Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
File:                     ed98aa57-d32e-3a51-850b-fcb85c818c67.roa (raw, json)
Hash identifier:          4rQgjSiHGRJthfE0Nhig3lHfar1tradzGnv6fMG/WaM=
Subject key identifier:   99:40:64:15:34:5E:5A:97:D4:89:83:EC:DF:CE:88:73:08:AA:15:73
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A9D30FE53DE629BE2D6FFF5C0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     21928
IP address blocks:        72.250.0.0/17 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fe:53:de:62:9b:e2:d6:ff:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=266d8f6d-6dad-42bc-9810-204ef5decf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:fb:2e:ce:fd:a4:c4:b7:79:74:cc:ad:d1:
                    01:34:23:a7:c8:f4:17:6d:ba:0b:32:0b:9c:60:b3:
                    18:6d:8d:0e:6f:fb:29:91:93:2d:00:05:b7:91:b5:
                    17:0f:08:ed:76:83:10:cc:ff:f7:f6:cc:7a:bb:c0:
                    18:f5:19:70:87:be:1f:58:29:84:99:ab:a8:7a:e1:
                    df:d9:46:b4:9b:2b:a5:b2:e9:e9:08:a5:f8:1f:40:
                    c5:4e:95:4e:c2:b6:db:2b:78:5e:be:eb:e4:3c:c5:
                    c1:15:e1:b2:9b:24:8d:ff:fe:d7:26:1c:8f:fa:19:
                    4e:bb:62:ac:12:5c:1b:a8:84:89:68:14:e0:b5:5b:
                    c8:b1:4a:d8:4f:e1:09:34:77:52:90:44:62:ba:d0:
                    a0:88:f3:43:5c:d5:55:94:37:2d:8a:aa:fe:26:b2:
                    89:40:d0:88:ca:50:6d:4e:51:97:d9:db:4f:f9:4b:
                    fe:50:f7:f4:f9:33:eb:2a:c3:e2:a2:38:85:2e:e5:
                    1a:37:f2:a2:f7:a1:7b:f3:aa:f8:f7:16:01:02:63:
                    3d:e2:a1:12:e0:2a:35:97:d3:b6:14:84:e7:ee:e2:
                    aa:d7:35:d1:8e:dd:02:49:58:a1:41:27:0a:08:4c:
                    8d:ae:85:5e:2a:8a:bc:74:15:fc:e9:25:ef:70:ee:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:40:64:15:34:5E:5A:97:D4:89:83:EC:DF:CE:88:73:08:AA:15:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:fb:ca:af:bb:6e:81:4a:1a:7c:9b:b7:db:9b:d3:8c:97:
         64:d2:22:5c:6a:1d:cb:5c:9e:dc:9f:d1:1a:aa:c6:be:ce:94:
         df:51:95:89:e3:d1:b6:b0:8a:5d:f0:eb:61:49:21:8a:4e:0c:
         55:75:63:07:29:72:39:be:df:32:ad:04:0a:71:4d:8d:6f:df:
         0b:7e:67:12:24:33:ed:cb:26:d5:35:3b:e2:22:70:1b:a6:d5:
         57:67:5f:28:1c:2c:90:da:ed:84:c4:08:c9:b4:ea:86:59:01:
         5d:c5:cd:25:ed:9d:e2:eb:a5:9a:89:4c:b1:4c:65:4c:e8:f5:
         45:89:35:0f:c6:e6:7d:bf:75:12:5c:52:ec:42:3d:70:b8:a9:
         ab:4a:c4:3c:4f:b1:1a:13:d7:e2:d5:5b:12:57:60:18:56:33:
         6d:b5:f9:df:2b:71:b6:de:05:54:22:e1:92:a5:34:96:0b:3d:
         d7:12:cf:2b:2b:f9:82:40:a9:68:06:a0:31:5d:e1:e2:2b:70:
         7c:08:56:66:0a:16:6c:a0:6b:1d:41:d8:b3:92:97:29:bb:ce:
         67:1e:2f:b1:f5:78:63:0f:bf:59:4c:f6:80:bb:c9:ae:1d:99:
         70:22:bd:d4:3c:07:ba:ae:34:26:80:ab:ce:8e:6d:14:d7:30:
         e6:eb:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:53 2025 by rpki-client