Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa
File:                     694332a3-7a56-39e6-aeb3-45e55815e400.roa (raw, json)
Hash identifier:          46un4GHdkszMhf4AMMuXXB5133jjCOSAwZvBbGmoyyU=
Subject key identifier:   F7:CE:E9:BA:82:B9:6D:65:F4:C2:2C:A9:33:18:4D:5D:F3:CA:19:30
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F43285849E22538D93405A07728467F80
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     395425
IP address blocks:        72.42.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:38:d9:34:05:a0:77:28:46:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=fdfb5148-9c76-4e21-99a5-18b1ac005450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:3d:29:b2:49:d2:fe:b1:42:62:0b:ac:15:
                    f6:09:12:b1:d1:5f:43:51:50:de:57:2d:e6:2c:f4:
                    15:1a:95:3d:09:83:13:6a:57:11:ca:66:96:a7:c8:
                    ca:a6:fe:92:da:b2:3c:a4:2e:a7:5d:5f:b3:80:b4:
                    6f:48:7b:ba:8d:8b:67:6d:3e:fc:75:9c:29:e9:56:
                    fe:cb:56:8f:ca:1c:46:c9:6f:96:e1:5f:99:d0:ed:
                    4f:ec:0f:45:d1:66:21:6d:ce:64:87:e9:8e:ef:a1:
                    92:23:c1:d8:5d:44:ed:de:89:c0:0a:ab:9e:08:6f:
                    d4:d7:fc:e6:ff:06:23:22:b6:46:e4:64:e3:9e:83:
                    b7:41:e7:3f:9b:ba:fb:93:b5:57:f4:7b:f7:88:d3:
                    13:f4:d9:47:35:a7:e8:75:c1:84:fa:bc:1f:f8:db:
                    21:be:13:31:37:5a:a8:05:62:92:8b:0a:7b:24:1e:
                    4d:77:ab:07:bf:95:3a:a8:b9:ee:ca:d6:f1:9b:f7:
                    62:7d:97:1a:d4:75:8d:96:d7:f5:38:37:97:d7:fc:
                    ab:0a:c2:1b:53:60:11:48:c8:76:42:3c:99:89:c1:
                    8f:b6:58:4b:27:3d:cf:69:88:1a:23:0c:5b:f4:4d:
                    f2:90:72:15:e2:53:b7:6c:73:9f:e3:88:82:6c:80:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CE:E9:BA:82:B9:6D:65:F4:C2:2C:A9:33:18:4D:5D:F3:CA:19:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/694332a3-7a56-39e6-aeb3-45e55815e400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:1c:d2:43:72:ce:15:6b:d5:d2:25:1f:06:73:54:1f:cf:
         35:73:1a:af:3f:f4:cf:c0:43:48:37:7e:54:e0:95:5a:e3:ea:
         5c:1e:ab:6a:fe:76:87:91:8c:e3:5a:b5:e3:a4:30:89:75:5d:
         4f:d3:6f:59:55:23:c8:e1:c7:2e:10:bd:5f:fb:28:f5:93:bc:
         13:4c:fe:bb:79:e9:4a:d6:ea:16:da:87:e9:79:68:52:77:d5:
         af:8b:3b:9e:93:99:4f:84:59:36:8f:54:6b:bf:73:94:06:4d:
         53:11:78:e8:23:29:de:b9:5a:91:6d:53:51:c2:51:52:73:2e:
         9a:8d:a8:30:e7:89:ca:12:5e:99:4c:1b:2d:1a:ac:0f:7f:d1:
         7b:c7:b8:97:cd:fe:ac:6e:fe:cf:a5:c5:96:f0:12:c0:c5:8e:
         4e:94:7f:21:06:cf:07:6b:68:d1:28:82:e7:70:a5:eb:40:60:
         00:09:db:7b:10:02:b5:a2:ac:1c:10:4f:9f:16:8f:1c:82:2f:
         ab:fd:b2:a8:1d:44:6e:14:70:bf:9d:3b:3f:92:60:aa:d2:1f:
         ec:c1:46:f1:5b:54:10:cb:20:5c:85:5c:b4:c4:bc:93:8a:64:
         5f:b4:02:26:ad:b8:c6:c7:29:58:da:40:6c:1b:28:2f:eb:91:
         75:2e:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:51 2025 by rpki-client