Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8112c748-a630-32cb-be77-846a36aaee6b.roa
File:                     8112c748-a630-32cb-be77-846a36aaee6b.roa (raw, json)
Hash identifier:          Tl8n5fNJHiT/RTXfxSqLT0UHfumOZtnaJ4EUG+NKtJ4=
Subject key identifier:   C3:CF:13:D7:A9:2D:D6:EF:97:12:FE:CD:BF:42:6A:5F:48:99:31:92
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849912F28F0C2F19C9BEF17D5A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8112c748-a630-32cb-be77-846a36aaee6b.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     14663
IP address blocks:        72.25.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:28:f0:c2:f1:9c:9b:ef:17:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=36063889-cee5-45fe-9606-eb0e54d448df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:6b:a8:6d:98:ab:ee:1f:58:51:56:58:57:
                    cc:f4:98:e4:79:3e:3f:eb:b7:e3:d9:12:a4:f7:da:
                    54:7d:1b:2d:17:55:f1:3b:d6:0f:d4:59:16:f6:90:
                    a9:cb:d8:31:6a:97:0d:4e:41:58:7a:87:a3:f7:5e:
                    74:24:28:50:92:c2:d6:9a:b6:5c:52:a8:ef:54:cb:
                    3f:b7:82:f4:ed:fa:07:c9:b2:03:82:f4:ad:60:a7:
                    e6:05:e3:1f:2c:b7:0b:f7:09:91:c5:f1:a0:6b:c1:
                    7a:f8:8a:3f:ab:7b:64:a4:74:fb:53:d7:35:50:77:
                    0a:d3:0e:44:bc:dd:16:71:16:e4:85:a1:47:db:64:
                    b9:7b:cb:83:af:46:25:1a:f3:90:56:8f:b5:54:20:
                    62:60:f4:37:75:db:bd:e4:52:16:d1:7d:b4:c5:d4:
                    db:c4:3a:86:d2:21:f9:ab:a6:af:16:c1:31:75:a1:
                    d6:4e:fc:14:74:d1:92:f9:6f:73:ac:e9:74:0a:15:
                    0e:d9:47:36:69:a3:8a:5f:f0:7c:41:19:72:c0:84:
                    94:64:48:47:3f:3d:e5:65:fc:77:9d:99:49:ee:02:
                    48:f4:4c:a5:2a:86:e2:78:da:c6:fb:27:7e:b3:bd:
                    6f:e4:7e:0c:eb:2d:3a:bd:fc:3c:a3:3e:4e:ae:94:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CF:13:D7:A9:2D:D6:EF:97:12:FE:CD:BF:42:6A:5F:48:99:31:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8112c748-a630-32cb-be77-846a36aaee6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:90:48:85:6c:cf:ff:a8:f4:79:f3:b6:d9:1b:65:15:da:
         00:b5:46:e3:ab:e0:ec:51:ed:a8:bf:9e:c1:b9:cf:fd:ec:92:
         e9:90:64:57:ce:f2:9f:29:23:27:0e:a4:44:ea:f6:49:8c:a5:
         e9:a6:82:b4:2b:da:d8:e5:0d:75:3e:0e:57:35:cf:a9:71:65:
         60:b8:df:fe:3b:16:79:fe:9c:e7:c5:f9:22:08:57:73:93:ec:
         54:ce:53:0d:91:af:87:22:32:62:40:be:3b:7d:87:91:49:d8:
         0c:5a:fb:6e:80:f9:28:23:5a:41:7d:57:2d:bb:5f:1b:01:6e:
         3c:b1:67:3a:7e:f8:3d:12:22:ab:8b:8b:0c:28:83:ad:c6:19:
         5c:a6:23:70:00:b5:34:f3:9a:54:31:e5:e7:21:76:4e:6e:de:
         33:81:b3:e1:e8:6c:f7:97:07:2a:65:9f:3f:c5:61:73:bf:a9:
         10:8c:aa:a3:1c:0b:c4:82:33:62:c7:55:e5:e8:bd:fd:98:43:
         03:3c:03:af:9d:c2:ca:77:e8:73:5b:e4:52:e9:77:d4:90:71:
         90:bb:e5:27:66:ad:92:67:23:d1:19:ef:8a:06:ae:34:89:14:
         96:4c:c4:cd:da:28:a2:ad:5b:8b:b3:c6:15:51:35:c2:ec:da:
         f7:d6:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:03:40 2025 by rpki-client