Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/81ad3d89-5c72-3e8a-9d4a-ad58b9b5eb42.roa
File:                     81ad3d89-5c72-3e8a-9d4a-ad58b9b5eb42.roa (raw, json)
Hash identifier:          3BCHCBcOkzgYZreehiN5hI6yxkP5ZBIWgQtXhrAM3LA=
Subject key identifier:   64:72:AD:A6:5A:C9:D8:8A:4D:CE:5C:45:07:90:72:A7:82:B6:2B:11
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584A2ABADE0927FEECCF72886980
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/81ad3d89-5c72-3e8a-9d4a-ad58b9b5eb42.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     40072
IP address blocks:        72.162.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:de:09:27:fe:ec:cf:72:88:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=af0b37c4-013b-414d-80aa-84c1214db211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:0d:55:77:d2:65:bb:0a:4e:6b:92:ae:2a:
                    91:70:56:69:33:93:25:d8:f3:49:de:eb:bc:09:b2:
                    be:fe:3e:5f:c3:a7:fb:ff:3f:0f:c9:58:fb:8e:7c:
                    c3:c2:3d:42:56:f2:40:9e:1f:95:4a:89:fe:be:4a:
                    90:69:7c:af:c7:6f:06:e3:25:7d:61:4d:cd:5c:aa:
                    12:ee:8e:bd:5a:cc:97:5c:17:86:3e:a9:77:bb:8a:
                    b1:11:f3:ac:7f:7e:b7:d0:c8:8e:2d:a9:a2:a3:a2:
                    5f:45:e0:c0:d1:f9:cd:e1:ea:93:f4:02:6b:3c:48:
                    1e:80:57:85:7b:fe:b1:a7:55:b0:ef:65:57:8e:3f:
                    64:f8:19:b0:32:93:17:03:74:69:0a:9a:ee:ba:2c:
                    be:ad:79:c5:42:a3:6d:e0:e7:26:15:f1:af:a0:77:
                    f3:67:22:71:07:e7:65:fd:aa:5d:b0:d5:e7:b4:3b:
                    e0:3c:c0:b0:df:3e:17:d0:be:87:fb:d9:16:70:06:
                    40:ed:19:76:31:d3:8b:6b:de:31:15:8f:2b:a0:3c:
                    36:03:99:f0:c2:8a:81:09:47:85:53:22:54:93:c9:
                    ce:70:2c:46:e6:ce:87:ed:42:d4:98:23:ae:4d:85:
                    de:29:36:ee:26:23:de:86:8c:04:fe:78:31:57:5c:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:AD:A6:5A:C9:D8:8A:4D:CE:5C:45:07:90:72:A7:82:B6:2B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/81ad3d89-5c72-3e8a-9d4a-ad58b9b5eb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:a7:e5:bb:47:76:c9:c7:67:21:ce:6f:e0:da:9c:45:12:
         71:f0:4f:ac:f8:7a:6e:2e:66:7b:09:43:ce:d8:e8:eb:45:0c:
         b5:85:ca:02:27:28:6b:85:24:08:59:91:9d:6c:62:8c:2a:48:
         d0:6b:82:8a:ec:a8:9e:b0:60:d2:02:ea:f8:80:b9:80:25:2c:
         d8:88:30:d4:57:77:77:fc:f5:e6:9a:a7:c1:80:99:59:9b:da:
         8b:59:a3:f3:89:e6:b4:be:da:14:02:5a:6d:61:ff:96:3c:d3:
         5d:2a:6b:73:33:5e:95:46:10:69:af:67:f9:3a:13:36:1c:6a:
         a9:f2:6a:35:cf:53:0d:9e:e3:dd:0c:80:b2:a9:2c:86:58:8f:
         19:bb:22:c4:61:74:ec:92:c5:07:70:4d:8c:69:cb:87:de:3c:
         5f:5c:9d:a8:0e:f4:c4:64:a5:ce:6a:d6:4f:b3:81:67:fb:24:
         2f:b4:64:57:d8:54:be:98:61:6e:57:2e:5c:cd:6f:1f:76:45:
         f0:80:e5:c9:7b:49:6c:e3:5c:d7:93:c2:ee:fb:84:49:cc:0b:
         af:d1:e5:83:0e:d2:e9:e6:2b:79:8a:c7:4a:83:c3:06:40:24:
         f3:06:f1:29:05:db:1d:51:49:31:40:0e:4b:3c:d2:e1:40:a4:
         3d:d9:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:14:02 2025 by rpki-client