Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
File:                     0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa (raw, json)
Hash identifier:          V+At9RjthrGluTOOUAkfEMrvO/Oq21DPIZTu2MgzKeE=
Subject key identifier:   8E:F7:17:3C:6E:00:5A:96:4F:B7:39:33:D3:B1:6C:B1:7F:64:C1:99
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F43285849FCAA72DE399FCBC9292D0FE0
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        72.18.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:72:de:39:9f:cb:c9:29:2d:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=dc44959b-d1a3-4f6a-b76c-e52c8c7dfc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:dd:81:6b:fb:86:f0:e9:c0:90:26:7a:f2:
                    28:b9:ff:6e:6d:90:61:5a:31:08:3d:66:6a:86:84:
                    a4:f0:c4:35:6a:3b:52:5a:ea:50:e1:ac:78:8e:3f:
                    04:e8:53:2c:3b:94:0d:58:ab:ec:f2:c3:c7:e7:68:
                    24:a9:ac:eb:56:71:8b:c1:ed:72:8b:fa:b4:3a:ee:
                    02:78:7b:59:5b:5f:60:78:97:64:27:b9:bd:f0:15:
                    4c:70:c8:4e:e3:55:b2:5e:90:f0:3a:8c:f3:ac:5d:
                    af:d1:20:b2:3a:b2:b5:b4:5f:0e:f4:2d:5a:72:48:
                    65:27:99:8a:9a:94:5a:f8:6f:3c:61:8d:77:b5:b0:
                    81:b4:a0:3e:77:d1:ae:11:2a:48:eb:7b:6f:8a:24:
                    65:4d:1c:8e:b4:0b:19:c8:c9:f9:bd:4d:04:34:60:
                    c0:d4:0b:3c:da:f8:80:fb:1f:f0:f5:74:5b:e8:38:
                    95:c1:f7:0d:2f:c5:bf:1b:8f:df:f5:6e:47:12:bf:
                    31:1b:2e:cf:49:9a:94:3d:f3:11:61:23:e3:e7:19:
                    b2:98:c9:ce:51:15:01:5b:c7:a0:b7:96:45:69:51:
                    84:b7:c9:c4:0e:dd:45:8a:fa:5b:9b:19:8e:28:f2:
                    f9:19:bb:9d:b8:44:49:89:46:61:eb:f5:bf:f6:0d:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:17:3C:6E:00:5A:96:4F:B7:39:33:D3:B1:6C:B1:7F:64:C1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c7:5e:37:75:3b:e6:fe:8b:c3:53:ee:3f:a2:e0:52:03:5a:
         3a:2b:9b:69:99:8e:0f:12:bf:a1:19:9b:7b:68:18:74:1a:37:
         7f:76:48:58:32:32:e2:d0:11:89:5c:46:10:08:de:27:c3:9e:
         df:47:6b:5e:27:1e:9e:99:29:6c:6e:af:d0:a9:ab:0e:8f:45:
         a6:e9:b3:c6:91:5a:87:2a:5d:dc:e0:19:30:69:65:a1:73:7f:
         7c:be:38:9d:ef:b9:84:a4:4e:37:7e:70:4a:62:a2:ce:7e:8f:
         52:b5:51:25:8e:4d:39:91:5c:cb:8c:f1:19:f4:8f:79:2c:fe:
         3e:e8:f8:3c:51:45:78:1f:d1:fb:d9:9e:7a:63:5b:28:6e:81:
         c6:7a:01:ad:60:de:a7:1c:9a:46:7a:cb:cf:fd:50:4f:86:84:
         02:f9:bf:dc:d5:c7:3f:9c:c7:bd:c6:6c:1b:c8:a9:37:f2:93:
         64:26:ee:f4:9c:81:7e:e4:54:b9:46:91:80:d1:10:17:8a:0a:
         8a:ab:33:bb:0b:97:c3:b9:03:1d:79:ac:77:ce:e7:ef:1b:11:
         fd:2e:42:64:ef:90:bf:fe:c2:8f:05:67:d9:b1:58:49:44:7f:
         71:61:f3:0b:1f:99:fe:a9:ed:ad:ba:72:46:22:e5:f8:3b:9d:
         0d:96:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:52:24 2025 by rpki-client