Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/761f5dac-073a-38f7-ab88-0d6223aa735a.roa
File:                     761f5dac-073a-38f7-ab88-0d6223aa735a.roa (raw, json)
Hash identifier:          a7zci+lFHq4rzP9e4THhkgS2yfm0sDHBK92myQ9qfuo=
Subject key identifier:   08:8B:F5:3E:CC:A9:7A:06:42:CA:FC:B3:F2:EE:66:53:24:E3:0F:40
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962722D01BAF8D0E113D40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/761f5dac-073a-38f7-ab88-0d6223aa735a.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        72.31.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:27:22:d0:1b:af:8d:0e:11:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a7995c83-1d3c-401c-999c-b09c5c7a858f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:b9:88:7d:2f:d0:53:7d:a0:80:93:43:c6:
                    58:a7:1c:6c:4c:ea:8e:e3:bb:15:e5:c9:54:97:48:
                    40:24:b1:bc:40:71:bf:49:98:83:91:dc:5e:3a:d7:
                    49:36:bf:cf:fc:13:46:fd:88:c4:47:f4:8f:38:c0:
                    78:17:37:12:1d:2e:11:95:ca:db:6d:54:bc:07:a1:
                    fb:ca:7c:1d:34:a2:b3:8c:af:c7:23:93:4d:d3:2c:
                    31:15:9b:59:b7:25:a1:2c:50:12:37:4c:e0:46:1f:
                    a1:5f:93:fe:9c:59:3a:84:92:82:4d:ac:21:52:ea:
                    f9:f9:b1:2a:98:20:87:3b:db:86:fe:78:bf:0a:4f:
                    30:83:3f:29:c0:40:ee:2a:a0:a3:49:85:63:1f:cc:
                    44:f5:0b:f6:cb:2b:43:ed:bf:41:56:b4:eb:44:8f:
                    d6:f2:31:cb:b1:1b:ed:3d:df:ba:48:87:af:52:b4:
                    54:9b:57:b2:9e:9e:08:4c:0d:36:eb:59:4c:60:ff:
                    6c:d0:9b:8c:0f:e0:3f:0e:4e:f4:51:d0:ce:31:53:
                    79:1f:94:d5:78:19:14:d2:2f:6e:6d:d0:0c:c3:ca:
                    90:17:28:c4:08:99:9d:ec:4a:ef:b7:4f:b0:30:5d:
                    ee:ae:ba:3c:88:f5:27:e9:c9:32:99:87:6d:31:d3:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:F5:3E:CC:A9:7A:06:42:CA:FC:B3:F2:EE:66:53:24:E3:0F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/761f5dac-073a-38f7-ab88-0d6223aa735a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:1c:56:69:05:70:e1:96:ad:48:44:ba:09:68:92:13:41:
         21:69:d0:bd:7d:31:ee:ec:68:41:57:d2:41:5d:54:e2:dd:59:
         eb:8b:e6:10:1c:5f:df:cd:b5:4d:8a:a3:90:e6:78:e9:69:d7:
         88:bf:50:72:fb:58:6c:ef:84:ea:33:98:e8:89:d6:e7:be:e5:
         ed:07:07:9c:49:16:53:c0:ee:77:b4:e3:0b:87:fa:88:8c:8d:
         4b:ed:d0:70:a7:a7:68:c5:3d:27:e6:e8:f0:1c:7e:af:58:18:
         02:cc:89:4d:16:88:6c:f8:dc:3a:6a:e4:2f:a4:a3:01:f2:cf:
         74:c8:ab:52:4c:b5:fd:c3:cc:b5:4e:c7:0c:02:8c:fc:24:59:
         a5:0a:b4:66:11:8f:c2:ab:29:a3:d9:b1:b1:c4:c8:26:4e:07:
         96:a1:8c:a6:f2:b6:8e:f0:2b:35:5a:60:5c:53:66:8f:49:dc:
         99:9d:0e:cb:f6:0f:fa:bc:b3:b6:17:21:6e:fd:ee:f2:07:8e:
         fd:d0:7f:24:35:78:3d:7c:95:ed:84:e6:0e:35:f2:4d:11:7a:
         91:20:21:be:67:e9:5c:28:1f:40:57:f1:72:01:cc:a4:54:0e:
         23:c3:bc:40:92:38:0a:be:ec:0e:ec:3d:7b:36:31:f4:b7:3f:
         6f:50:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:21 2025 by rpki-client