Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
File:                     b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa (raw, json)
Hash identifier:          F60QDo7knlNrj50uHdNP2FDjmoLtEUcfrzD2l/Xf6uc=
Subject key identifier:   69:75:4A:1D:B9:17:6D:2F:4A:B3:60:49:32:0B:B3:D4:D2:2B:4F:F6
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F43285849F9DFC4F5E9CA7CAED3DF9080
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     199925
IP address blocks:        64.72.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c4:f5:e9:ca:7c:ae:d3:df:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=277e82c8-d63a-4cc3-b7b6-ff6936428717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:99:d3:5a:47:71:cf:44:f8:e8:c8:ba:e5:
                    34:96:73:a4:4f:90:02:13:6a:19:92:32:f4:6e:10:
                    93:9e:31:d4:1a:aa:60:35:18:fd:9e:a9:fc:03:09:
                    b0:55:5d:6d:f5:38:7f:49:65:61:4e:34:b0:1c:60:
                    e2:7f:45:ea:a7:88:78:f2:12:30:b4:82:05:19:37:
                    3f:c3:6a:1e:c2:57:7a:31:70:6e:aa:fe:60:f2:94:
                    63:e4:4c:6f:8b:9c:47:81:23:0b:c5:e5:b1:b7:33:
                    1a:1f:32:3c:c3:6a:a2:67:36:cd:d3:cf:84:05:17:
                    37:76:d6:4f:87:88:fd:0e:03:d1:56:3f:94:02:fa:
                    67:d6:ad:58:a6:b5:fc:4d:4a:da:04:20:e4:06:5d:
                    7f:d2:dc:33:3f:2a:9e:d3:79:b4:04:4b:01:15:2e:
                    9f:62:84:42:cc:e4:91:30:49:f5:ad:3b:93:42:23:
                    24:59:7c:30:4b:f4:53:57:39:c5:c0:6e:77:5c:a3:
                    46:bc:80:8c:c5:c3:e1:27:b3:7c:6f:1a:5b:3a:07:
                    d6:bb:ed:8b:37:e8:41:ce:ab:10:db:54:e2:fc:bd:
                    78:9f:13:3d:08:8d:ba:f4:33:35:47:f7:fc:f5:b1:
                    5d:43:0c:e9:9d:bf:ea:1e:66:1c:6a:ae:24:db:5d:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:4A:1D:B9:17:6D:2F:4A:B3:60:49:32:0B:B3:D4:D2:2B:4F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:50:88:b5:c4:8d:1c:65:67:6f:4b:d0:78:62:08:09:9b:
         28:b2:e7:2a:0b:94:54:65:93:90:c0:47:f9:cd:0a:e5:f0:73:
         55:61:3f:94:21:11:e0:da:bb:75:9c:81:c8:bb:51:71:7d:bc:
         0a:23:4c:32:06:61:3f:04:92:de:19:ef:68:49:a0:89:a5:62:
         32:3c:17:76:e5:34:48:a7:b9:f5:d9:1d:67:c7:56:7a:11:5f:
         6f:b6:bc:c6:06:61:16:2f:6b:2d:28:f6:70:8a:2b:92:2e:16:
         4a:7d:e7:ae:7c:b6:bd:8f:e6:2a:71:33:c6:12:dd:c0:c1:5c:
         de:c3:6a:ec:33:de:56:1a:11:57:3a:fb:a2:37:49:a0:d5:6d:
         9b:84:ea:ca:0f:52:bd:dc:4b:66:c4:7c:51:89:dc:60:54:46:
         89:50:53:11:55:77:b0:d7:41:18:15:36:54:d1:29:8f:d9:20:
         a9:fb:1e:67:1a:90:a2:97:df:c8:90:6c:93:fa:b5:1e:2f:72:
         64:a7:c4:f5:0e:ac:f5:9a:20:ba:b1:d6:e3:bf:6f:23:79:cc:
         c6:27:0c:f1:1b:a2:8c:31:3f:67:db:4b:9d:27:da:bc:9c:f3:
         cb:a7:d7:26:86:99:27:f5:af:1b:77:a9:45:1b:29:d6:f0:d1:
         91:76:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:03 2025 by rpki-client