Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa
File:                     9bee539c-0054-392c-9ac9-97ce6a432743.roa (raw, json)
Hash identifier:          GyLXBEQfNw+pInLj0yXMXbHWJuXcI9DGGy0c96awpnw=
Subject key identifier:   28:9B:38:49:71:E5:45:A1:23:0C:0F:E1:A8:76:30:F7:D5:7B:27:A6
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285849955F23D912379F2F29274D72
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     198949
IP address blocks:        72.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:23:d9:12:37:9f:2f:29:27:4d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=59bdee1d-ecde-4e20-a39e-1b6bfcda7edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:cf:01:ba:24:1c:35:67:31:70:66:0e:ca:
                    82:b2:dc:99:f9:1c:0a:74:96:91:c0:b1:aa:f3:68:
                    e6:f9:31:79:f0:bc:1c:e0:f7:85:a4:5e:4d:6d:a5:
                    d2:5e:da:a6:ef:27:2a:43:97:43:81:a2:92:1a:d2:
                    8c:9c:c8:2c:e4:23:a9:f2:ca:66:8b:ce:0d:19:60:
                    78:f7:82:33:22:b9:72:c7:3a:d5:26:4c:6a:2d:e4:
                    cd:10:77:39:09:37:fd:2c:e2:e2:3b:cb:ae:72:85:
                    d8:bc:a0:fb:47:7e:18:00:06:09:c1:c6:cf:74:e5:
                    84:92:81:af:2d:52:5c:a9:6f:ab:3a:83:1a:c5:0d:
                    31:e5:ec:83:f1:e2:f1:11:b1:04:f0:08:1b:db:e4:
                    17:5d:11:8e:f6:08:21:9b:58:aa:f0:bc:c0:7a:14:
                    13:3b:a9:60:52:49:ea:c9:ed:45:c7:61:1f:72:62:
                    eb:1c:e5:55:f2:52:ab:8a:60:fc:eb:30:fc:cb:c6:
                    71:8c:57:3f:13:ad:90:f4:1b:53:50:cc:a8:b8:03:
                    58:51:24:c3:33:a1:2a:81:8a:19:ee:24:a5:f2:4f:
                    93:9f:f6:c4:c3:df:1c:db:80:6f:eb:39:68:ed:83:
                    15:b6:72:c9:8b:c9:c8:8f:81:17:8e:b7:9f:80:83:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:38:49:71:E5:45:A1:23:0C:0F:E1:A8:76:30:F7:D5:7B:27:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:70:7d:35:ab:13:ed:e6:8e:b6:af:00:13:84:f9:0b:f2:08:
         d6:b3:52:5f:1c:a1:f6:10:d8:6a:86:e8:32:96:4d:1a:b9:3f:
         47:12:e9:9f:34:31:be:e2:be:0f:4c:44:bd:41:5b:7e:c4:b6:
         0f:ae:16:5c:d7:7f:39:93:52:79:f9:8e:e9:59:60:4d:77:34:
         45:b5:48:b9:f4:ac:a0:67:8c:31:a5:0a:f8:d4:63:41:1d:04:
         61:58:81:c3:28:c9:f8:3a:09:a6:6a:4b:44:90:e9:d1:b9:09:
         e6:9d:6d:8b:69:7c:73:73:47:25:fa:7f:e9:06:a8:49:cc:f6:
         c2:0d:5f:14:fe:7f:a9:76:33:69:3d:bd:88:e3:e9:3c:f1:fe:
         10:ab:d2:16:64:0b:92:60:c1:b5:ae:67:92:a6:c5:0c:f5:a1:
         ec:51:19:44:18:2a:ed:a9:38:53:3b:9f:44:fc:6e:94:0a:db:
         25:19:bc:c9:81:eb:7c:da:b6:ef:46:e6:27:88:a4:c3:92:e6:
         8f:e3:e0:7b:d5:ae:bb:2a:9b:79:e0:d2:ed:6c:be:a4:28:54:
         d5:3d:13:f7:cc:e6:0f:ef:9b:da:89:26:20:ba:47:90:29:da:
         9b:3c:f1:fc:61:09:cb:5a:8d:ee:25:b8:b5:6f:1e:6d:d1:3c:
         4f:82:72:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:25:41 2025 by rpki-client