
         b7:f1:95:26:d6:b8:91:8c:44:5e:9e:7f:4b:db:ff:c0:b2:95:
         aa:7c:db:cb:d3:9e:d3:ba:d8:43:8e:74:16:72:71:f9:d6:fc:
         1c:f1:b6:fc:fc:06:c1:6b:63:72:d5:3b:39:e0:5f:16:58:8c:
         64:3b:2f:4d:b2:3b:7f:4f:28:d9:75:64:71:a0:ec:82:79:ee:
         1e:6f:80:11:f0:4b:19:00:5e:aa:e8:b9:d9:d2:ad:b8:94:e4:
         c0:53:db:67:c3:68:73:d1:4c:b2:69:2d:21:49:fd:d5:5f:29:
         fe:46:47:1f:13:84:ba:55:3a:ce:50:35:ec:ad:d4:83:6b:9b:
         c9:c2:cf:69:0f:b5:65:6a:57:e7:ae:30:11:26:1a:a9:14:59:
         99:ad:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:35 2025 by rpki-client