Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/72416cb9-60a1-39c0-9dc7-26af12147953.roa
File:                     72416cb9-60a1-39c0-9dc7-26af12147953.roa (raw, json)
Hash identifier:          k5kYXJFGX0JAM/f8ZII3NVHwwsiXTlntKUouemdwTvE=
Subject key identifier:   CF:08:09:06:73:A1:D1:F9:BC:DF:8B:DE:CB:F5:67:05:35:2C:E4:73
Certificate issuer:       /CN=f7d89bee-0050-454d-8ec8-f07f5a25f2d2
Certificate serial:       010D0C9F43285849A1DE908FA01A860783DEA470
Authority key identifier: 01:5D:01:DE:0C:62:E3:B4:2E:6D:07:C8:62:3B:1D:CC:93:22:B8:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/72416cb9-60a1-39c0-9dc7-26af12147953.roa
Signing time:             Thu 24 Apr 2025 12:27:25 +0000
ROA not before:           Thu 24 Apr 2025 12:27:25 +0000
ROA not after:            Wed 23 Jul 2025 12:27:25 +0000
asID:                     15830
IP address blocks:        198.133.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:de:90:8f:a0:1a:86:07:83:de:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d89bee-0050-454d-8ec8-f07f5a25f2d2
        Validity
            Not Before: Apr 24 12:27:25 2025 GMT
            Not After : Jul 23 12:27:25 2025 GMT
        Subject: CN=bdb9006c-8f77-4e30-8e38-a783d3ce892c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:23:7e:d5:d8:8f:2c:15:bd:25:cc:32:a7:22:
                    40:a7:d8:68:4b:25:5c:86:79:cc:9f:9c:64:79:bf:
                    01:d4:da:66:c6:4b:14:2e:f8:6b:19:18:c4:86:a7:
                    32:69:4e:1a:10:31:ad:0e:15:4b:cd:01:56:3f:86:
                    7e:a7:a7:81:8b:61:7b:ac:d1:9b:bb:f0:16:e0:ea:
                    f5:60:9a:a8:36:3d:16:4c:5a:ed:ea:bf:90:61:09:
                    a2:21:eb:5d:e6:4d:f6:e7:b8:2d:8a:0e:91:06:58:
                    54:60:5c:03:26:6c:67:57:20:6e:b8:11:25:dd:01:
                    12:ae:4a:33:cc:8b:15:12:96:7e:27:71:6a:d2:2c:
                    6a:c8:57:6d:8f:eb:de:24:42:9f:51:50:55:b6:c7:
                    8e:5b:f4:87:2c:90:d9:ed:87:f1:20:13:55:3c:95:
                    28:f2:d9:ea:8b:cf:64:6c:c8:e4:35:fc:2b:e5:23:
                    53:80:30:ff:7e:1d:7e:b2:04:52:7b:4c:13:7e:b9:
                    02:d4:34:9f:eb:65:55:85:fd:03:48:29:e8:07:50:
                    77:91:fd:cb:2a:86:69:4d:82:b4:e0:ea:ee:e0:41:
                    ba:78:7c:ef:45:5c:fe:9d:a7:5d:2b:85:ee:88:ab:
                    42:33:f1:81:d7:63:65:6d:a6:77:62:6d:9e:9c:80:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:08:09:06:73:A1:D1:F9:BC:DF:8B:DE:CB:F5:67:05:35:2C:E4:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/72416cb9-60a1-39c0-9dc7-26af12147953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.crl

            X509v3 Authority Key Identifier:
                keyid:01:5D:01:DE:0C:62:E3:B4:2E:6D:07:C8:62:3B:1D:CC:93:22:B8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7d89bee-0050-454d-8ec8-f07f5a25f2d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1d:bd:f8:bd:54:14:a7:08:33:d0:c3:e6:b8:14:91:69:04:
         dd:9f:bd:4a:02:7c:21:68:02:00:32:a6:a1:d3:4f:be:cd:0d:
         9f:19:63:67:fb:3c:de:c4:00:e2:2b:a9:22:3a:55:7b:a7:e5:
         a6:e4:55:22:a6:2a:e9:6a:af:2a:81:bf:75:64:ce:67:dd:aa:
         41:fc:1e:74:bb:3d:a1:65:a9:57:f6:73:60:59:e2:54:f5:24:
         da:ef:7b:32:55:9c:0c:0b:f9:1f:77:a5:46:db:33:99:ac:7c:
         ea:2a:31:1b:81:ae:19:9d:93:17:9d:b2:0c:4e:fa:e5:80:98:
         74:bc:c0:f1:be:fd:e1:e3:68:53:35:56:a2:62:ab:39:be:8a:
         2d:5b:65:fb:5f:3d:8d:2c:8a:8f:6e:62:36:5a:86:d1:c6:18:
         91:a4:23:8b:81:10:3e:a7:37:70:aa:ef:92:95:d5:bd:d2:78:
         6e:29:8f:31:fe:7d:cf:32:42:9b:18:10:2b:e4:cb:74:66:73:
         bb:cf:1d:4c:6b:c2:0a:c3:2d:13:b9:31:88:6a:8e:76:73:b8:
         66:ca:d5:69:e4:34:e6:5c:44:b1:9f:3d:56:8c:8c:59:a2:62:
         93:62:fd:a1:14:fe:d8:98:5e:0b:e6:d0:33:ba:28:9b:07:51:
         2d:67:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:27 2025 by rpki-client