Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
File:                     17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa (raw, json)
Hash identifier:          5wRPMPpgPvHaffHlnUGHGJbMBP6ePDeqKLXRjVJ6PqM=
Subject key identifier:   38:65:13:36:D8:77:E5:53:34:2B:C7:BF:8C:4E:B7:D3:63:D4:22:25
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F43285849F71524867C5C574C68BEA080
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     36666
IP address blocks:        72.10.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:24:86:7c:5c:57:4c:68:be:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=bc6b0bec-ff9e-4759-a4d7-96edf5c1e1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:63:25:86:2f:0f:72:db:75:ef:39:52:b6:
                    07:35:b4:7c:e4:55:05:ee:ac:56:93:c6:9c:27:e7:
                    20:20:f8:6a:7d:91:6f:53:e9:ea:66:a9:6e:a6:f8:
                    b9:b3:25:b1:cd:cf:c9:b2:8e:a3:46:d4:0c:34:3c:
                    c6:91:0b:2a:a9:59:a4:5b:82:45:ed:32:28:0f:b3:
                    ba:d9:1f:35:d2:20:5f:62:38:b3:ce:84:e9:af:4e:
                    93:95:4e:20:68:8e:36:fe:40:ef:aa:a3:b3:18:0b:
                    d9:c2:81:96:54:1e:79:0a:23:2c:a1:21:78:a0:bc:
                    74:f7:98:02:a5:69:15:a6:34:37:f9:db:a1:7b:fe:
                    b4:76:98:7d:3c:72:ea:d7:d7:81:36:f3:0d:56:48:
                    8f:bf:cb:7a:2c:16:ee:bc:9e:7f:76:ae:fa:c3:bc:
                    1e:ef:d4:13:34:a0:db:5d:53:c1:20:0d:cc:a9:b4:
                    8c:93:e2:c1:a4:4c:8d:ad:41:8a:be:11:c3:1c:be:
                    d7:e3:e6:0e:7a:31:38:6d:85:2a:26:be:e6:03:24:
                    55:eb:1c:f0:a7:c5:78:ae:10:f8:02:18:5a:2d:ee:
                    e3:ef:89:83:38:2e:63:eb:d7:85:e5:c7:ff:08:94:
                    84:09:b1:f9:8a:ff:41:50:31:0d:4a:5f:90:d3:f5:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:65:13:36:D8:77:E5:53:34:2B:C7:BF:8C:4E:B7:D3:63:D4:22:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bf:37:a4:84:3d:8f:c5:ec:77:30:ad:0d:a4:17:50:4f:32:
         1f:77:10:e0:07:9e:20:e3:ac:25:47:2d:36:a1:c7:7f:fd:66:
         89:54:88:df:cc:79:02:03:c5:c1:c7:fa:45:dd:81:fb:45:48:
         ac:10:ba:42:3e:20:35:94:6c:db:80:48:0f:71:f3:12:58:be:
         0a:6e:97:f7:f9:6d:95:cb:53:02:2a:76:fc:51:88:ce:0f:41:
         79:e4:f6:00:c6:b5:1a:61:a0:ee:17:00:9c:19:e9:61:d0:15:
         e4:5e:76:ed:45:2d:d7:52:e0:ff:2f:88:f5:25:6d:2f:f5:4a:
         53:95:b1:ae:dd:46:f7:b3:1d:e4:4c:54:8c:63:bd:85:81:f2:
         ae:a6:84:a4:d7:ce:c0:dc:b4:36:55:34:52:4f:98:a9:3b:4f:
         bf:91:62:f7:77:ec:35:ef:e0:81:5c:81:25:50:f7:74:b3:51:
         4c:e9:4b:59:d7:f2:65:c1:68:79:bb:e8:f1:5a:87:fa:e9:38:
         a6:8a:d5:3a:a7:64:ee:0f:7d:5a:15:db:99:fd:0e:a1:f6:2f:
         19:18:a2:09:97:96:28:27:aa:3f:f2:a0:c6:ee:56:2c:c9:43:
         38:41:ca:36:7c:1a:f8:10:b5:80:e9:b4:a8:5f:70:74:75:7f:
         b2:ab:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:49:32 2025 by rpki-client