Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ca74521-24ba-3475-a40c-4b742b6aea7a.roa
File:                     6ca74521-24ba-3475-a40c-4b742b6aea7a.roa (raw, json)
Hash identifier:          fzrClFU0BBzhOQprQrc8cYBPfEbQmPASQcjH/HlraWA=
Subject key identifier:   84:FF:29:0C:4B:A5:EF:B6:8D:3B:9C:7D:86:7E:C9:CD:18:5E:73:A5
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858498339F018D292E22FC0125C00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ca74521-24ba-3475-a40c-4b742b6aea7a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     1239
IP address blocks:        64.22.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f0:18:d2:92:e2:2f:c0:12:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=a9f1d00f-c0f0-445f-acf8-0bb2f11b22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:9a:d8:35:4e:3f:fb:d3:c7:58:f0:9c:73:
                    7a:bf:bc:6f:4e:19:3d:89:0a:46:43:f7:58:c5:62:
                    dd:46:45:85:ed:a2:10:98:26:38:b2:d7:87:75:e4:
                    b1:84:cf:4c:56:dd:7d:e3:08:05:13:b7:c7:57:43:
                    d0:ee:58:c1:5f:6c:75:fa:4f:7e:ca:28:2b:57:26:
                    23:51:c4:e4:49:b2:81:44:f2:8f:70:17:55:d8:b4:
                    60:0d:94:24:1e:87:b5:a6:4d:01:f8:17:d4:12:3a:
                    c9:9d:b6:7a:ad:b1:1e:72:ee:53:06:4c:8f:a8:6f:
                    9d:17:9d:20:55:54:b7:36:72:53:22:38:2c:5b:39:
                    9e:6b:d6:05:59:0e:56:e6:c2:cf:28:e2:24:f4:31:
                    e8:68:c7:7e:93:4c:e2:e7:43:e6:03:00:2e:99:ac:
                    72:d3:ce:21:e6:9e:1c:dd:c4:5c:24:c2:cd:22:10:
                    1f:69:38:b8:5f:fc:62:a6:14:73:3a:f4:6d:31:19:
                    c4:d9:19:7c:94:ae:0f:e1:dc:9f:8f:52:95:aa:a9:
                    6f:b0:7e:78:97:23:00:6c:88:71:d9:33:96:8d:fe:
                    3f:41:06:0a:a9:80:30:6d:5d:b6:2a:c9:0b:b5:e8:
                    ef:95:f6:48:99:49:40:2a:33:1a:2c:cd:ac:c6:ee:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FF:29:0C:4B:A5:EF:B6:8D:3B:9C:7D:86:7E:C9:CD:18:5E:73:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ca74521-24ba-3475-a40c-4b742b6aea7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:2e:a4:60:3a:95:1b:d0:00:f5:c4:91:25:c4:5d:1b:a9:
         e9:97:de:1a:c8:cc:3d:ff:1e:62:a2:29:98:3c:d2:38:94:1d:
         b6:db:8b:ab:8f:ec:e2:d9:af:2c:e9:91:80:e8:ef:41:50:a3:
         07:21:5b:c7:73:74:4a:16:e2:ca:c0:be:45:11:d6:d8:34:e8:
         f2:be:31:8a:07:6e:0e:db:52:5f:e6:42:bd:7a:40:cc:6f:26:
         61:94:16:09:cd:16:2f:3f:4f:81:ee:69:d8:60:ec:fa:77:ad:
         53:b5:f1:5c:cc:06:e4:fc:4c:2b:c2:b0:86:2e:e8:31:05:f4:
         b8:0b:b8:ac:f7:91:56:ff:25:db:de:08:30:7f:73:3b:bf:82:
         e5:3c:e4:20:a7:54:7b:34:9d:a1:5d:c9:b7:e7:31:7a:e1:6d:
         a0:d8:de:e9:a3:9b:e3:4b:d1:43:cc:a2:5f:07:3e:70:8c:1c:
         bc:0a:76:c4:21:9a:f3:6f:c4:b5:98:23:ea:04:21:8e:15:fe:
         40:3f:f0:20:e4:85:b5:65:81:e8:20:37:fe:42:5b:3f:d2:e0:
         25:9f:08:8e:30:ed:c9:99:43:03:48:34:2a:36:91:84:d9:2f:
         fe:f4:f2:8c:93:2b:f0:70:72:72:08:59:10:02:06:81:56:e1:
         0f:5b:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:53:17 2025 by rpki-client