Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
File:                     14801496-2113-3ff3-8286-6329eebc5a7f.roa (raw, json)
Hash identifier:          HfSwAZiCK478tKM1Kq2yt8CGz5eR73LAYpatZUEZGcg=
Subject key identifier:   A3:DC:43:D3:AA:C5:74:69:2A:26:C6:6F:68:FB:0B:20:AA:05:B4:9F
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F43285849E22538C0CDF2E610B1E03F80
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        72.42.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:38:c0:cd:f2:e6:10:b1:e0:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=5512b06e-bff5-4cea-8e01-d424bc648a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:64:a7:8b:0e:cb:b1:c0:eb:a3:98:34:de:
                    7d:7c:0c:9c:f5:96:dd:9f:ba:19:43:46:e6:b3:32:
                    94:7e:a4:9a:94:d6:e1:71:fd:de:70:63:e5:59:ab:
                    40:af:e9:ba:45:5e:c8:f7:1f:b2:4d:79:16:c0:e3:
                    15:b1:10:94:a8:9c:49:44:80:96:37:f2:a6:22:9d:
                    ef:40:2e:ab:65:10:3f:cb:eb:7c:da:07:c6:ce:3b:
                    7e:c6:84:f5:85:f3:4b:c9:d8:5f:32:77:4d:dd:7f:
                    02:d4:6f:09:51:db:d6:23:2c:eb:94:b6:82:d3:da:
                    fa:ca:b5:ed:f2:b7:cd:e6:07:9c:37:a4:41:ba:c4:
                    ed:af:98:7a:e9:17:5f:b3:48:f3:a7:af:d3:c0:4b:
                    35:fc:95:93:88:8d:0c:10:1c:0e:cc:a0:e3:92:f4:
                    dd:c2:30:ad:e5:08:38:6c:1e:28:f1:02:dc:01:28:
                    ac:e6:ed:31:4c:39:54:0f:26:6d:40:30:78:e6:2c:
                    38:28:ac:b0:5f:49:78:fb:82:21:d1:74:bd:05:9a:
                    db:0e:35:7e:d3:18:59:86:6e:ed:e6:51:d3:31:cc:
                    90:6a:71:20:e8:38:c2:cc:e8:41:79:e9:a0:1e:c5:
                    57:3b:32:64:8b:87:db:66:74:dc:2f:33:5a:9c:97:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:43:D3:AA:C5:74:69:2A:26:C6:6F:68:FB:0B:20:AA:05:B4:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:35:b3:46:79:ff:7a:e6:14:a4:08:d9:80:70:ef:db:85:
         22:c5:3f:ed:a4:e9:0f:15:e1:15:2c:13:ee:ee:be:aa:f4:df:
         b6:55:f2:b1:5b:57:45:fd:9f:9b:21:cc:24:57:00:4b:d7:94:
         15:eb:42:1f:5a:93:05:58:bf:54:ad:54:b7:95:dd:34:0f:15:
         c8:e4:ed:2f:02:31:46:8b:03:14:27:8a:84:af:f1:95:09:33:
         2c:88:d3:bd:a6:d7:46:f8:4f:da:6b:2c:1c:24:91:57:76:36:
         b5:38:60:e7:e3:aa:1f:63:8c:c1:cc:36:53:78:56:aa:58:3a:
         5d:18:98:b6:1c:a6:59:11:3e:6f:6e:5a:41:66:8a:12:18:11:
         a6:4c:67:77:e6:10:17:fd:72:eb:12:83:f5:ad:c0:1d:56:c9:
         6c:d5:eb:0a:49:e5:73:0b:47:e4:bb:dd:0d:1b:30:05:56:9f:
         91:35:96:d7:a6:48:f1:60:ee:27:3a:28:c8:87:fc:3c:7f:ce:
         ed:3d:25:4b:7f:e4:55:bf:85:cd:58:a5:0c:03:5e:4a:c6:59:
         8a:43:3a:64:2d:41:1d:95:05:c6:84:3e:b0:0c:16:83:0e:5e:
         10:a4:38:53:77:ba:fe:09:44:0b:8e:aa:07:d7:a2:5a:b2:ee:
         e3:26:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:34:18 2025 by rpki-client