Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa
File:                     4931962f-9845-3178-a5e1-2dfe784bd128.roa (raw, json)
Hash identifier:          MCd2IBOD9jq/w0sDygoHPoUJWJxrJl3lumneJZzgaAE=
Subject key identifier:   C1:38:C3:BF:E3:36:34:A4:69:BE:98:AF:7D:A7:AF:B3:46:81:C8:BB
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584AA85BB0A473BC345FDC0BC280
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     394391
IP address blocks:        72.233.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b0:a4:73:bc:34:5f:dc:0b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=ccd9f190-807e-4215-88cf-3fe00b7835cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:cc:f9:94:56:ae:ed:b2:0b:90:5c:30:56:
                    89:70:67:8e:0f:dd:5f:14:26:9e:98:76:82:68:88:
                    11:7d:7a:a4:fc:1b:94:03:4b:7f:e2:23:3d:03:5d:
                    3c:11:eb:0f:0c:f4:a1:5e:6e:52:b5:af:ee:49:ab:
                    bb:00:82:20:4e:e8:57:9b:91:34:4f:b2:c4:2c:be:
                    82:57:02:9d:81:f4:ed:33:66:3d:63:bf:da:46:9d:
                    62:b1:4a:e8:76:69:96:81:a4:7c:bb:77:c4:64:de:
                    6a:02:a3:7b:ab:62:f4:a1:9e:ff:86:9e:72:c3:65:
                    41:2d:d3:6e:50:93:7e:d3:ab:a8:a0:56:bc:79:6a:
                    fe:9e:e2:09:97:8a:fe:9a:7c:73:10:9a:fe:bc:65:
                    98:6e:3f:33:ab:81:ae:77:e6:ce:05:bf:12:df:16:
                    d6:29:a5:87:f3:ef:cf:a9:57:5e:35:18:c0:17:04:
                    0b:1f:07:41:31:27:9a:57:29:63:11:9a:23:84:d6:
                    fb:9a:64:4a:52:e8:1a:0f:cd:ef:ad:91:21:da:51:
                    ad:56:6d:ab:54:16:1e:77:71:7e:d1:d4:c3:83:7f:
                    ff:63:b1:1e:7d:1c:63:fe:df:89:e0:45:2a:27:b3:
                    b9:ff:18:c4:29:5e:71:dc:8b:62:43:41:9f:e5:e0:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:C3:BF:E3:36:34:A4:69:BE:98:AF:7D:A7:AF:B3:46:81:C8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:51:bd:43:8b:39:24:5d:2d:70:18:2d:46:34:93:e8:4d:09:
         09:71:0a:e1:26:77:e7:8b:d3:93:ae:bd:75:e7:b6:7c:3f:14:
         7f:e0:b6:8f:8e:5d:f1:c6:8f:cf:a0:e3:67:ca:55:26:cc:45:
         1c:5d:32:b1:60:39:a0:72:93:e9:66:31:6b:66:64:c3:66:80:
         54:aa:7d:0c:53:3d:44:f2:67:d3:52:e8:38:ea:3b:04:46:b6:
         be:ce:1c:a7:e8:7d:46:09:56:44:df:f2:ed:41:2b:a2:5d:ae:
         97:73:53:49:1a:90:bc:e8:55:30:23:c5:f2:b7:94:af:36:5a:
         6a:1a:9e:5b:a9:6c:78:d8:9e:3f:7f:84:d1:c4:1c:eb:f7:5a:
         97:72:0c:fb:2c:ed:19:3e:34:ca:3c:cf:cd:81:e1:71:c5:c5:
         9a:2c:be:52:07:4a:35:92:89:fb:80:3c:25:82:bc:ab:41:8a:
         fd:ad:ee:1d:14:87:14:da:08:a3:8c:37:d7:2e:fa:04:8a:a5:
         04:75:0d:99:53:5d:7c:74:c9:6c:2f:2f:fd:09:45:d4:09:fa:
         63:1b:ba:81:f2:be:66:47:fb:a7:ba:b2:9b:2f:f8:d4:f0:a3:
         01:f0:b1:7d:55:76:59:4c:a2:3e:a5:da:02:10:be:9c:d3:9b:
         cf:4e:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:13 2025 by rpki-client