Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/f09590a2-b836-314a-8783-ae249965a74e.roa
File:                     f09590a2-b836-314a-8783-ae249965a74e.roa (raw, json)
Hash identifier:          UilA3++QLou7QD7HvS8kVv54SGjYfGfdR7tivtXb6J4=
Subject key identifier:   96:0B:B6:BC:A2:A8:CD:55:3A:A6:84:E3:3B:D3:32:C5:5B:A9:F7:BE
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584AB91B983EA6EB8B43928194C0
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/f09590a2-b836-314a-8783-ae249965a74e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     27419
IP address blocks:        162.216.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:98:3e:a6:eb:8b:43:92:81:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ec1898e7-39c0-4322-b9f9-7daa90315b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:d8:87:2f:6d:e3:27:d6:87:9c:19:c6:b1:
                    13:42:ed:1c:6c:1d:bf:4a:5e:b8:df:c2:5f:a8:5e:
                    fc:61:95:91:72:ca:78:f9:2c:6a:f1:49:75:0d:ba:
                    15:49:ca:bd:57:ff:58:14:d3:20:ed:39:b2:6a:77:
                    28:ee:0f:f8:42:a1:80:53:d9:0b:84:75:44:34:91:
                    d6:ab:21:19:e5:2d:ce:83:d8:1b:60:a9:85:b3:4a:
                    19:d5:58:f7:ec:a9:ab:c3:f1:94:39:aa:17:d1:1c:
                    17:46:09:47:88:7e:14:07:1d:45:63:f6:c8:f0:54:
                    2a:2d:63:fc:40:bd:3f:92:bb:ad:e2:59:22:89:44:
                    b6:71:e0:64:dd:a6:be:5d:a5:18:a5:11:20:6e:9c:
                    8e:56:40:ff:4b:9b:bd:0b:08:38:6a:b6:76:69:88:
                    30:a9:29:a0:2d:47:cd:e8:8d:b3:03:f0:64:44:fe:
                    26:45:83:29:d4:d7:5d:38:40:eb:46:ef:49:9d:7b:
                    50:6f:39:b3:75:25:75:41:a4:5c:46:17:e4:d9:21:
                    5c:31:35:ba:f5:de:f3:72:e5:68:26:53:0d:f9:a5:
                    49:17:72:4b:53:7a:83:20:ed:22:18:92:a8:fc:11:
                    84:96:55:44:b3:c8:03:c3:4f:b9:c7:bc:12:c3:3c:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:B6:BC:A2:A8:CD:55:3A:A6:84:E3:3B:D3:32:C5:5B:A9:F7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/f09590a2-b836-314a-8783-ae249965a74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d5:90:6d:98:2b:90:e9:07:3c:a7:d7:a1:19:08:f6:df:5a:
         16:bf:8a:bb:6e:d1:73:85:b4:02:1f:3d:50:2a:fd:33:d8:16:
         41:4a:13:7b:66:c5:e0:5c:f2:fd:80:21:c6:05:bf:ea:3c:b3:
         e6:14:b2:0a:d2:32:ba:f4:4a:e6:67:d0:fc:95:2e:05:3c:28:
         5a:8a:27:30:8c:72:d5:90:75:76:20:b2:d2:7d:41:5b:c4:18:
         9e:2c:d7:31:65:d3:a4:93:c2:67:ae:94:d3:af:71:55:9c:0f:
         25:01:f0:08:34:7a:f1:d7:c5:ad:5d:1d:37:46:66:46:4e:8e:
         45:49:86:2a:fb:c0:77:9e:8c:39:3e:82:2a:26:ba:f9:4b:a0:
         5a:dd:56:69:c1:8e:c8:5b:e9:2d:f3:3d:99:43:fb:e7:ff:f9:
         9f:cf:9b:a3:60:6d:42:18:66:10:b0:71:da:d5:a9:ca:34:3d:
         c6:a3:d5:52:7b:ff:63:7c:b2:bb:0a:50:83:c1:4b:5f:0c:19:
         05:bb:3a:57:1a:1d:48:c0:46:14:27:e2:04:40:3a:9c:dd:10:
         3f:ba:aa:bd:ba:b3:a9:13:e5:1c:34:6a:be:b5:49:b0:37:16:
         24:0d:6d:33:e8:28:4e:07:f1:37:29:a4:77:ec:46:3e:84:d1:
         36:26:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:45 2025 by rpki-client