Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa
File:                     e2f738f2-29e9-3955-988c-62d352942d5d.roa (raw, json)
Hash identifier:          uBzRwH3bt8fhvoaGO3bb/9Vz8+8K9AzyovDoz+sNUlI=
Subject key identifier:   14:BB:2D:E1:6F:A4:78:27:87:40:9A:4B:B4:47:3E:98:A8:E3:A0:09
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285849D594DAC736611D4D1FCC1480
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16904
IP address blocks:        64.72.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:da:c7:36:61:1d:4d:1f:cc:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=0cbc9d17-124b-4dc8-8e3d-88c0155dea9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:9b:d2:fd:ce:ba:59:f0:d9:66:38:04:76:
                    7d:d7:d9:a6:20:74:c2:35:72:92:46:75:6f:e6:f2:
                    ef:10:d6:f5:cb:80:4e:7a:c4:11:54:82:17:2c:cd:
                    b9:49:ae:07:68:b9:cb:57:f0:ce:bb:36:22:7b:6a:
                    d0:7c:48:d0:b3:a0:60:84:18:4a:01:79:5f:06:52:
                    7e:cb:31:16:70:74:52:1c:5f:13:55:ef:fd:12:ce:
                    bc:d6:51:64:31:1c:84:b0:2c:d8:8f:40:79:39:25:
                    15:77:7b:1f:57:64:59:47:42:ea:71:6a:84:85:64:
                    2e:25:94:22:e9:7d:a1:e8:55:09:7c:a2:50:fd:f6:
                    6b:21:3e:e3:4d:49:a8:95:d6:d0:2e:47:05:e8:48:
                    dd:89:a6:fc:97:45:d2:6e:be:61:0f:b3:47:fb:0f:
                    1a:04:cb:bc:85:c8:b7:ce:32:39:a6:20:8a:ab:12:
                    1a:31:44:c3:3c:d0:34:6b:77:24:e9:5f:28:04:dc:
                    bb:0c:7b:fb:98:57:b5:09:8c:b7:de:9c:89:f2:da:
                    d6:39:10:36:bc:50:ab:06:45:95:bd:9f:b8:9f:2c:
                    18:a0:a9:d0:06:86:07:7a:14:67:52:a9:55:63:ae:
                    da:da:4a:8a:df:1a:7a:8f:04:9f:d6:61:8d:d3:d3:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:2D:E1:6F:A4:78:27:87:40:9A:4B:B4:47:3E:98:A8:E3:A0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:17:5b:bb:a0:9e:6c:4e:92:e8:1e:8b:35:a7:d2:44:52:36:
         03:54:3d:a5:6f:3c:dc:c2:25:2e:f4:b7:43:74:0b:fc:ef:0e:
         2b:54:73:c7:a5:f8:ad:d1:53:54:8d:86:50:08:ac:bf:77:d5:
         88:21:f6:6f:66:10:86:35:67:54:5e:1c:bc:af:15:60:af:84:
         4a:eb:94:32:b9:24:15:27:82:32:16:51:3d:1f:43:e0:94:d0:
         80:b9:f4:57:12:72:a3:b6:ba:de:77:6b:6d:c4:af:7b:d9:8a:
         13:f3:5a:83:ee:fc:d4:3c:4a:3c:92:b8:db:54:c1:53:82:09:
         92:22:c0:0d:48:b1:a5:27:d0:e7:15:61:b8:6f:56:24:ed:92:
         2f:83:87:e1:07:66:17:35:1e:21:43:27:5d:c0:70:ce:d4:4c:
         b0:ac:62:3f:08:59:1f:5d:9e:ba:5a:40:af:f8:38:60:7d:aa:
         f1:ba:0e:51:54:29:da:69:ee:18:48:0c:ee:84:d9:08:f0:28:
         9d:0d:16:e1:32:6b:52:5d:21:86:2e:e9:56:2b:3c:6f:c6:cb:
         5d:cf:03:78:08:d9:1f:c8:df:07:4f:f1:61:e0:5c:1e:9f:71:
         10:44:bf:2c:25:db:09:76:61:a9:95:3e:7d:8f:ee:10:a6:1a:
         9d:79:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:45:49 2025 by rpki-client