Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37218c55-d824-3949-9e96-a5163f91ae29.roa
File:                     37218c55-d824-3949-9e96-a5163f91ae29.roa (raw, json)
Hash identifier:          czSygImZrWh7r9dimPC0GUf1bhz/XvAx4g3gPa8layg=
Subject key identifier:   55:F4:D6:81:6E:F7:65:07:C2:83:B3:9E:AF:68:5F:03:60:20:E8:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A331ADA130F0CC2E25C2E0700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37218c55-d824-3949-9e96-a5163f91ae29.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     32787
IP address blocks:        72.52.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:da:13:0f:0c:c2:e2:5c:2e:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=bb79f29c-7077-46b6-8da8-5dbe777ecb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:cf:06:8e:c3:21:1b:9d:2f:9d:d2:50:ac:
                    ff:3e:11:cc:0a:b5:fd:d0:0b:a0:f9:ad:a2:f2:dd:
                    27:30:b9:eb:2f:9c:ed:ef:81:51:7b:41:c5:19:b5:
                    aa:7b:c8:f7:7a:dd:b3:ad:d8:2a:84:40:82:a5:dc:
                    65:0d:72:93:27:69:e6:c5:8c:ab:e7:ce:bf:97:20:
                    df:39:fe:25:a9:70:a1:cc:0d:b4:0a:e0:90:5f:7b:
                    78:8f:b8:79:0c:59:97:75:4d:5b:10:bd:82:d1:45:
                    c7:9e:29:c1:eb:d2:91:5d:46:60:63:e4:e7:a4:31:
                    71:bd:7c:6d:ec:75:98:84:d8:72:ad:5f:03:42:92:
                    b2:48:8c:34:e7:a5:54:89:22:6d:42:9e:80:f7:82:
                    56:62:fb:4a:54:88:3b:cf:3e:a3:b7:5c:23:e0:32:
                    9d:e3:b3:79:e7:23:e8:32:a2:bd:22:63:55:97:e4:
                    81:0d:c6:cb:58:e8:e7:bc:9e:c6:14:24:89:e2:70:
                    56:68:b5:23:c0:d0:e8:10:5b:cd:c8:13:44:7c:c2:
                    a6:16:1b:ee:df:32:38:c3:5b:3a:53:68:bd:2c:85:
                    f1:57:e8:d6:7f:b5:23:e3:67:54:71:4a:c4:00:c6:
                    af:c2:bb:c5:4e:ad:f6:42:74:4f:a8:a4:f2:83:c9:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:D6:81:6E:F7:65:07:C2:83:B3:9E:AF:68:5F:03:60:20:E8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37218c55-d824-3949-9e96-a5163f91ae29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:52:cd:77:af:5a:f2:9f:b7:0c:92:3f:b2:be:07:73:1f:30:
         75:19:fb:b1:2b:38:6d:ba:cc:c1:df:3e:02:e1:4e:9e:2a:27:
         d2:35:4a:ca:7d:69:c0:87:11:f5:65:e1:50:96:c9:22:13:e8:
         74:23:9c:ef:40:cc:db:96:8d:19:70:3f:8f:78:36:eb:fe:ca:
         ba:07:df:ec:5f:4d:6e:9f:72:fa:95:2a:f7:47:ef:ac:5c:5d:
         72:d1:3c:83:9f:1c:e9:47:84:7b:92:4a:f2:b4:24:80:09:e5:
         80:ae:79:3c:e5:75:5a:fe:6a:a8:1d:56:2c:7b:c7:e8:8b:84:
         66:dd:44:e6:a5:ff:58:ba:f1:73:08:da:94:07:c4:ce:6a:67:
         2a:c7:6a:23:e9:4f:b7:15:c5:2e:26:41:33:cf:ea:0a:cf:ed:
         0a:68:7e:93:6f:ba:80:36:ec:de:b6:43:84:8a:09:68:6b:32:
         66:2c:e5:18:f0:73:14:a9:22:2e:89:29:51:be:2e:18:7b:83:
         12:36:d9:57:c8:f4:fb:c6:6d:c7:2c:3a:17:ab:e7:62:ef:3e:
         e1:54:30:e6:bb:b6:95:57:af:40:9c:e9:ff:e8:04:c3:52:2a:
         e6:15:c7:f7:e4:68:7c:f5:54:b5:4f:6b:48:4d:bf:91:59:de:
         5f:bd:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:26:27 2025 by rpki-client