Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/0fc197b1-97ba-3adc-8274-afdfc3baf329.roa
File:                     0fc197b1-97ba-3adc-8274-afdfc3baf329.roa (raw, json)
Hash identifier:          SsqOP/Qyj5HkCNuGg4edvM5vaIK3hbPOgS/GXDc0VgI=
Subject key identifier:   4D:B4:2E:76:1A:C2:1F:EF:3F:C2:BD:B4:9D:2A:EB:D0:A4:B4:E8:D7
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584BBCDADEA48473C2C5E000FF00
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/0fc197b1-97ba-3adc-8274-afdfc3baf329.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     23316
IP address blocks:        72.37.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:de:a4:84:73:c2:c5:e0:00:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=b2ef9fc3-2e63-48c5-9dde-e5256b34f0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:3a:0e:e7:2b:0d:7b:79:99:12:89:0a:1d:
                    6e:f5:11:82:41:c2:c7:13:12:4c:d5:38:17:50:b6:
                    39:77:26:9e:65:df:04:23:30:bd:3c:9d:50:e1:bf:
                    b5:b4:ab:89:f9:63:20:60:75:c9:c5:2d:00:79:43:
                    95:6b:dc:06:ce:0a:b7:c2:a3:12:96:d2:6e:d2:3e:
                    dc:a4:83:23:1f:31:b8:5e:c9:fd:b0:d0:f3:dd:2b:
                    52:bd:b8:90:9e:e8:73:b2:a5:0f:09:43:c8:7a:17:
                    bd:b4:4b:28:09:ff:8e:d3:92:db:67:42:ac:74:a5:
                    66:95:e8:5a:ba:f0:f6:69:1c:ac:f7:52:a9:0f:fb:
                    42:5e:67:d4:c4:06:89:26:33:bf:82:c6:db:1a:18:
                    46:ec:17:76:36:4d:79:1d:bc:41:3f:be:f9:8a:55:
                    6f:4d:0f:bb:cc:7b:31:2b:8d:37:7f:a4:91:bb:eb:
                    74:2f:07:59:24:e1:d4:c7:bc:23:24:8c:7a:c0:11:
                    1d:9a:6c:50:5d:02:09:06:2d:f1:7c:b9:22:e1:48:
                    23:20:06:2e:48:46:c9:cd:ad:23:a4:df:9c:7b:a4:
                    92:c2:05:ad:ae:a6:32:9a:8d:95:4b:03:b3:10:b4:
                    cd:0f:02:7d:cd:87:4b:32:89:b2:f3:5e:54:03:d6:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B4:2E:76:1A:C2:1F:EF:3F:C2:BD:B4:9D:2A:EB:D0:A4:B4:E8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/0fc197b1-97ba-3adc-8274-afdfc3baf329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:86:23:17:f4:67:1e:ae:e0:38:43:8e:0a:58:68:c4:47:
         15:d7:0e:c1:9e:7f:f4:73:70:a1:7d:9c:2f:f5:1a:ce:de:65:
         3a:f1:68:f6:f8:88:35:43:08:81:ed:52:4d:b0:39:e1:b6:62:
         90:ef:23:fd:8d:c6:b5:91:a4:69:d3:ee:92:de:19:1f:f9:c8:
         b5:b1:2f:e3:1b:b3:81:a4:ac:b5:26:66:ad:c7:5e:3e:37:46:
         85:f1:31:6b:08:df:57:91:29:2d:56:2e:72:b9:21:55:46:93:
         b5:10:e8:f9:f7:28:f3:0b:97:a2:43:d5:de:7b:1a:24:49:9b:
         66:d8:a2:6e:19:63:ee:ab:8f:47:59:d6:0a:c6:d3:fc:ad:22:
         8b:d2:30:ec:e7:af:89:c3:00:70:85:23:c8:63:46:9b:ae:e8:
         a0:11:36:4c:da:dc:11:ab:5d:0c:25:24:73:20:a9:d9:81:2b:
         5a:33:3d:75:43:e4:eb:82:29:2b:27:a1:18:7b:a3:96:9a:3e:
         56:4d:0d:ee:f8:a2:c0:82:53:92:b7:c9:f1:96:de:e2:43:ae:
         01:de:19:86:2b:db:53:09:08:27:54:86:37:27:d6:f9:d5:8d:
         a6:50:36:cc:8c:ad:16:88:21:cd:29:46:e4:1c:ec:3f:93:5d:
         a2:32:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:49 2025 by rpki-client