Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa
File:                     e15131cc-650e-3c36-9991-f449603d4fc4.roa (raw, json)
Hash identifier:          txF20yCHWggq9Kqk4+s1rnnjLBCsSZ+v7Lnb6wQddP4=
Subject key identifier:   BA:EA:D3:3D:E5:16:27:C1:1B:00:74:12:DE:FF:5B:90:26:2E:B8:CC
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584A9FFBAC1B16DD20D2F69AF034
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     21547
IP address blocks:        72.12.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ac:1b:16:dd:20:d2:f6:9a:f0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=e387d4e0-44e6-4a3a-ab2c-88ae13ee0e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:4c:b9:4a:f0:39:a7:1b:97:7d:82:e0:d7:
                    4f:98:e5:67:03:ea:78:e5:bd:44:5f:d3:72:b3:80:
                    a9:08:4e:b0:ca:21:eb:12:14:65:19:fe:e4:ca:a1:
                    06:a2:f7:ca:9a:86:fe:2d:73:3c:3f:e9:dd:d2:d8:
                    2c:92:16:bc:48:fb:42:b6:ab:9a:94:7a:1a:50:09:
                    26:aa:37:60:2c:28:e2:47:57:ee:9f:15:72:76:64:
                    b7:9c:df:35:9d:77:4c:41:01:06:c3:c9:e6:90:63:
                    ef:75:7e:2d:b5:e6:82:39:56:1a:11:59:48:2c:d8:
                    8a:62:38:36:37:eb:8f:07:b3:82:ca:96:f1:3c:94:
                    4e:fa:c2:b5:07:0c:de:7f:3f:33:ec:e7:f2:db:83:
                    4b:71:6e:de:06:db:09:5c:f6:cc:8e:d4:d5:22:8d:
                    1f:78:59:06:c3:43:9f:9f:41:08:18:e9:a5:6e:4d:
                    32:9b:99:c6:78:3d:2a:d5:b2:68:c3:77:ae:f6:56:
                    eb:18:bc:a1:d7:ef:e9:b4:e7:62:ac:32:3c:16:25:
                    73:1c:f8:03:dd:72:e0:d1:b2:71:d0:86:21:cc:a5:
                    5b:81:36:50:2a:83:2c:2a:ea:83:9a:53:3a:f1:1b:
                    bf:e9:2f:32:6f:f5:a7:33:eb:97:0c:4b:a5:5f:6c:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:D3:3D:E5:16:27:C1:1B:00:74:12:DE:FF:5B:90:26:2E:B8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.12.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:83:79:77:3f:67:96:be:5b:79:48:35:89:57:3b:8c:20:d1:
         9e:b7:d0:ae:55:82:a2:da:9d:01:7d:a2:18:0a:9e:57:16:49:
         32:36:70:26:f8:28:97:f4:d9:65:0b:62:82:33:f7:27:be:1b:
         fd:9e:9e:57:85:77:12:54:20:16:0a:0c:b5:17:e0:43:41:8b:
         7b:c6:a4:1b:16:05:36:14:78:dc:65:74:f0:66:af:85:1f:d6:
         8f:1f:c1:d1:28:13:3c:9b:51:e0:0d:b0:5d:3f:6f:a0:df:cf:
         b3:ec:18:8a:5b:3e:9d:75:01:b5:53:bc:9b:84:ba:a9:59:02:
         f4:57:88:5c:7e:99:67:6f:ec:23:55:8d:b3:70:09:e5:f6:bf:
         1b:73:f4:7d:6d:09:ef:f6:a9:61:06:71:ad:2b:ce:f5:50:2d:
         d0:48:0b:54:13:a6:ae:96:78:f5:0d:1b:6d:73:23:c1:46:e9:
         1c:d0:f6:3f:9b:3d:cd:72:2c:01:ba:2e:af:c2:c4:14:36:34:
         e0:7b:70:eb:a7:1b:4d:0b:1c:24:f7:39:54:ad:39:f3:3d:b5:
         d3:43:42:10:c8:8d:5e:21:7a:bc:bf:eb:e8:fc:88:62:3d:a0:
         7f:f2:d0:ae:45:d9:28:b4:2e:6f:dd:80:9b:05:9f:28:f7:58:
         c2:bb:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:28:06 2025 by rpki-client