Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7cd6ea48-9473-3990-9e18-cb42f7343f79.roa
File:                     7cd6ea48-9473-3990-9e18-cb42f7343f79.roa (raw, json)
Hash identifier:          nxR18mIR2LUmCAfVRaeGzwmBoKsZnPN3nZCMGWzKDfE=
Subject key identifier:   BF:5F:89:05:A3:23:3E:91:3B:47:6D:31:2E:EE:44:4A:7F:67:BA:23
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A2ABAE9658BFF2F0609F83A40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7cd6ea48-9473-3990-9e18-cb42f7343f79.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     19446
IP address blocks:        104.224.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e9:65:8b:ff:2f:06:09:f8:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=597a55e1-17e1-4f7d-9390-0f0b7bae8e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:6b:df:ae:5e:f8:c8:89:67:d1:c2:df:d2:
                    69:5c:f4:e3:30:a3:51:f4:7c:44:f8:6c:12:94:b4:
                    5e:ed:e7:d7:23:a4:25:41:da:8a:3e:d4:13:5b:6a:
                    b9:8b:5f:87:87:2e:b0:60:58:d9:a8:72:dd:67:3e:
                    5b:20:7f:0e:11:9b:e1:1d:07:c7:51:5a:88:a3:df:
                    8b:bc:76:92:82:32:61:ae:2c:86:91:87:4b:c9:bc:
                    b2:c3:6d:c6:93:5f:56:2d:ed:a8:ce:7f:25:bb:05:
                    7a:57:22:17:d0:b4:3a:af:72:23:35:94:f2:d2:56:
                    43:02:1b:56:ca:e1:b6:63:eb:b3:1e:53:61:96:13:
                    62:df:27:20:13:fa:a6:3e:c8:a5:a2:23:a2:20:65:
                    7a:74:f1:17:87:a7:ad:62:d0:dd:92:db:b2:ea:60:
                    82:ce:8a:09:fb:be:ce:03:bb:aa:8e:0c:69:63:04:
                    9a:90:0c:9c:52:e7:4f:d3:89:8a:58:61:02:14:62:
                    ae:7f:1c:07:75:08:a0:e2:15:66:98:e7:fe:58:15:
                    8c:fb:a3:8a:24:a4:97:5a:26:26:5a:c2:af:72:c1:
                    8c:27:15:c6:5b:aa:86:04:ec:da:bc:2e:3e:fb:06:
                    26:0d:84:28:46:c3:45:0c:d4:e2:50:14:cd:94:31:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:89:05:A3:23:3E:91:3B:47:6D:31:2E:EE:44:4A:7F:67:BA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7cd6ea48-9473-3990-9e18-cb42f7343f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:58:ab:e7:1b:04:ca:a8:53:e8:c0:2c:5e:25:ab:1f:5b:
         cb:4a:1f:40:ad:7e:18:a1:0c:58:03:19:7a:cb:c4:0c:48:79:
         fb:87:ec:af:27:38:9b:8e:37:41:a1:88:56:15:9c:37:5d:3e:
         e8:ae:90:89:59:2c:92:21:89:99:fd:78:e5:19:15:48:2e:30:
         ba:8e:a9:b5:cd:d3:b1:36:7b:46:6e:f9:93:bd:89:2c:2d:24:
         b6:1a:5c:e2:f7:9e:53:77:05:2f:18:d6:8b:61:a9:ff:ee:cf:
         97:aa:ee:62:b3:56:a0:63:4d:9e:77:d4:cd:96:73:01:11:1b:
         9f:38:a6:8e:e7:11:f2:fe:47:d7:a6:fb:d4:96:2f:48:ec:92:
         67:10:12:dd:3a:61:ed:c9:a9:43:e8:d2:28:8f:62:6c:c5:66:
         57:9f:20:a0:9f:ab:12:9c:9b:cb:95:bb:2d:24:ac:87:8b:b8:
         9d:c2:13:ce:a9:14:bc:4d:50:0d:20:22:8d:94:3f:70:7a:2b:
         cf:08:14:9b:60:43:d8:28:13:7e:f5:0e:53:20:17:2f:a7:3a:
         e1:24:8b:42:02:a9:4a:95:bf:d4:f9:1c:25:9e:05:0c:60:a1:
         97:f5:78:bb:b8:93:ce:48:07:f6:65:2c:50:d7:5d:4c:f7:bb:
         1b:83:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:12:12 2025 by rpki-client