Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
File:                     15de4dc8-a657-3baf-8d71-7563142b8734.roa (raw, json)
Hash identifier:          FTakayvwT+tHC2Nd8F9pawMUs/VtbhL2/pmWEXgnQmk=
Subject key identifier:   E5:D5:D4:46:C0:E2:AF:B5:22:FD:21:EF:25:9E:DB:6E:B1:49:05:70
Certificate issuer:       /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
Certificate serial:       010D0C9F43285848E2D116A329C2C7003C4F4560
Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11708
IP address blocks:        72.22.208.0/20 maxlen: 32
                          75.98.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:16:a3:29:c2:c7:00:3c:4f:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e0525225-ac86-41b0-89a1-25ff4db5775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:50:be:d9:01:44:59:e0:3a:9b:37:c6:54:
                    35:ab:a7:74:c3:83:04:cc:dd:75:46:d4:aa:68:52:
                    3d:62:e0:03:a3:04:b0:48:4b:47:2d:eb:cf:8c:f2:
                    c5:19:c9:9a:59:b7:22:a9:09:f8:a2:2f:0b:82:2b:
                    88:17:f7:8a:ad:fe:b2:c0:09:cc:a1:96:f4:6a:92:
                    2f:94:11:94:39:2c:e6:60:49:10:2d:cb:71:03:87:
                    42:92:11:58:9c:11:1b:fb:59:6d:0f:45:c0:41:7a:
                    74:53:91:06:d0:3f:4a:e3:6d:82:4a:98:b6:f7:cc:
                    5d:5f:d5:4a:73:76:9b:1b:56:1e:e6:c8:60:05:55:
                    1a:ab:c8:3a:e4:60:04:f8:bb:d6:28:61:c4:82:3d:
                    52:a4:99:db:e8:f9:4f:e7:8e:e4:5f:82:21:2d:ce:
                    9e:a2:32:7b:d8:8d:41:74:f8:3c:55:1c:ac:3c:02:
                    da:57:69:b0:e1:04:60:0d:ee:2b:2d:f1:18:91:26:
                    af:0b:46:38:a7:48:67:1c:e2:78:58:26:3d:ac:80:
                    f1:7a:6f:ce:26:c0:06:d8:54:33:63:3f:72:85:c1:
                    00:15:c8:ec:c1:37:23:cc:17:13:d7:20:b2:0f:cc:
                    ac:b9:d4:3a:72:81:af:11:84:06:c9:cd:56:a9:af:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D5:D4:46:C0:E2:AF:B5:22:FD:21:EF:25:9E:DB:6E:B1:49:05:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl

            X509v3 Authority Key Identifier:
                keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.208.0/20
                  75.98.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:a9:61:35:ab:82:65:7d:6b:16:aa:27:29:f6:a9:9f:ef:
         32:60:53:32:86:a3:2c:28:4a:29:8c:8d:d6:84:f5:37:79:ec:
         21:bc:b2:05:77:70:61:5e:ec:7a:2b:99:d0:a7:8d:a4:8d:82:
         26:b8:50:c8:68:b8:57:b0:25:cd:2c:83:09:c1:43:a0:a3:5c:
         50:cf:95:5d:8f:a6:32:ae:03:0f:d1:e9:53:92:9e:20:36:40:
         1b:18:52:2c:7a:c4:b3:14:70:59:95:ed:5f:bd:10:c6:d0:cf:
         26:a3:50:9d:57:fd:95:cb:30:28:31:ce:bd:79:cd:c8:97:23:
         72:7c:45:65:37:ae:5c:0c:9b:3b:a7:a1:30:d8:b5:55:90:a5:
         df:2c:8c:f1:99:87:3d:d2:c4:ff:96:48:dc:35:db:15:53:28:
         18:78:c5:a1:23:3c:51:62:78:9c:62:cc:41:4a:a1:d6:e5:2b:
         a5:a2:c0:b5:8d:aa:6d:83:4d:f1:14:14:e7:9b:23:9c:0f:ba:
         1d:b3:17:35:d4:58:c0:26:00:4e:fa:98:52:d7:6b:13:74:fc:
         ce:da:04:a6:f2:48:ed:d3:bd:68:3b:97:be:6d:85:58:f7:d0:
         e8:f7:aa:79:80:df:7e:59:36:04:6b:2e:a2:ba:68:61:8a:06:
         44:4e:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:18 2025 by rpki-client