Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/7f2586fe-0698-3218-b413-8495abdd981a.roa
File:                     7f2586fe-0698-3218-b413-8495abdd981a.roa (raw, json)
Hash identifier:          WFR+iE4Oph9aObwSHRn3jCDNC8q2K0cuTV2WeTlfX4k=
Subject key identifier:   9A:E1:A4:42:7B:83:42:B6:9A:7B:90:51:2D:A1:AE:84:FD:E0:D6:61
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285849998F35A5820DE00B7AD4E0E0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/7f2586fe-0698-3218-b413-8495abdd981a.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     36007
IP address blocks:        66.55.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:35:a5:82:0d:e0:0b:7a:d4:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=658b8c1a-92b1-458c-981b-83c85cebb0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:77:3a:fb:2d:13:c4:b7:2c:34:6a:0d:c3:
                    96:d3:9d:02:a1:26:e8:b9:03:04:38:e8:d2:71:26:
                    82:11:ed:ca:23:79:2b:32:57:42:4c:28:89:dc:24:
                    dd:da:cd:6b:e3:c3:c4:72:7d:16:55:3f:9f:1c:23:
                    23:a3:e7:cb:f9:f9:f9:31:35:83:57:b0:62:6a:75:
                    d8:07:3c:ce:07:b6:d0:71:ea:71:e9:5a:be:d4:48:
                    de:a1:a4:4b:71:69:cb:ea:e4:19:4d:08:e9:9e:38:
                    22:5e:0c:62:8e:39:d9:12:79:71:29:fb:02:00:28:
                    0d:d7:64:3c:c2:46:c1:7d:04:36:7f:43:12:3d:83:
                    ab:89:3e:e8:1e:b6:8e:5b:c5:49:dd:33:bf:c7:86:
                    40:80:e9:be:2d:89:a4:3e:ef:34:db:e6:9b:46:27:
                    9f:55:e1:f0:9a:de:24:4f:1d:e0:3b:39:87:35:42:
                    6a:f8:45:2f:92:31:c7:ea:76:51:0e:39:d4:f0:07:
                    c0:bd:02:5a:9f:c5:f8:e1:b6:86:01:53:61:43:0b:
                    bc:1f:e6:47:d2:fb:f9:e0:d5:3a:01:0c:07:9d:9f:
                    3a:6b:9d:d3:5a:d2:4b:66:a4:a2:2e:f2:ab:fa:d1:
                    2a:5b:8c:05:3c:44:cd:f9:ca:ca:e9:ee:dd:49:4c:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:A4:42:7B:83:42:B6:9A:7B:90:51:2D:A1:AE:84:FD:E0:D6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/7f2586fe-0698-3218-b413-8495abdd981a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:37:7c:56:c8:27:46:58:dc:61:33:21:a3:42:dc:1d:54:
         00:f4:69:cb:09:b7:46:b9:4f:57:8a:fc:a6:4a:26:65:55:68:
         97:a4:aa:4c:a4:eb:e5:9e:30:6b:57:24:53:f9:37:40:71:5f:
         9b:08:1d:b7:fb:dd:28:ef:60:1c:6a:e1:1a:42:71:83:0c:e9:
         54:04:ac:ba:40:14:7e:e1:2d:1e:10:70:01:02:5e:c4:ef:ab:
         47:23:0f:07:f4:91:de:e7:5d:4e:f8:8d:d9:92:b7:de:19:a9:
         6e:01:df:82:40:90:fd:f7:6f:b0:67:ea:00:3c:49:92:95:5f:
         ae:12:a7:f1:0c:0e:02:09:c0:b5:01:c3:48:fd:ca:ec:f3:8a:
         a2:3d:ee:d4:a7:c2:8b:54:99:ff:4f:3c:14:0f:9f:33:2b:ec:
         59:6e:87:0f:10:24:3a:52:c3:e9:0c:d1:7b:b5:90:b3:d9:5d:
         93:ec:d6:f2:66:ed:24:5a:3b:e9:c5:37:d3:5a:db:a9:2d:a8:
         08:7d:68:8b:44:7c:d9:d4:51:d1:bb:9d:5b:61:23:68:f3:14:
         69:b7:d7:27:61:84:bb:c9:9b:d4:e0:70:d0:78:85:da:f0:52:
         dc:c9:3e:b4:82:b7:90:21:90:92:ee:5c:a2:25:b2:ec:c1:68:
         a2:88:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:30:21 2025 by rpki-client