Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa
File:                     a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa (raw, json)
Hash identifier:          QpmebkMsf/sIVrlxzOMTG7OR164DzfgL8LHycAS0cLU=
Subject key identifier:   B7:0B:FC:37:79:4C:BF:34:CD:8E:6D:FD:65:15:64:07:DB:6C:89:40
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584AA160D5A8E06DD18265FE1B20
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        72.13.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:d5:a8:e0:6d:d1:82:65:fe:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=78ff5ded-ff7a-4a2f-a033-826b82f781cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:7d:b9:12:1d:e4:33:6b:22:a6:f2:03:b3:
                    bc:59:b7:71:1e:96:93:5d:1b:eb:67:26:ed:e4:e2:
                    0d:b4:53:a5:9f:24:ec:12:6f:fb:66:08:bc:e8:55:
                    19:e7:c6:19:14:ea:fb:53:00:2b:82:de:29:27:10:
                    8c:15:1e:9f:82:1d:db:d9:7c:d9:5e:3a:40:c5:d5:
                    74:a9:80:a8:a4:63:db:78:de:b6:85:95:41:d1:7b:
                    83:a2:13:cb:bf:82:f7:2c:6b:f5:28:49:19:35:6f:
                    5e:17:26:7b:8d:1b:28:4b:42:ed:b4:c8:e3:b1:18:
                    5f:41:ff:f8:3a:81:8c:d8:87:dc:a4:bc:85:1b:d5:
                    a3:4b:65:f8:7a:3b:55:ac:8d:98:43:62:63:e6:e3:
                    88:3f:17:4b:7d:15:9d:3b:2f:75:ab:b2:ce:7e:a1:
                    c5:5b:3c:22:7e:88:40:f9:b0:41:36:28:95:f7:3c:
                    88:5b:8e:85:97:d1:e2:f3:24:11:62:e0:23:35:fa:
                    ab:f4:17:9b:5e:82:ba:c7:6c:e2:37:83:5a:50:de:
                    60:61:0d:28:bc:7b:cd:b8:6e:ed:58:8e:50:bb:f6:
                    58:13:3e:58:26:19:52:06:f6:64:54:6a:3e:64:c2:
                    03:e4:f5:0f:5c:b4:10:4c:88:31:0a:5a:5a:c9:23:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:FC:37:79:4C:BF:34:CD:8E:6D:FD:65:15:64:07:DB:6C:89:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:46:6a:07:ba:00:0c:13:08:f6:7a:9d:d1:1e:79:6d:4a:
         6a:8c:8c:bf:a8:2f:99:2a:34:84:14:f9:e6:67:c9:f5:d3:27:
         96:33:d5:a4:1e:56:8c:b1:b9:b0:f8:7f:81:9a:8c:90:d7:c6:
         3f:dd:5e:2f:ff:dc:67:a2:eb:27:15:0f:f6:b4:1a:09:6a:73:
         0f:47:b5:be:e3:e6:d7:e1:eb:cb:ec:67:c8:15:b0:51:5d:73:
         87:31:16:53:e0:be:a8:39:24:59:b5:f5:e5:4d:40:97:d5:bf:
         52:91:31:07:ae:03:f5:42:c3:56:f1:50:02:6b:80:ef:a7:8d:
         10:6d:06:0c:1f:e1:a3:39:f7:72:cd:b2:9c:09:1c:30:8c:31:
         d6:b1:2d:ea:aa:5c:bf:45:c5:02:8f:28:46:f1:d0:ee:3a:23:
         1e:60:9e:5f:34:e4:35:fe:6e:9c:2e:9d:ce:b6:54:0b:08:32:
         06:05:f5:e3:9b:c2:e2:4f:dd:5d:79:6e:6a:e6:6d:43:d8:47:
         b9:99:ad:9c:ba:66:65:0b:82:dc:5a:0a:a1:63:1b:32:a6:d5:
         6e:32:67:72:f5:ca:00:53:58:11:2d:cf:d0:ec:6a:96:b5:d5:
         65:09:50:65:14:79:3a:29:9c:2f:90:3d:70:e8:96:f9:ac:8b:
         e2:fd:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:40 2025 by rpki-client