Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/552f9d95-d8ab-3925-947f-d45d36608a11.roa
File:                     552f9d95-d8ab-3925-947f-d45d36608a11.roa (raw, json)
Hash identifier:          frTSd66yvRg2NyqdkDidi0Fls7Kv0s1T3ECIAwrXHd4=
Subject key identifier:   11:2E:D6:2C:62:F7:DF:7C:2F:B5:1E:6D:C1:F0:21:5D:80:19:97:D1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AA6F622439D9D537245809980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/552f9d95-d8ab-3925-947f-d45d36608a11.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     64200
IP address blocks:        72.1.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:22:43:9d:9d:53:72:45:80:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=44ce529b-71e7-486f-9cb8-bbf37bb6913f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:cc:10:89:76:0c:50:7f:88:18:d8:fc:92:
                    3e:cc:dc:3f:c7:7d:e4:59:5c:4d:f6:38:28:b4:7e:
                    0a:72:a5:4b:94:e3:40:2e:0c:f5:67:be:0d:20:5f:
                    a9:dc:96:59:39:d9:42:84:4b:c4:e4:2e:22:ce:25:
                    20:fb:44:4f:f7:d1:3d:82:15:96:ef:45:c0:8d:69:
                    da:89:e2:c6:24:14:4a:4b:bb:06:85:13:57:e3:fc:
                    25:1f:f1:0d:cc:cc:e6:f3:6d:cd:6c:e6:36:4f:98:
                    68:d6:82:59:d2:f3:b8:dd:32:f0:8d:e6:37:2e:72:
                    24:00:72:a3:ba:8d:7d:3d:96:f0:92:7b:0d:f7:48:
                    19:6d:17:e2:79:a3:d6:a0:f5:e3:6c:c9:5e:99:d5:
                    c0:a1:1d:8a:28:9e:9a:93:ce:b6:c9:26:1c:b4:85:
                    fa:bb:bc:16:74:f8:f5:ab:08:2b:dd:2e:2d:6e:7a:
                    bb:a7:3d:56:86:0d:08:42:cb:4e:57:31:ba:a2:6f:
                    b2:c4:68:b2:5f:59:82:60:20:cd:0c:30:31:95:0b:
                    c2:c7:bb:42:60:03:05:e3:a2:2f:81:c8:4b:7f:42:
                    a7:ac:62:ba:2b:41:bb:2f:59:de:73:53:02:0c:2c:
                    26:3f:3c:80:e1:bc:4d:1a:c5:e4:1d:e7:ee:3e:85:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2E:D6:2C:62:F7:DF:7C:2F:B5:1E:6D:C1:F0:21:5D:80:19:97:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/552f9d95-d8ab-3925-947f-d45d36608a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:cd:76:99:63:1f:54:c7:c1:3d:5a:94:54:f0:55:78:32:
         40:8a:f9:0c:20:2a:e3:a7:f9:7d:4f:4a:ac:e7:1a:db:3e:7d:
         5c:35:33:ce:3e:e4:5d:ea:70:1b:ab:f6:bc:af:95:9c:94:36:
         17:7e:86:b8:fa:c9:f2:96:bc:30:13:a9:8b:96:44:b3:3f:6c:
         fa:8d:58:b1:80:7f:06:cd:9b:d0:63:d5:61:55:c2:f8:79:f4:
         46:4d:aa:ea:8e:33:c0:84:be:93:52:88:01:00:88:c3:b1:e9:
         c2:70:14:e8:d3:20:1b:91:9a:4b:fd:e2:f9:cb:c5:d1:58:b8:
         34:c4:90:2a:73:19:04:e6:88:66:7f:a2:e6:7d:48:93:b4:cf:
         81:42:99:04:37:a2:a6:40:96:e2:5f:51:d6:cd:f5:1c:16:c1:
         d5:86:66:39:f8:65:0f:ae:e5:a4:9b:f6:38:80:2b:de:3c:b4:
         d2:43:a6:6a:24:9c:90:81:ba:08:b4:c3:44:bd:a8:e2:0b:9e:
         2a:64:9a:3b:ba:7b:f3:35:7b:36:bf:d5:72:d8:df:ba:9a:e1:
         60:f9:37:aa:95:df:e7:a4:42:d0:15:a7:1a:f4:eb:d2:f2:76:
         ed:d2:d0:b6:7d:5a:d2:79:2a:3a:f2:28:d5:f6:30:88:a2:ba:
         e0:23:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:33 2025 by rpki-client