Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/56888cdc-9919-32c9-8a05-83baa5edea91.roa
File:                     56888cdc-9919-32c9-8a05-83baa5edea91.roa (raw, json)
Hash identifier:          R0UZQizp9SXAZm6tQUEBJjcnYrQlkRqM3Wp9QR8fSHw=
Subject key identifier:   45:A6:FE:FE:32:EC:24:B6:58:5F:AE:11:4C:48:CB:AD:A8:AE:CF:5E
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584A7FE0918400CAF3D30330DE44
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/56888cdc-9919-32c9-8a05-83baa5edea91.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     396479
IP address blocks:        69.72.40.0/24 maxlen: 24
                          69.72.41.0/24 maxlen: 24
                          69.72.42.0/24 maxlen: 24
                          69.72.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:91:84:00:ca:f3:d3:03:30:de:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=0c5e3efb-d18b-4e15-949d-82b5803572e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:cf:53:d6:76:f6:a0:71:f9:8e:56:72:4c:
                    96:f9:8c:2b:6e:a9:9d:9c:82:14:e4:dc:75:50:a7:
                    36:0c:b6:24:3c:50:94:3e:74:b2:a3:94:0a:22:0d:
                    92:b0:ea:3c:25:80:9f:50:2a:15:c9:f7:2b:52:45:
                    b3:cb:2f:09:d3:8d:ab:04:69:bc:19:aa:9d:d6:4e:
                    42:bc:27:4a:c2:90:28:e5:cd:67:1f:dd:5b:72:1f:
                    a0:e2:9f:0a:b9:5b:c9:e8:3d:ca:22:e8:6f:54:4a:
                    24:42:5f:f4:7c:44:53:06:fe:24:b5:43:17:11:ab:
                    48:37:35:60:cd:34:cf:59:84:03:b5:0a:f4:e6:64:
                    c3:d8:d9:ed:68:73:fa:b5:cc:c9:ff:4c:f5:6e:d5:
                    cd:56:20:51:b8:88:67:44:cc:c0:c0:75:8f:ee:f0:
                    28:c8:dd:54:ca:c8:33:f0:c8:21:e3:1a:95:8b:50:
                    65:c3:00:9a:ad:11:93:f0:96:fb:df:b2:13:e3:15:
                    da:c3:e4:1d:fa:ee:e9:8a:31:8f:d7:c7:b4:9c:7d:
                    83:65:cb:c3:c1:80:7a:cd:f6:dd:3d:63:6b:d3:ad:
                    db:af:ff:04:52:d3:8c:53:bf:78:0d:8a:a2:bf:ef:
                    c0:b3:48:b1:c3:f7:f4:d5:74:a4:85:03:1f:68:1b:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:FE:FE:32:EC:24:B6:58:5F:AE:11:4C:48:CB:AD:A8:AE:CF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/56888cdc-9919-32c9-8a05-83baa5edea91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:ef:e1:75:10:26:f3:fd:fb:e5:19:d4:92:43:21:dc:2b:
         c4:68:ff:40:6f:90:6f:b4:95:ad:ad:c6:63:cd:74:d8:e7:57:
         c4:b5:78:30:07:ce:25:a5:1f:da:ca:16:34:09:fa:f6:63:bf:
         3b:8d:fb:f4:4f:6a:79:d7:09:d4:b3:e3:79:b5:23:da:fe:fd:
         74:94:df:fe:97:f5:b2:00:8d:18:9e:d8:9a:e7:c6:ab:4b:21:
         bc:dc:d0:12:13:70:1b:6a:bb:b6:d5:ba:5e:3b:e3:32:87:b1:
         ba:77:89:9e:e1:2f:55:a1:ff:ed:6f:69:99:26:b3:c5:ac:f1:
         f7:fa:00:a7:e7:c4:80:75:6b:41:18:f9:c8:1a:8d:34:3a:0c:
         45:69:e7:cb:b8:cf:8d:d5:2e:89:5f:5a:d7:91:29:98:b7:5b:
         f0:46:1f:f7:bc:ed:ec:2a:de:14:62:ae:5a:29:c1:a3:f8:14:
         d4:ed:f6:a3:3f:98:bf:4c:2e:12:ad:e9:60:c8:c8:5d:04:86:
         61:52:af:87:59:c2:55:bd:62:a6:b7:45:d3:4b:94:d8:78:78:
         d4:f0:c8:66:f2:70:2e:96:37:8a:b8:42:14:70:d0:54:e8:89:
         93:4c:ac:14:90:f5:3a:e8:75:a3:00:bc:00:d4:98:bb:0c:b6:
         ef:7d:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:41 2025 by rpki-client