Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa
File:                     556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa (raw, json)
Hash identifier:          dvOrItAyaLdLYW09RDLJ+qGEHW7XI35b1O07l40CRag=
Subject key identifier:   46:3E:5A:78:9B:FF:EC:91:A4:1F:95:6D:09:13:8A:01:27:01:D0:D4
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F43285849E22539CC96926E95E12C0800
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     399244
IP address blocks:        72.5.46.0/24 maxlen: 24
                          72.5.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:39:cc:96:92:6e:95:e1:2c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=2643cdd6-594f-4290-b098-7773e0538fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:fe:be:bd:8d:63:d0:70:91:6d:9b:ad:71:
                    59:9f:c1:c9:e2:a4:94:6b:cd:ef:4f:77:3f:05:51:
                    7b:a6:4a:28:93:bd:62:6e:e2:43:1c:db:7f:ce:95:
                    3d:fb:37:a8:1f:5e:4e:d7:d8:b1:98:56:3c:a6:53:
                    2b:b2:6f:c3:0a:63:ea:98:8b:94:d0:44:31:90:e0:
                    2d:1e:d8:fd:c2:10:9d:80:97:63:8e:77:ed:30:c8:
                    12:3a:56:43:84:61:b1:bf:be:85:45:fb:ef:90:72:
                    14:b2:1b:90:0b:80:31:5e:39:58:25:25:44:eb:67:
                    2b:a5:78:d7:6f:8a:b0:39:0d:54:04:a1:6d:65:58:
                    ab:6b:79:72:fc:0d:76:26:a0:7c:09:35:19:97:47:
                    4f:c6:d7:94:88:d1:1f:ed:a8:03:e8:f4:21:82:e9:
                    ca:58:19:a4:c7:12:a5:61:86:07:d8:7e:ed:01:eb:
                    0a:f3:26:61:f3:e0:c8:a9:7a:89:68:0e:43:2b:74:
                    e6:bd:9e:34:6b:f8:1e:18:25:71:8e:7c:e9:f5:41:
                    6c:07:0b:b0:4f:22:2c:18:91:3a:7d:85:56:5d:55:
                    90:ec:bd:2a:9a:59:8d:13:7a:63:a2:8e:4f:d8:90:
                    cb:3d:f6:4e:fc:67:3f:ee:c0:fa:34:98:79:65:73:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3E:5A:78:9B:FF:EC:91:A4:1F:95:6D:09:13:8A:01:27:01:D0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.5.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:84:ed:6d:94:29:d9:a6:6a:73:e6:ec:49:4b:90:3c:48:
         44:bd:7a:07:c8:62:fc:15:72:c4:9f:ea:a7:91:6d:b9:1c:ee:
         97:fd:e5:19:f6:80:21:5a:f6:46:45:8d:20:15:7b:80:2c:61:
         fe:3a:99:ca:a9:81:cb:02:12:8b:f0:ab:1c:48:af:cf:ea:9f:
         5e:a4:1f:be:d4:9e:40:50:46:0b:f6:8b:ee:d2:da:0a:23:fe:
         71:2e:43:58:82:2e:a1:f4:78:6f:d8:a1:91:2a:fc:37:4a:91:
         7b:29:7c:b0:de:e3:2b:18:d0:62:be:aa:54:a6:83:a7:c1:f8:
         9e:f1:e2:18:d2:02:d0:12:73:f3:11:62:69:a7:e1:63:8d:d6:
         32:2f:bc:b0:ce:c1:b7:aa:f9:50:23:d9:1a:d0:d2:14:e8:d5:
         e7:0c:30:14:1b:55:da:8d:b2:8a:72:5d:10:db:aa:dc:a7:01:
         ce:2b:3f:9e:ea:4b:40:7f:ee:d8:11:39:ce:a4:d7:d7:c7:81:
         ef:55:be:b9:07:93:5c:87:b5:ae:ab:41:46:3d:c2:ba:89:d6:
         7e:4f:cc:b6:1c:59:08:f4:60:b6:38:aa:6d:fa:ef:0b:3e:6e:
         96:40:b9:9b:37:b1:da:1b:05:4a:9e:5b:8d:7d:77:75:7b:a7:
         4a:b2:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:05:18 2025 by rpki-client