Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
File:                     fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (raw, json)
Hash identifier:          jJLVukKEKGH7UWsb5Siym+zxDfdaNJrWy32pUBPihm4=
Subject key identifier:   8D:A7:2D:BF:D1:23:85:34:1C:7E:A8:BB:8C:0D:58:0E:8C:3D:A7:A5
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584988CF2991A17C083676A54100
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     6122
IP address blocks:        165.206.0.0/16 maxlen: 24
                          207.28.0.0/16 maxlen: 24
                          207.165.0.0/16 maxlen: 24
                          209.56.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:29:91:a1:7c:08:36:76:a5:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=34615602-d255-456c-9770-134cd6d67434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d5:4e:e1:f2:56:8b:72:23:76:1c:b5:9f:
                    73:d6:33:e4:f9:ae:27:ca:c1:9f:2e:18:de:12:c5:
                    fe:60:c2:c3:d9:3d:39:7e:5e:73:34:82:24:3f:b2:
                    72:5c:91:d0:a1:b2:a6:83:19:6b:05:be:e9:f1:97:
                    56:b4:09:b5:1b:42:30:26:8b:76:56:2a:1a:6a:14:
                    a6:b2:81:e7:4f:36:31:50:1c:7a:48:eb:3a:55:9b:
                    0c:15:09:9e:e8:25:8d:d4:93:ce:b0:63:c5:da:a6:
                    01:e9:9d:87:e1:0c:11:cc:95:a7:b0:45:50:ca:7d:
                    ae:26:ee:53:a2:52:41:3d:df:9b:dd:17:fe:04:a9:
                    58:5b:dc:a8:ff:c6:65:85:6a:35:54:a3:87:2a:3c:
                    62:28:55:21:b9:a8:39:1b:b9:51:7b:b6:fc:2f:b2:
                    d8:b0:d9:4d:8b:6f:ad:ce:c7:9d:33:5d:35:81:a8:
                    53:ff:da:37:76:21:38:7f:77:9f:fb:cb:6b:2b:47:
                    44:46:fe:51:90:c3:10:98:15:78:70:a3:29:a9:42:
                    1e:2e:7d:6f:1c:5a:d9:4b:cb:54:fc:87:fb:be:6a:
                    a1:b1:f6:78:9e:30:a7:d3:62:b1:49:8e:bb:cb:a5:
                    1b:e2:e3:0f:a6:85:0e:54:9c:4b:48:b4:ed:e5:e1:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:2D:BF:D1:23:85:34:1C:7E:A8:BB:8C:0D:58:0E:8C:3D:A7:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.206.0.0/16
                  207.28.0.0/16
                  207.165.0.0/16
                  209.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:be:dd:ef:60:1c:0d:00:87:63:1a:2f:75:90:98:3f:9a:2e:
         2c:c5:5a:de:a0:fb:d9:64:e0:96:0d:46:ef:db:03:db:21:9c:
         53:fa:7d:52:68:b8:e6:2d:4f:72:48:b9:af:47:d1:f2:6f:dd:
         5f:3c:f7:17:2a:f5:5f:b9:6e:d1:2c:d4:66:8d:b9:4e:c4:9e:
         9e:e4:20:a0:11:59:3f:40:18:bd:4f:08:2f:17:22:0c:85:a7:
         98:b0:b5:69:8f:19:85:31:04:36:11:66:61:ad:70:bb:42:d5:
         d3:5e:8e:fa:e1:61:3b:6d:cd:30:64:b9:03:4d:69:03:c6:73:
         d4:7c:98:96:0b:28:28:45:75:7b:ba:79:da:ea:2c:18:39:39:
         62:7c:67:99:fc:0e:64:2a:ca:7e:e6:5d:70:d5:1d:3e:5d:93:
         80:f5:e9:31:a2:08:0a:d5:bb:ad:ac:3b:ce:71:80:d5:d6:c9:
         62:0a:f1:8e:2e:f3:a2:03:cb:b3:b8:70:7e:41:41:bf:60:88:
         d2:a6:d7:23:ca:36:e3:5a:ae:a1:84:50:74:1a:90:0a:90:e6:
         5a:8e:0e:bb:c9:8e:eb:d1:b8:ef:ac:9f:1c:c8:0b:8a:73:21:
         9d:c9:f3:6d:2f:98:55:16:ad:4f:20:02:9c:62:4b:bb:2a:b5:
         67:19:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:43 2025 by rpki-client