Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/2895330b-0803-3fbe-80bd-70d339b85d6a.roa
File:                     2895330b-0803-3fbe-80bd-70d339b85d6a.roa (raw, json)
Hash identifier:          Tz7zj8/GEyJ5NvFpRBRcVxcdgJcDQej5+NzsdistdQg=
Subject key identifier:   35:38:2C:A6:71:0C:E7:93:07:07:E1:04:4C:40:9A:27:A8:0F:52:AC
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F43285849EBEA5120A121F196F90C02E0
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/2895330b-0803-3fbe-80bd-70d339b85d6a.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     7195
IP address blocks:        76.72.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:51:20:a1:21:f1:96:f9:0c:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=816b715f-25e2-4f3d-b75c-eb2117b31ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:22:09:3c:ad:72:82:38:29:79:9f:a9:df:
                    23:01:36:cb:76:6b:05:b9:01:48:f9:6b:94:ce:66:
                    43:01:7d:24:c5:3f:37:0f:e8:90:05:21:54:93:1d:
                    cb:d6:08:7b:96:67:7e:9c:96:04:48:44:16:41:5d:
                    f9:62:05:85:d8:99:b6:2b:dd:9d:d1:92:55:23:52:
                    e5:bb:41:c6:87:98:fd:da:d7:f0:dd:14:d1:c6:22:
                    2f:d6:4d:da:b4:16:a0:f5:6b:a8:10:2b:0a:ed:56:
                    28:98:08:a5:bd:1d:b1:b6:b9:82:18:a8:51:41:6f:
                    4c:2b:79:3a:fd:6a:19:a2:58:c2:12:ad:d4:54:95:
                    5e:4e:25:bd:ff:8a:b4:7f:4a:b0:3a:c2:8f:08:1a:
                    cc:bb:7a:0a:80:0f:bf:d2:01:48:28:b8:b0:01:c7:
                    14:93:a3:4f:9e:a9:d7:82:ed:c6:5a:37:b6:d5:46:
                    ec:87:16:d9:df:ec:f9:99:36:0c:7b:33:23:a1:4f:
                    3d:cd:90:bd:e6:60:3f:8f:49:3e:b5:3e:6c:b3:bc:
                    19:fc:b5:27:2b:a5:a8:63:18:d6:f6:58:ea:39:97:
                    05:67:f9:cb:0e:7d:eb:61:62:24:bd:c7:e1:0f:9c:
                    1f:ed:06:a0:60:41:5a:84:c6:83:21:48:76:53:0a:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:38:2C:A6:71:0C:E7:93:07:07:E1:04:4C:40:9A:27:A8:0F:52:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/2895330b-0803-3fbe-80bd-70d339b85d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:13:1a:9a:94:4c:14:e1:5c:f2:e7:77:3a:e7:bc:11:c3:
         ee:ad:80:ec:5c:66:2a:96:5b:b5:54:43:0a:87:1f:ee:a0:18:
         3c:0d:8d:b3:10:1c:b3:6d:1f:09:a8:7c:fe:44:4b:80:7a:fc:
         3b:bf:55:0b:85:d4:3a:49:1a:22:cc:22:54:75:d7:5a:eb:b1:
         b1:eb:3b:b3:a0:ea:55:15:7a:8a:79:21:44:c9:b4:41:89:b9:
         bf:80:50:0c:c5:05:08:79:cb:ed:82:99:df:67:26:21:98:8f:
         50:cb:8c:74:c9:64:7c:cf:5e:24:2f:eb:c6:a1:aa:d4:bf:43:
         7b:80:e0:58:08:26:a7:ae:7f:94:f0:ce:49:7e:68:ec:06:08:
         69:9d:2e:e9:03:17:be:c6:b6:93:08:61:3f:63:af:90:ee:73:
         fe:c5:10:65:c0:06:49:97:cf:c4:c7:b0:00:b2:00:a8:a4:30:
         c0:0b:2c:29:57:51:02:ed:78:11:dc:fe:f3:5c:d3:bb:68:9f:
         29:b9:c9:f9:e9:6a:29:06:7d:dc:c6:9a:3e:67:42:9d:62:d3:
         e7:4b:9c:3e:f8:a2:f4:f6:38:a7:62:0c:5e:ec:01:67:f3:08:
         05:4a:b4:87:90:85:ac:c0:5a:82:f9:ec:1a:48:c8:bc:1f:e0:
         f3:f9:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:37 2025 by rpki-client