Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f2b285-b2cb-3d7d-9475-9211d5fc484a.roa
File:                     72f2b285-b2cb-3d7d-9475-9211d5fc484a.roa (raw, json)
Hash identifier:          u418sTzps4OjqJm18KC0WwPHB48awfbuKLQ38lZHH4Y=
Subject key identifier:   B6:5B:4D:2F:E8:E0:C5:32:CD:1B:E2:41:A7:29:4D:C3:BE:01:21:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849780F167938010DC30AB0FD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f2b285-b2cb-3d7d-9475-9211d5fc484a.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     7922
IP address blocks:        172.244.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:16:79:38:01:0d:c3:0a:b0:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=3726ac18-95af-448e-97c1-11cc45ea16f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:15:6b:59:91:db:20:3d:fc:5e:80:5c:fc:
                    87:2e:85:40:c0:9f:6e:7c:3c:f5:ca:cf:33:b7:33:
                    64:59:93:9e:ec:3c:0e:fe:72:75:e8:2f:c2:c9:10:
                    cf:94:94:5d:1d:92:73:89:0d:86:62:33:74:d3:b0:
                    ca:3c:49:f8:1e:53:f1:6a:77:96:bf:7b:26:c0:1e:
                    d1:68:66:52:57:0b:8b:b6:d7:59:a5:ec:e3:46:d3:
                    08:dc:8d:77:9b:32:84:1d:ee:5e:e5:88:e1:1c:17:
                    f1:f6:9f:e3:08:37:75:c6:cb:15:1d:5f:20:a8:1e:
                    07:40:9b:39:be:0d:2b:6b:93:b7:b7:fc:b7:7b:fd:
                    bf:88:99:ea:05:3a:d7:b4:71:a0:d2:9b:21:e4:d5:
                    9b:94:d4:b5:ed:54:1c:38:ac:16:83:9b:80:76:14:
                    64:1e:54:83:32:52:33:97:aa:d5:53:9c:33:0c:04:
                    fe:6d:85:47:81:54:03:0d:d9:3e:92:f5:20:ee:78:
                    84:43:dd:c8:c9:33:e3:46:47:c9:53:69:80:b2:b3:
                    0b:01:0f:9a:e9:5e:a6:59:1b:27:1e:87:bc:cc:d7:
                    3d:6e:38:2f:a0:0c:e2:42:d3:4b:9a:ff:94:22:b4:
                    a1:04:de:cc:87:91:75:1f:c9:5b:d4:ec:9c:14:cf:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5B:4D:2F:E8:E0:C5:32:CD:1B:E2:41:A7:29:4D:C3:BE:01:21:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f2b285-b2cb-3d7d-9475-9211d5fc484a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.244.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:a8:02:a6:d8:ae:fa:4e:ce:33:55:8c:91:51:bd:3f:f4:c8:
         13:47:20:78:af:e6:c4:ce:23:41:e9:84:8f:39:14:d3:bb:c5:
         98:ac:d0:e0:cf:45:0c:e7:a0:8e:08:20:6d:4e:e6:60:1c:78:
         cf:79:09:ed:e7:19:45:e5:c5:5e:c4:06:d9:d2:00:52:0a:3a:
         9b:56:13:92:04:e5:5b:4f:dd:58:03:39:96:2d:d7:fc:32:b1:
         18:13:ad:35:81:97:61:f3:c5:0d:8a:c7:b2:0f:55:a1:b3:32:
         8a:31:da:54:d4:fc:6c:d8:3b:69:2b:41:d4:1d:89:34:98:fa:
         82:63:aa:26:7f:34:9c:10:d1:07:24:46:02:b5:0e:aa:70:58:
         34:6d:53:03:48:c8:ba:9e:c4:64:13:c5:46:b8:75:4c:30:7b:
         fb:af:55:e5:fe:0b:c3:3d:00:04:4c:4c:78:c3:af:de:6e:8d:
         20:58:5f:6c:50:3c:a6:6c:60:a2:ec:95:ae:53:ec:6d:73:d5:
         8a:a7:40:ce:fb:2d:5a:dc:85:38:c4:d0:a9:11:a6:3e:39:92:
         ef:b1:7a:ce:e4:c6:39:46:81:db:62:ac:d4:3a:9b:22:c4:09:
         0d:ac:0e:bf:47:fc:34:fb:16:bc:47:3d:71:66:29:29:33:3e:
         2a:4d:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:43 2025 by rpki-client