Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa
File:                     a72132db-d78f-356a-8864-94bcb97cca83.roa (raw, json)
Hash identifier:          zcpfpXyM7TBiuPpTxdBXrqa2rrXIOeutITAFO75J5jA=
Subject key identifier:   68:26:52:0F:F5:D3:6E:77:3E:C6:75:E0:BE:D1:08:02:DC:02:77:2B
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584A66C0782BB9B5CA7A158FC400
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     10753
IP address blocks:        66.128.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:78:2b:b9:b5:ca:7a:15:8f:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=53757ebc-070d-40df-a8be-8c949a55c078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5e:5f:5d:10:ec:28:87:28:74:49:07:a5:21:
                    98:53:ec:64:57:f9:e6:05:26:cc:99:e4:a8:17:e9:
                    09:fe:a7:0f:ca:07:2c:64:b3:fc:03:f5:0a:a5:a5:
                    bb:86:bf:7a:b5:21:c1:5b:26:45:77:39:a8:33:c9:
                    69:3c:0b:b0:b9:d6:c2:e1:52:46:70:f3:31:97:47:
                    7f:da:9f:cf:cb:24:2d:72:51:20:c0:f2:3a:80:2e:
                    b5:70:37:8b:67:05:b1:a2:88:66:b3:1e:86:50:ac:
                    3d:6b:c6:51:90:fd:0c:88:74:af:19:bb:7c:a9:c9:
                    23:a4:6a:b2:a9:2b:45:6e:82:69:7e:ee:d6:1c:4b:
                    74:52:31:f2:08:28:d7:36:6a:06:af:08:9d:98:19:
                    07:da:1c:70:dd:57:a4:cb:86:96:c5:85:c7:57:fe:
                    11:46:a4:69:fe:0f:b6:92:c1:cc:fc:4b:fe:3c:4b:
                    a1:52:da:c5:62:8d:da:02:a6:1c:df:98:f4:5a:b3:
                    13:de:7a:8c:65:7d:00:2e:51:46:fd:33:79:9c:e4:
                    89:97:40:dd:d7:a6:23:57:24:12:08:72:be:b4:55:
                    44:f5:31:f9:f1:c4:3e:fd:bf:f1:0d:b2:cc:96:ef:
                    f8:00:5d:b4:0d:1a:c1:50:e3:7d:93:a9:6e:b3:4e:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:52:0F:F5:D3:6E:77:3E:C6:75:E0:BE:D1:08:02:DC:02:77:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:f8:d2:23:89:ec:7a:97:90:f0:a2:86:a0:54:4f:01:4b:
         2b:b6:36:97:8a:c8:cb:b9:96:80:40:92:98:9a:cb:7e:44:03:
         a0:3a:55:ac:e9:fb:2e:bf:ae:e9:1e:06:ce:4b:4a:29:0f:3a:
         d5:b2:99:bf:d0:66:9f:b7:8a:cb:6e:3e:d2:b7:5f:07:c0:02:
         1a:68:d3:6f:1a:69:a1:c4:f6:e7:4c:66:90:ea:17:fb:d3:5e:
         c9:92:c1:a1:d7:e6:86:90:6e:2a:a0:5d:2a:9c:4f:52:94:86:
         64:52:76:39:90:f6:cb:09:3b:d3:ae:4a:79:40:29:9d:c5:0e:
         80:c1:03:f4:ae:a6:f9:5c:d1:70:0c:bf:0d:c3:f0:39:df:26:
         c4:35:20:ac:ff:31:66:f1:84:38:cf:7a:1e:ca:92:41:60:39:
         2e:20:88:cd:82:0b:a5:44:e9:38:9b:1f:c9:2b:23:56:6c:0f:
         f2:95:89:2f:5a:12:94:06:04:5e:e0:ae:a1:c6:b9:5f:fc:31:
         7a:12:03:a9:5b:2a:12:bb:b8:7f:59:c4:50:51:f6:d6:0f:80:
         45:89:1f:31:ce:0c:8b:15:cd:08:8c:1c:1a:ea:70:dc:99:3c:
         86:6a:b0:52:6b:82:6c:e6:15:87:f1:f2:66:1b:83:77:83:79:
         2f:b2:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:30 2025 by rpki-client