Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
File:                     cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa (raw, json)
Hash identifier:          gqA2rEiPE6n4gK+Sskc1cWVHNMEgJIgoD6THGJAX/Nk=
Subject key identifier:   A9:69:14:4B:AE:9E:E9:22:65:B6:BB:92:C4:FA:C7:0C:B5:5E:77:3E
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584BBCDADCC54F5BFF1F52D7E600
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     23316
IP address blocks:        72.37.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:dc:c5:4f:5b:ff:1f:52:d7:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=c0eeace1-5224-4805-b332-c955597a7f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:6a:c8:99:32:a3:a5:67:28:fa:26:17:06:
                    97:05:62:3e:7d:ea:68:38:d7:45:d8:63:b3:c3:8b:
                    ec:93:2f:be:8d:8e:76:8b:63:74:1b:ca:88:bc:66:
                    45:56:b8:5c:5f:04:47:f3:24:79:10:c8:6f:88:ff:
                    f0:28:fe:11:7a:fd:c5:e8:f9:4f:09:bb:7d:f2:12:
                    96:b4:8c:3f:80:34:47:5b:03:9e:96:63:45:01:2c:
                    91:e5:3e:77:d0:33:5a:ce:77:6e:5f:7b:75:1a:f3:
                    0c:10:7c:cc:b3:7e:6c:04:10:a8:ed:df:c4:9b:ee:
                    7b:f1:f8:50:07:5e:32:b8:50:7e:29:60:09:2f:5d:
                    6e:17:26:a6:0d:0e:b6:18:86:7a:ab:cd:7a:f8:4b:
                    ca:2e:12:2a:67:55:af:60:38:95:b5:0c:0d:b6:88:
                    44:5f:26:7d:d2:51:bb:28:02:0c:37:b6:64:e1:4a:
                    5c:aa:e8:14:3f:a5:9f:8e:c4:7a:11:8c:f5:0a:2d:
                    e0:4b:9a:39:9b:f7:02:c4:ff:d9:35:78:e0:5c:e5:
                    b1:c9:28:c0:90:e3:6d:d6:4c:47:73:c0:10:3b:9d:
                    8e:6d:66:95:ee:08:b0:2b:56:70:33:ab:ae:e9:b0:
                    07:a7:a2:bf:8f:d3:1c:79:f1:82:3b:bf:be:82:cf:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:14:4B:AE:9E:E9:22:65:B6:BB:92:C4:FA:C7:0C:B5:5E:77:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.37.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:10:b3:65:ef:a8:ba:ad:55:7c:17:e1:9f:95:83:33:5b:
         56:aa:60:c2:c8:bb:37:a7:87:96:54:ea:12:d8:63:eb:f5:5a:
         1a:1f:95:d8:d3:4b:dd:8e:d6:e4:8b:5e:95:36:74:ef:06:5a:
         30:a2:5e:6e:cc:48:a3:44:e7:7a:47:89:30:9f:b4:62:e5:31:
         d3:de:af:7a:0f:22:3b:23:9b:f0:99:95:50:e2:f5:5b:44:3d:
         14:fc:90:5e:61:a4:d7:8b:d5:bd:96:d3:af:42:66:f3:54:de:
         38:ab:63:63:07:db:fb:b0:42:f3:de:15:8f:fa:7e:bf:90:26:
         41:03:85:b2:f4:3f:41:67:09:8b:34:4c:47:9d:c9:62:8c:9a:
         46:d4:f6:23:01:b3:e1:b4:d7:ec:74:b2:36:14:7e:ed:7b:07:
         6d:bb:8b:03:ba:59:e3:23:cb:6b:70:5d:c3:47:0e:a1:34:23:
         a1:52:e8:8c:0a:67:9f:82:ef:14:c7:ef:a9:0d:54:34:9a:3e:
         15:31:06:87:8e:e9:dc:00:37:bf:80:2f:7a:9f:5d:b6:3b:4f:
         eb:bf:11:e9:06:7f:84:a2:a8:9f:f7:67:85:c8:aa:e7:40:3f:
         62:87:45:69:82:f1:c0:a6:ed:78:0c:0c:85:2b:8e:79:48:40:
         02:65:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:50:12 2025 by rpki-client