Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b8a730d1-ca9f-3260-b12a-97f123d3893c.roa
File:                     b8a730d1-ca9f-3260-b12a-97f123d3893c.roa (raw, json)
Hash identifier:          gZa/9+flP9aB8C4J1QNo/c2oRXpGGgUUEyoaeaSAFf8=
Subject key identifier:   AC:AA:13:BF:E3:CE:D1:10:9A:3B:92:75:10:7E:DA:1A:A1:4B:3A:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A82AB45F3125312E10C064630
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b8a730d1-ca9f-3260-b12a-97f123d3893c.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     2914
IP address blocks:        72.9.168.0/22 maxlen: 22
                          72.9.172.0/22 maxlen: 22
                          72.9.176.0/22 maxlen: 22
                          72.9.184.0/22 maxlen: 22
                          72.9.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:45:f3:12:53:12:e1:0c:06:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=94b1d20e-5cdc-4b44-9c85-0d792e842cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:ea:c9:35:0c:63:a8:43:bc:e2:7e:ce:70:
                    d0:2f:a3:e3:5c:66:89:9f:6d:47:94:6f:3d:23:76:
                    f3:68:9b:f7:8e:8a:c6:89:f4:8e:3b:5a:8d:de:d9:
                    69:d6:e7:16:a8:6f:e3:af:5f:03:25:d0:a1:bb:0c:
                    86:ce:ff:d7:2b:6c:ab:e7:a4:dd:17:8b:33:bb:49:
                    2e:3f:ed:ca:3e:17:56:b7:73:05:3f:cf:7b:df:3e:
                    d3:4a:05:71:53:dc:68:a8:3d:7a:8f:13:83:c8:98:
                    d0:48:a6:dd:a1:7d:2d:98:1f:24:28:b1:f3:b2:e6:
                    cb:85:62:ff:74:7e:c3:22:f3:56:3f:5b:9f:86:98:
                    99:86:c0:53:a1:31:61:b9:fc:3b:05:0b:6d:07:31:
                    1c:70:4a:54:fa:92:48:88:73:76:1f:c6:50:e4:ac:
                    87:fe:26:8c:08:a8:58:05:3a:51:da:e0:75:c0:8c:
                    cb:88:48:db:f5:88:61:41:28:31:a0:09:f8:64:01:
                    aa:77:d9:14:53:41:3c:8e:a9:d7:7c:28:dc:55:d7:
                    da:97:e0:61:2c:7d:03:c0:14:1f:ef:8c:2f:69:75:
                    7e:61:28:52:ae:ae:fb:73:3d:68:3f:0e:b8:98:04:
                    33:bd:ee:47:c8:72:da:b0:c7:2d:87:f1:47:46:02:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AA:13:BF:E3:CE:D1:10:9A:3B:92:75:10:7E:DA:1A:A1:4B:3A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b8a730d1-ca9f-3260-b12a-97f123d3893c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.168.0-72.9.179.255
                  72.9.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:38:03:87:52:8a:7f:79:e2:57:fd:ad:13:45:05:3a:c7:81:
         6a:f1:81:73:c5:79:37:db:6a:03:33:fe:93:b9:67:71:56:37:
         25:3c:9a:95:6e:01:7b:65:8a:86:1b:b6:80:52:69:8d:83:3a:
         fa:ae:3a:ef:b9:c3:29:be:7d:33:42:94:56:2a:50:02:fe:fc:
         cc:5c:ea:f2:7a:3d:e7:0f:22:f2:38:20:80:ca:66:c2:0b:46:
         cf:35:cd:90:27:38:d3:9a:81:6a:3d:67:cb:d6:ce:7e:b5:6b:
         33:a3:6e:25:36:9e:a0:8f:fd:29:d1:44:da:35:1d:7e:ea:4f:
         5d:f6:ac:42:9b:6e:29:d4:0b:6c:22:f5:7c:2b:99:7a:f3:8f:
         ed:10:22:a7:1d:3a:38:55:a9:59:ff:61:fe:e6:74:44:20:13:
         53:95:4b:68:a4:55:83:e9:6b:b5:40:88:ab:a5:95:21:93:68:
         b4:37:a2:bc:f5:55:05:ca:fc:c1:9a:88:a2:54:01:f1:4f:4a:
         b3:89:28:7a:5c:16:d0:dd:05:f9:96:b1:18:ac:ab:16:13:78:
         2a:02:91:a6:14:79:0a:89:d0:d4:02:3c:97:ec:a2:f3:78:d4:
         ed:6c:bf:a5:b6:de:e2:dc:0b:8d:11:d3:68:6c:d7:d6:2c:41:
         d1:03:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:33 2025 by rpki-client