Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
File:                     93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json)
Hash identifier:          Kg6c7Ski0WLLJ8fSXSmoJfIe5vn7+yfhkSFmxs5tIGA=
Subject key identifier:   46:25:FF:8D:13:5D:F8:2B:26:EA:D6:9E:21:9F:10:E3:A0:A9:35:C7
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584A89A6140EA741B40A38589140
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     16433
IP address blocks:        72.22.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:14:0e:a7:41:b4:0a:38:58:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=9ff67282-b1e6-4905-b1b8-3f0b3bc6c6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:56:3f:fb:5f:37:8d:ec:2e:58:92:09:ab:
                    a7:ef:6f:66:ae:f0:06:af:0b:dc:63:59:e9:07:f4:
                    63:03:47:bd:db:f0:17:e2:c1:f7:d5:67:39:30:fc:
                    56:d0:2b:5d:ed:2a:25:74:0f:ec:d2:bf:6d:6e:75:
                    1f:96:54:9d:8a:74:ad:8b:87:a9:36:2a:95:65:70:
                    a4:bd:59:de:6f:a0:ed:d3:53:bd:05:05:3b:71:67:
                    c5:4c:61:6e:f2:e0:45:4d:b1:ac:29:0a:1d:92:17:
                    64:5a:89:56:25:bc:71:ed:04:f3:13:1c:42:8a:c7:
                    18:33:34:33:25:40:02:bf:71:87:1d:99:ec:cd:8b:
                    ae:e7:cf:02:8f:86:fb:1b:43:33:d2:59:9d:ed:f6:
                    e2:3f:11:6c:77:f5:e0:0d:38:bd:0b:ae:ed:2f:f6:
                    df:02:c1:3e:7a:0d:61:9c:ef:1c:25:9d:7a:53:99:
                    3b:5c:e7:91:d9:ef:21:2e:62:4b:4c:58:22:4f:50:
                    c8:07:bd:60:d8:c3:43:36:23:b4:30:9a:53:5c:07:
                    70:b3:ab:c6:dc:43:5a:b9:ff:2e:e2:40:36:7a:24:
                    d5:b6:2d:e4:43:79:70:6f:94:17:90:0c:5b:ce:4f:
                    6f:66:2e:20:85:70:23:9b:b7:23:b2:80:da:8e:0b:
                    3f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:25:FF:8D:13:5D:F8:2B:26:EA:D6:9E:21:9F:10:E3:A0:A9:35:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:c9:c6:b3:97:b4:d2:8f:ef:9d:ee:46:68:c6:34:f0:fe:
         3b:df:54:0f:27:d9:d9:cc:e9:76:f3:00:67:7d:7f:33:0b:c9:
         3c:9a:56:2a:5a:59:e9:dd:8e:9b:9e:b4:58:f7:c4:3a:02:f9:
         bb:64:1a:d6:6b:77:8d:2c:fc:f1:9a:62:0e:f6:92:23:f5:05:
         b5:e5:28:d1:6e:0d:f7:9c:b5:11:da:bc:70:69:e5:a2:74:2d:
         e6:b8:58:4b:63:2b:94:95:a4:c8:ef:fa:b7:0a:29:cf:b1:c3:
         64:04:c8:ba:b2:ac:3f:5a:94:ae:8d:70:b6:6e:19:2e:c5:39:
         df:3e:0c:9c:20:5e:dd:e3:82:b9:55:5c:d3:20:9f:ad:12:17:
         69:2a:02:be:15:19:0e:26:4e:30:8a:e1:6a:60:f3:e8:29:81:
         1f:d3:ea:f7:1d:37:8d:5c:75:d0:cb:e8:17:1b:45:49:26:46:
         8c:21:b9:2a:b8:8c:cb:6b:be:94:e9:27:1c:e3:8e:82:44:dc:
         25:11:12:12:39:27:aa:74:d0:50:54:39:9c:01:c1:41:45:9f:
         35:f7:a2:a7:d4:a8:4b:c0:25:55:90:bc:7c:e1:02:7f:6b:e0:
         64:1f:a3:1e:c9:66:5d:0d:af:06:fe:37:4f:8f:2a:93:83:21:
         4b:c3:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:34 2025 by rpki-client