Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
File:                     c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json)
Hash identifier:          Qz1W+wytiWpi/wF/kyuO5hcMdPbmmVRZ1fSz4DxHZ9E=
Subject key identifier:   EF:93:BB:CA:B8:D7:B8:69:95:12:7D:B5:7A:9C:67:A1:54:5F:AC:1E
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F4328584AAB265994701E49912ED1B540
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:59:94:70:1e:49:91:2e:d1:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=e7727985-adb5-41f0-a1c9-6a6300a6a57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6a:b8:6c:35:d7:b3:09:e4:f1:35:1e:69:c7:
                    f5:a8:2a:0c:c8:13:7a:71:88:7d:e1:f7:49:6c:e1:
                    6f:d0:dc:3f:67:74:b9:e1:9a:29:d7:80:0f:3f:08:
                    e8:6f:4d:75:44:2b:57:d4:8d:f9:1e:e7:d4:17:a7:
                    fd:ed:29:c8:c9:ff:cf:76:c6:6f:a1:26:00:c7:94:
                    40:0d:ad:40:5d:83:61:20:d2:a7:7c:98:d7:e5:0b:
                    76:cc:b4:9c:13:72:23:12:cc:39:0c:d5:2a:36:27:
                    9a:37:c0:a5:6f:bc:a0:ee:23:ea:eb:18:48:e9:48:
                    69:e2:45:f6:d8:03:14:39:4a:af:fc:33:bf:68:9d:
                    2d:98:fb:cb:61:8f:bc:46:ff:c8:5d:4a:29:be:e7:
                    a1:69:84:02:6a:25:0a:18:66:8a:e5:a6:a4:cc:46:
                    8b:c5:55:d1:7b:4d:0f:e4:cc:d2:c8:5b:03:6f:73:
                    73:3b:42:42:0d:97:87:70:c6:d8:f1:05:17:5b:56:
                    93:10:26:df:ca:6c:21:05:76:a8:79:a2:c8:2e:28:
                    42:ee:ba:39:5e:ad:9b:fe:50:1e:3e:2c:a5:a8:45:
                    58:11:17:9f:0a:8d:18:3a:b4:b1:6f:1c:c4:ec:fd:
                    ca:4a:e4:2e:b9:62:0d:e4:fb:d2:9a:c8:b3:77:c2:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:93:BB:CA:B8:D7:B8:69:95:12:7D:B5:7A:9C:67:A1:54:5F:AC:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:17:23:67:47:53:25:26:32:ce:7c:71:db:58:ec:b1:e9:c4:
         0a:bd:8c:7b:c5:66:af:05:b9:ae:f2:10:03:f7:fe:04:10:9b:
         67:95:f2:5b:d1:12:dd:9a:bf:2f:9e:8c:e6:ac:9a:2c:7b:e6:
         4b:ae:77:89:ef:46:70:2d:cf:39:e6:21:b1:38:c1:52:a7:60:
         31:5d:1b:55:25:b1:d7:53:8f:ef:29:96:91:f6:b4:59:f7:0c:
         21:ab:d3:45:73:0b:ac:5e:d8:c8:0c:6b:c9:d8:12:3c:1c:82:
         5e:1f:1a:fa:78:67:bc:35:15:cc:cc:f3:37:cb:f7:49:73:c5:
         90:33:c0:bd:0d:42:68:7a:bb:65:32:4f:4c:69:e3:7c:bb:bd:
         c6:84:4c:10:b8:84:40:ca:d0:11:bc:68:fa:23:c4:5a:9f:14:
         91:61:db:ad:0a:f6:34:3e:cb:99:b2:9a:3c:12:80:1c:9d:52:
         17:d2:af:21:1c:7e:d8:a8:d4:35:7e:70:c7:ca:6e:99:f8:d1:
         9b:4c:17:d8:e8:d5:8f:6f:3e:6b:88:18:a1:8e:55:35:0f:2e:
         66:cb:a7:51:3c:7e:58:92:7c:92:f3:c2:c1:17:be:eb:52:6c:
         48:90:4c:b8:51:33:2a:e5:69:ef:ee:d9:f3:ad:8a:f2:62:f0:
         a6:97:4c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:48 2025 by rpki-client