Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
File:                     039a554e-43ba-37e6-98d1-af4a718c60b8.roa (raw, json)
Hash identifier:          9wFXCdaBydX71+DADoPMICAYx2GJfpz9GSxW4QGWqrA=
Subject key identifier:   BE:32:86:01:98:12:82:17:DE:35:88:97:5F:4A:A7:04:95:C7:18:78
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F43285849F2E54A14044A29D105220A80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     22925
IP address blocks:        192.95.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4a:14:04:4a:29:d1:05:22:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c8c652cc-1c8e-4f04-b430-6e224e669af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:63:2f:58:12:51:c1:f5:45:2f:c8:0b:05:
                    5e:b1:ee:7c:0c:25:4f:8c:a0:60:3c:28:85:de:f0:
                    73:d8:e9:99:fb:e3:f4:27:5d:8c:8d:79:8e:54:68:
                    a7:06:22:b1:70:ca:fe:39:64:9b:3b:e8:b1:77:ed:
                    27:89:4e:f8:18:6a:d2:70:fa:8d:78:f0:da:53:d0:
                    20:13:90:5a:28:be:64:81:10:12:54:57:24:fd:ac:
                    28:4d:79:99:4d:dc:76:b9:8a:36:74:ea:a1:d6:38:
                    16:45:bd:df:a2:0a:02:d4:0b:05:d0:0e:55:94:1e:
                    9f:17:37:38:e8:c8:4a:9d:ba:34:66:65:5b:e2:f4:
                    f8:96:7f:5f:85:1e:f8:e2:0c:62:22:26:ce:62:85:
                    1c:b3:25:29:39:73:be:d7:e8:6d:df:ef:5a:80:a2:
                    ee:59:6b:98:58:a7:60:9b:22:54:37:5b:12:ec:da:
                    3f:96:de:9b:e4:e9:9e:82:bc:7b:d3:43:8d:44:d9:
                    a0:bb:33:92:ee:0e:c4:f6:d3:27:52:3b:2e:be:28:
                    00:e5:52:d3:6a:e1:2d:d6:67:10:2e:a4:6d:d8:05:
                    07:c1:c0:f9:e9:ea:de:d4:cc:9b:d3:0e:d0:78:37:
                    9a:40:0f:6c:03:02:4f:f3:47:96:c7:c7:96:b2:3c:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:86:01:98:12:82:17:DE:35:88:97:5F:4A:A7:04:95:C7:18:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:7e:ae:3a:4a:4d:a1:4d:b3:48:76:92:13:2f:4e:07:76:
         38:8d:2c:71:29:8a:5a:0c:54:62:05:27:6d:2c:7f:1c:ed:aa:
         e1:09:d6:0e:a1:c2:42:29:f8:0c:51:b1:8b:17:ee:81:e3:9f:
         07:f9:f3:c2:54:59:d7:4c:14:8a:54:29:6d:aa:50:5a:c4:c5:
         a0:24:4d:8c:11:ea:21:70:76:86:f1:be:31:19:e5:c3:e8:ef:
         b8:73:19:f9:44:a4:60:8e:a6:c9:65:80:62:8d:21:87:85:86:
         ae:39:cd:01:f3:73:81:34:90:7f:2c:58:96:07:2c:14:32:b7:
         89:f5:2e:b7:d2:e0:a2:a5:15:83:9e:72:97:8b:20:58:02:d1:
         75:e7:49:66:18:24:1e:af:10:02:4f:38:a0:e7:30:f4:33:4a:
         98:9f:cd:24:20:01:ca:fb:cb:ef:e2:d5:39:90:08:30:ae:03:
         e6:5e:d2:f4:f5:55:6d:a8:9e:50:b7:03:35:f9:94:2c:ac:b1:
         1c:11:07:d5:77:d3:4e:2d:0c:35:59:95:7c:c0:0b:62:03:3e:
         53:36:c8:c0:78:52:89:85:1e:14:94:63:16:57:65:9a:61:2e:
         02:7f:06:fd:33:9c:cc:09:d3:5f:f2:46:3a:6d:5c:df:cb:a8:
         b7:25:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:04 2025 by rpki-client