Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa
File:                     e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa (raw, json)
Hash identifier:          08FMK6zZK1L/zbXzgNmQ4jVp+sLgObGCbWskSV0km1M=
Subject key identifier:   06:75:F9:BD:72:03:9B:56:BC:AD:FC:C3:C4:C9:FB:C1:E6:FD:CF:1C
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584AB650E9D20D2E898834AF84C0
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        72.13.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e9:d2:0d:2e:89:88:34:af:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=dd6eb2aa-00d7-416a-a289-62d437e7c768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:d3:fc:a9:78:ac:53:ba:6a:44:b7:76:03:
                    54:7a:b1:71:2d:33:6a:af:d4:a6:21:64:99:29:0c:
                    cf:f8:7a:a3:81:4b:5e:45:c8:ad:49:5f:af:a6:f9:
                    37:da:8f:24:fc:ac:2a:9d:01:ec:ab:da:1a:20:a0:
                    7b:e0:46:c5:c3:70:a5:c5:0f:fa:7e:7d:53:58:ee:
                    87:f9:61:68:43:00:38:3b:22:e2:65:72:93:a0:4d:
                    1d:77:be:1d:17:1f:b7:89:bc:f7:1d:27:49:0f:bd:
                    f1:28:de:e9:fe:a6:87:72:bb:72:52:84:7a:58:e0:
                    57:c8:6e:4e:7b:18:61:a3:94:f2:fe:ef:f8:4c:50:
                    2c:46:7b:e1:47:9b:e6:fc:f5:80:15:40:dc:1f:11:
                    ce:c4:b8:5d:bb:75:30:c4:7e:60:4e:59:23:3f:f4:
                    71:43:16:6c:f2:0f:7a:21:06:42:47:44:40:41:45:
                    ea:62:1a:51:ce:e5:a1:ee:a4:c1:05:a7:c1:03:02:
                    13:57:77:16:04:e9:0a:2d:c1:47:68:c8:ef:9a:31:
                    d1:16:7f:dc:f6:07:73:6d:45:f1:a0:04:44:d9:57:
                    c3:b0:66:cb:7c:28:7c:0b:d1:15:29:8b:26:14:ed:
                    0c:35:93:4e:89:1b:38:be:5d:72:47:a8:8a:80:c2:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:F9:BD:72:03:9B:56:BC:AD:FC:C3:C4:C9:FB:C1:E6:FD:CF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:bf:43:9e:81:4e:7a:8f:4b:e9:7f:2d:75:3c:b6:2a:bf:
         79:52:ef:bb:da:54:57:d9:fd:0f:3d:d9:21:43:f7:ac:df:e3:
         98:b8:ff:03:9a:0c:4a:7b:b5:08:bc:d7:49:23:30:9b:2c:a0:
         69:45:fc:ba:65:a4:8b:ce:86:79:a9:79:82:6c:2f:dc:ad:37:
         64:fc:42:16:54:c5:cc:6b:3e:1c:17:1e:38:f8:a9:6e:6b:af:
         1c:bf:59:30:ca:ee:1d:01:dd:f6:6b:02:ba:8e:f1:fe:31:f0:
         30:04:53:7e:b3:19:17:79:06:55:dd:59:4e:fd:51:ad:a3:bd:
         c0:c6:27:17:1a:24:7b:46:ee:6b:6b:15:74:f9:10:5f:e5:28:
         10:01:f4:d8:ce:00:25:40:d4:a3:41:c0:99:4a:69:5f:92:93:
         d9:f0:9c:ee:36:2c:60:13:91:6c:66:21:53:d5:7c:54:c8:7e:
         58:5b:d7:0a:eb:9c:a4:b7:17:74:97:a3:19:3e:fb:72:a5:16:
         03:34:eb:64:fd:ef:6c:40:22:62:7e:3a:29:1f:27:8b:50:0c:
         cc:4d:87:56:e3:67:83:90:d8:38:30:17:4b:2c:bd:9b:3f:4c:
         47:bd:a5:3d:8d:b0:41:d1:b2:30:c8:9d:17:51:25:1e:63:1f:
         1b:b5:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:51 2025 by rpki-client