Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d661edf3-c3a3-3437-9d87-9410ad1124c1.roa
File:                     d661edf3-c3a3-3437-9d87-9410ad1124c1.roa (raw, json)
Hash identifier:          XGbKZeWNaKYE1a1xp6a2oV4h7liE/qLy9U+IwLrBm+I=
Subject key identifier:   3D:FD:79:88:C5:30:1B:2D:CD:37:52:48:75:77:6B:02:7E:CE:01:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160E5C30D0AAE450A225200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d661edf3-c3a3-3437-9d87-9410ad1124c1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        72.129.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e5:c3:0d:0a:ae:45:0a:22:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e76c77a5-56ec-4b2b-b153-4a8ed9a949b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:45:f6:7c:2b:90:f6:34:32:21:87:be:f4:
                    0d:c9:bc:8d:74:c9:c0:8c:f3:ec:cd:ad:ce:42:2c:
                    62:f0:0d:b5:f8:ad:37:32:d8:d0:3f:42:22:0f:25:
                    11:16:fb:68:5c:79:13:dc:3d:d6:e1:ab:41:90:14:
                    17:a5:84:f7:c0:bd:41:f0:fc:09:c9:4b:e0:b5:6b:
                    9a:0b:93:1b:dc:1b:d6:18:af:6f:6d:6d:ad:03:2d:
                    23:cd:a4:12:68:cc:d9:30:02:ff:86:9a:ba:07:a8:
                    59:bf:82:f6:4a:95:a1:1a:7d:fb:b0:76:70:7a:a3:
                    f9:21:7f:82:ae:f9:c0:7f:77:d2:af:c9:de:9e:b0:
                    a3:07:5e:f0:10:d0:b3:f1:e0:ff:d6:91:9e:f2:94:
                    40:54:71:bd:7f:46:60:8f:1a:3b:3b:c8:fc:67:47:
                    7f:18:94:3f:11:1c:3e:32:69:53:e4:80:4a:8b:ca:
                    af:86:8c:c8:89:f1:8b:d6:9f:44:ce:29:e6:60:bf:
                    b8:8a:bd:a2:8d:19:0a:58:66:78:7f:c2:88:d6:6e:
                    8c:50:fb:c2:b5:c1:3e:fe:9b:d9:49:5f:1f:2d:28:
                    20:d0:60:ad:25:49:8e:68:ce:b0:27:9b:77:e1:dd:
                    2d:c4:40:1c:07:a5:85:3b:93:c8:d7:76:5f:b4:4d:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FD:79:88:C5:30:1B:2D:CD:37:52:48:75:77:6B:02:7E:CE:01:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d661edf3-c3a3-3437-9d87-9410ad1124c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:14:13:33:43:3c:2c:71:be:1c:4c:50:89:d3:d7:6a:c8:
         6a:a7:bd:42:58:d6:89:5e:62:03:40:ea:95:01:f7:c5:20:d4:
         2a:97:c7:79:95:21:9a:06:d7:53:fa:d5:20:e4:10:32:a6:ce:
         66:e1:b7:54:9d:51:25:d9:d9:b4:26:33:12:df:26:8a:07:09:
         f8:56:76:d5:c2:8a:03:01:bf:a0:82:83:46:76:54:49:35:6f:
         59:40:7c:39:d9:a9:1a:2b:73:87:20:56:97:03:a1:f5:0a:61:
         cc:59:cf:a2:24:bb:14:6f:7d:e0:9f:41:e0:82:cf:fd:de:32:
         76:1f:84:7f:6a:f2:88:a1:9b:d9:cb:4f:60:c8:63:19:16:17:
         99:b8:36:39:6c:b0:d2:fd:73:0a:63:8c:2b:e5:5f:a9:f1:40:
         fa:38:bc:4e:9e:66:d3:40:46:1c:a2:5f:12:3e:63:02:1a:6d:
         e2:d1:77:a1:f5:0a:fa:8a:5e:cb:be:72:e3:db:08:31:9f:42:
         26:9a:11:ad:cf:f6:2a:44:87:1d:0c:23:63:1c:60:42:aa:c6:
         fd:9d:fd:ac:a3:39:b6:c7:0d:d8:59:36:8a:fe:53:c5:4d:92:
         51:fb:62:20:17:1b:89:e0:ba:d3:dc:1d:db:9d:54:56:f5:69:
         32:06:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:55 2025 by rpki-client