Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa
File:                     68b50fb3-4621-32d3-becb-1b9b6e5389be.roa (raw, json)
Hash identifier:          X2obsltBVmy1GP16yh1MFJsu/q5tzkuFOAMy4rGczfQ=
Subject key identifier:   BE:5B:88:78:DD:BC:86:11:6D:CD:13:A2:28:7A:7E:07:BF:AA:4E:95
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584A3901522C7724D910E0BDFC80
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa
Signing time:             Tue 17 Jun 2025 15:44:30 +0000
ROA not before:           Tue 17 Jun 2025 15:44:30 +0000
ROA not after:            Mon 15 Sep 2025 15:44:30 +0000
asID:                     14618
IP address blocks:        72.162.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:01:52:2c:77:24:d9:10:e0:bd:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Jun 17 15:44:30 2025 GMT
            Not After : Sep 15 15:44:30 2025 GMT
        Subject: CN=af713036-b21b-4f99-a737-852c00d594db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:f5:db:f1:53:e2:67:57:45:76:d7:e6:97:
                    7d:64:d5:e1:2f:f3:e8:6a:94:f7:5f:b8:fc:83:58:
                    69:4f:3e:8f:bc:1d:0a:40:92:62:66:f5:d4:0c:34:
                    bd:0a:a1:a1:59:1b:b8:c2:55:14:31:22:fe:a4:41:
                    76:fd:58:50:60:b4:21:bf:4e:09:e6:f9:7a:68:2d:
                    ba:76:f7:d8:7b:45:c7:61:5f:57:8f:64:3c:d1:7e:
                    97:d5:09:3e:a9:43:de:c3:13:3b:12:4c:a4:b8:42:
                    74:6c:95:23:24:f8:fb:3b:5d:77:c6:57:74:26:c6:
                    a6:2f:95:01:26:bf:4e:8a:b2:c2:8a:25:06:9d:07:
                    e2:57:c2:24:f5:d0:0c:aa:8f:f8:28:89:da:29:e8:
                    bc:12:f0:ed:0c:e9:0f:7d:24:8b:aa:28:b5:5f:c1:
                    19:41:37:64:45:79:82:69:20:fe:7d:b6:33:e0:67:
                    ca:b2:7e:61:28:f0:fc:d3:ac:16:04:4f:bc:ae:a7:
                    2c:11:f1:e7:59:9b:67:46:d1:2c:1e:5e:d6:82:59:
                    df:18:00:a6:81:bd:6e:a7:00:66:3d:af:c6:b0:1c:
                    ce:56:73:a8:88:45:8b:43:43:ef:6a:a7:61:77:fd:
                    f6:5d:15:53:71:76:bb:c7:a8:0d:48:e6:28:3c:3f:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:88:78:DD:BC:86:11:6D:CD:13:A2:28:7A:7E:07:BF:AA:4E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:06:90:d6:89:5c:cf:7a:32:70:a0:a0:77:82:b9:15:da:6a:
         a7:37:af:93:c7:3c:44:a3:de:a0:c3:c0:fe:02:da:da:28:bb:
         2b:78:5c:68:ce:37:29:5b:b3:df:6e:67:ea:ad:b9:a9:b7:e1:
         cd:0e:47:57:4d:5c:54:c3:ab:e9:8c:31:07:d1:bb:55:33:13:
         a0:c9:ea:be:84:df:8c:bb:d2:cb:46:4b:1b:1a:33:80:2d:29:
         93:e1:ed:9c:04:c2:1d:26:3b:05:8f:3e:ee:0e:62:ea:f2:7a:
         23:1f:f8:15:37:85:d0:e1:bc:e8:ea:d0:ee:44:a9:bf:05:8d:
         21:04:cf:db:1c:d5:b7:80:f1:61:24:c6:61:12:5e:d3:b4:23:
         82:b9:ea:8f:cf:d6:f1:ac:8a:a8:ee:ca:ef:d8:49:ad:1c:4a:
         ca:a5:a2:dd:a0:42:ac:a0:fe:49:04:ed:ef:ea:45:22:9b:05:
         98:90:f0:a8:ee:19:c4:14:02:a1:6a:8d:3c:85:50:e1:59:f2:
         e5:9f:32:8d:3e:ed:bf:64:e3:2f:84:e6:2c:fc:f0:1a:3a:45:
         91:f5:93:0c:07:12:97:07:06:04:67:71:ff:f0:62:9c:48:f5:
         2b:a2:ec:21:48:f9:f6:6a:f9:ea:ba:20:1b:d4:8f:3b:9a:15:
         8b:01:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:35:19 2025 by rpki-client