Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ffa0fa71-5cbf-3c01-a55c-af950623edaa.roa
File:                     ffa0fa71-5cbf-3c01-a55c-af950623edaa.roa (raw, json)
Hash identifier:          bhhnRP5yk5bxo8N6T+Omxw/zBrL9bL9cA8vdPLzYJTA=
Subject key identifier:   4B:59:8F:8A:13:BC:6A:9E:86:51:14:88:2B:C0:16:01:F1:D2:74:56
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1610FB4F8887DB04722AD40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ffa0fa71-5cbf-3c01-a55c-af950623edaa.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     12271
IP address blocks:        72.43.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:0f:b4:f8:88:7d:b0:47:22:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3085ea97-12af-43a7-aef3-4bedbd21cd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:cb:76:31:0d:6f:1c:8c:6e:da:8d:48:c8:
                    86:c5:ca:cc:d3:d3:86:25:4e:74:ed:89:fc:e9:3a:
                    3d:68:21:c0:05:79:00:5b:7d:0b:53:4e:74:6a:4f:
                    03:c6:4c:59:7d:41:11:28:27:f1:c1:6d:1d:da:ef:
                    c7:ae:b5:cf:9a:69:30:d6:b3:77:1d:23:17:71:07:
                    7c:f7:6a:e6:44:d0:e9:5e:89:1e:f4:40:19:69:7d:
                    de:11:63:d3:5b:c8:d9:8c:5b:ac:7d:49:79:e7:12:
                    a5:c0:f8:f7:df:f0:11:c1:13:f5:85:37:b6:50:f3:
                    f3:42:98:3e:52:0f:40:39:90:72:3a:d5:4c:af:30:
                    cf:c2:be:21:6b:31:d5:e1:76:80:82:39:c3:be:a8:
                    23:b5:17:a7:6d:d5:a8:6b:ae:70:d1:58:6c:6a:4c:
                    b1:ed:d8:0f:36:ca:51:26:ca:a2:a1:5a:b4:ff:61:
                    8e:ac:cb:66:2f:2f:39:0c:7a:ac:e4:30:03:da:9e:
                    88:1a:94:5b:cc:f9:9f:0a:c8:01:d5:63:c6:4b:84:
                    d1:24:52:ad:62:c3:f4:47:91:32:38:d7:a4:e1:15:
                    a6:94:d5:68:ef:de:37:99:7b:f6:20:8c:ad:a5:37:
                    6c:49:4b:dc:e9:5d:73:c2:e2:8f:74:85:60:8d:35:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:59:8F:8A:13:BC:6A:9E:86:51:14:88:2B:C0:16:01:F1:D2:74:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ffa0fa71-5cbf-3c01-a55c-af950623edaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:fb:73:b3:39:58:a5:71:d8:39:69:39:87:c5:27:86:74:
         e8:3f:b6:08:0e:8a:de:e3:10:ad:f2:ee:cc:84:ee:e4:e1:99:
         8d:7d:c6:85:6f:94:fe:1c:51:93:93:34:7b:1b:0c:25:63:41:
         3d:ce:27:e1:e3:37:3a:51:9e:f9:fc:21:3b:62:ad:05:bb:8c:
         0c:f9:7b:4a:34:8a:4e:3c:76:0e:f7:14:17:d1:9f:f8:85:c4:
         dc:f9:e1:07:69:bb:ba:bf:39:32:a2:b4:7e:54:30:f5:b1:62:
         a6:d8:0c:8c:92:e6:c3:cf:5a:6d:15:0b:0e:2e:b4:c3:f7:a3:
         c1:a2:35:d0:2d:db:d7:4f:9c:aa:e6:ef:05:1a:d1:e4:78:1e:
         b4:98:75:d2:6d:82:da:1f:d9:77:63:21:a0:d6:86:7b:82:22:
         a0:2c:7d:c6:b5:25:c5:5d:00:a6:cb:a1:b7:6d:8d:9a:78:96:
         99:5c:bb:6d:5c:44:e1:5f:7e:ef:bf:b2:aa:af:40:3a:36:0d:
         e4:aa:43:f0:80:bc:23:57:a9:ad:09:a4:d9:07:8f:59:04:11:
         d3:6e:e5:d4:9d:8c:6d:12:cd:ea:8c:79:f1:ed:50:42:74:9d:
         3f:0e:aa:ef:14:cd:6c:68:33:b7:24:6f:33:3f:35:46:78:d6:
         23:01:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:47 2025 by rpki-client