Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/72cb7820-6c3c-3190-87e5-571a39cf8d9b.roa
File:                     72cb7820-6c3c-3190-87e5-571a39cf8d9b.roa (raw, json)
Hash identifier:          S089dEncu6QC8Q6WaTrspHYpbfJnZeG4E1Py2nntmqo=
Subject key identifier:   BB:16:7B:39:6E:C3:53:7E:9A:2F:3B:04:16:24:45:8F:AA:69:D2:ED
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584AC2E102CC597E3C2640F65374
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/72cb7820-6c3c-3190-87e5-571a39cf8d9b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        64.79.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:02:cc:59:7e:3c:26:40:f6:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f46e1484-46eb-450e-b286-90330e2871fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:d7:eb:f0:d8:37:88:3c:6f:f6:09:88:47:
                    a0:2d:fc:42:66:23:6c:cd:34:07:e8:5e:65:f0:a5:
                    3a:1e:cb:4f:63:ff:30:69:27:0b:a8:3b:16:54:c6:
                    a9:6b:92:95:0b:c4:d0:e4:d6:96:f2:45:7f:d9:37:
                    ee:20:17:42:10:7f:6d:18:22:72:40:4a:c3:99:3c:
                    fc:07:66:eb:28:c4:81:2d:98:04:ec:6f:dc:6b:c5:
                    d2:17:ea:17:7a:e3:2f:5c:11:df:c9:96:d9:f2:14:
                    43:b9:47:79:88:e4:76:a2:6c:ee:31:07:8e:97:0e:
                    0d:7c:02:76:ff:4d:fc:b7:72:65:73:75:e9:85:cb:
                    ea:78:00:d2:89:3f:fe:8b:c1:fe:23:d7:fd:8f:f9:
                    e2:3f:51:c1:a7:26:b0:c1:a9:7d:cd:d0:94:79:93:
                    2b:95:6b:6c:3f:f6:89:7c:d0:f4:4d:2a:0c:22:8d:
                    33:b1:f5:e8:c3:96:92:1e:d9:0f:d6:62:ac:e3:ad:
                    f7:f0:bb:0a:2e:12:43:67:18:aa:a3:e4:4d:96:ea:
                    5a:1b:5c:86:62:de:d3:6f:7a:c4:30:af:8d:8d:f3:
                    1f:12:8a:77:70:32:c0:3c:37:cd:99:ee:14:8a:3d:
                    62:05:3c:72:6c:55:fd:9c:fe:82:4b:63:d8:07:ae:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:16:7B:39:6E:C3:53:7E:9A:2F:3B:04:16:24:45:8F:AA:69:D2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/72cb7820-6c3c-3190-87e5-571a39cf8d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:c3:4a:78:5f:58:3c:dc:60:30:b5:35:de:e3:b8:36:7f:
         4c:1c:77:15:ad:cb:7a:3c:f5:1e:9e:aa:b6:72:f3:b3:4c:e8:
         f5:fe:d7:10:47:2a:66:aa:92:18:ec:04:d9:e1:76:74:84:cb:
         d0:af:d6:44:24:6b:d5:bb:ef:b7:20:ad:61:07:b4:19:28:50:
         56:ac:e3:07:47:4f:fb:bc:e4:a2:43:3a:e6:85:02:c3:7b:07:
         9c:74:99:dd:07:95:79:22:7f:30:3e:73:55:7b:43:ed:80:20:
         fd:59:78:51:e1:16:00:21:7c:d6:03:15:ef:ca:77:00:c7:33:
         1f:0f:fc:51:48:12:af:b4:4c:cc:f3:f3:25:30:b5:75:e9:61:
         cb:08:23:fc:55:f9:2b:0d:d4:c7:50:de:06:9f:c9:9f:ef:73:
         1b:db:cc:3a:bd:02:16:dd:49:6f:82:c6:b0:08:b3:a0:94:03:
         b6:d5:48:c9:df:72:71:9c:18:cb:bd:6e:a3:e4:dc:06:d2:7a:
         06:70:31:fe:58:68:ca:d4:77:a7:59:7f:6f:33:a0:77:2b:eb:
         73:b0:97:a5:1f:10:0d:75:6f:92:84:61:1d:2b:11:cf:e0:48:
         c9:68:7d:d1:07:9f:1c:08:c2:4f:27:93:ce:ff:c0:c8:aa:c4:
         0c:00:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:23 2025 by rpki-client