Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eda7ec76-b41f-3444-91cd-05cce2ec7b60.roa
File:                     eda7ec76-b41f-3444-91cd-05cce2ec7b60.roa (raw, json)
Hash identifier:          971hJFrwa+2Rz0VpcFdUrlgoD3Bw5EI2ARwLClIu3+g=
Subject key identifier:   4B:0C:8F:2B:D2:3E:E6:4B:A9:8A:E2:55:CF:B9:A5:22:8D:97:5A:39
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38B241410FACF502D9FBDA00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eda7ec76-b41f-3444-91cd-05cce2ec7b60.roa
Signing time:             Tue 17 Jun 2025 13:05:11 +0000
ROA not before:           Tue 17 Jun 2025 13:05:11 +0000
ROA not after:            Mon 15 Sep 2025 13:05:11 +0000
asID:                     22516
IP address blocks:        72.14.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:b2:41:41:0f:ac:f5:02:d9:fb:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 13:05:11 2025 GMT
            Not After : Sep 15 13:05:11 2025 GMT
        Subject: CN=be2dffcd-d09c-447e-863c-912c2b530762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:f4:84:a9:d4:34:b2:18:de:17:7c:e8:b9:
                    b8:45:7d:57:90:bf:82:03:62:04:43:3c:bb:6d:74:
                    7c:51:bf:1c:0a:45:be:73:4b:d6:87:18:dd:a8:9d:
                    97:01:6b:e3:61:a5:dc:ab:d0:4e:d8:ee:fd:63:a1:
                    c6:be:9d:0d:61:2e:68:27:80:a0:b3:47:ef:db:5b:
                    ae:be:4e:c9:24:52:94:28:b6:bf:0f:df:bb:08:75:
                    0d:35:a1:b7:e0:4e:84:87:1f:a4:17:74:e6:f0:77:
                    2d:32:58:ae:c8:79:d9:fe:c9:72:69:ca:04:d0:47:
                    30:a3:20:5b:43:fb:b2:38:a7:11:81:64:3c:7c:83:
                    65:98:5a:69:ea:6c:21:85:32:59:60:16:2f:df:27:
                    f6:cc:4d:76:6d:b4:fe:b7:a8:06:28:91:05:c3:b7:
                    89:49:cb:13:26:8d:ca:65:b0:b5:e6:f9:e6:bb:f7:
                    b1:fe:f0:6d:b7:77:ee:4d:f5:8f:12:c9:8a:5a:96:
                    2c:10:d4:a2:b9:d3:20:a7:1c:e8:48:d0:2d:c1:65:
                    74:cd:fa:13:21:97:b6:21:8a:39:5d:d3:d5:bf:e9:
                    ae:8f:d3:7a:7a:13:c8:4b:71:33:4c:47:b7:42:64:
                    d9:70:b2:42:0d:da:64:43:8c:b8:0d:8d:5f:84:92:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:8F:2B:D2:3E:E6:4B:A9:8A:E2:55:CF:B9:A5:22:8D:97:5A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eda7ec76-b41f-3444-91cd-05cce2ec7b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0a:b0:9f:4f:09:c9:0c:86:87:d8:23:9d:3e:f4:2f:e7:ca:
         0b:9f:28:71:67:06:b8:16:23:ed:21:a3:40:c7:33:1e:84:38:
         bb:96:d0:79:e3:b7:ef:e9:e3:56:e3:8f:e8:41:57:48:14:f1:
         1b:08:b6:a3:63:7c:b3:69:31:80:3d:09:1a:19:3d:c2:0e:28:
         6e:56:5f:bf:5a:fe:f9:d6:a1:34:4a:75:61:08:b2:02:9c:cf:
         9b:b4:e7:73:12:12:76:f2:ee:d4:22:84:c9:ba:4e:9e:04:a9:
         98:4a:ca:a0:a5:86:4c:53:81:bc:43:26:cf:2b:fe:79:1f:95:
         71:7d:89:a2:9f:3a:d2:44:f1:7f:90:bf:cf:99:57:e0:d3:64:
         47:5e:8b:e0:bf:06:33:4d:22:e5:9b:b3:64:1c:32:e1:4e:44:
         43:27:82:9e:eb:8f:e4:2d:bf:e5:e0:28:bf:0a:a8:9e:7f:98:
         56:59:93:7a:25:ab:4a:68:c8:57:a3:8c:4a:25:f3:a1:29:3e:
         08:48:59:9b:84:a3:3a:a7:57:1d:41:ea:86:48:94:a7:0a:9f:
         bc:df:43:69:6d:2d:6e:53:28:91:1a:69:2f:57:ab:78:27:7a:
         eb:69:53:81:1b:03:1c:a4:d5:76:f0:9e:51:69:1b:5c:b1:47:
         be:2d:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:16:17 2025 by rpki-client