Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/46995dbb-97d6-3712-87ce-2048ddabbdd8.roa
File:                     46995dbb-97d6-3712-87ce-2048ddabbdd8.roa (raw, json)
Hash identifier:          4RoofvaEmFlVuwdFG0M0qx4dGRLoSJYrmDtjJcmRN9s=
Subject key identifier:   D6:50:13:C5:72:33:EC:D0:87:F6:5B:40:97:0F:BE:3A:1C:EE:D6:E0
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584A23C0027F13AFC99CD6BCB180
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/46995dbb-97d6-3712-87ce-2048ddabbdd8.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13807
IP address blocks:        24.72.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:02:7f:13:af:c9:9c:d6:bc:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=d3993047-4983-4f9b-9545-832d9f74f98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:a9:54:dd:ea:4c:e3:53:b2:ea:ce:d2:70:
                    54:c9:fa:c0:13:2d:1b:77:01:0a:15:f0:ca:54:c4:
                    75:8c:0e:c9:98:d5:01:5c:2f:22:ec:e0:09:53:82:
                    71:f4:db:22:56:7f:85:e7:c5:23:ac:8c:dc:4d:b3:
                    f3:93:b0:9f:51:11:a2:18:47:f8:99:6c:1d:e9:84:
                    e3:0e:35:b8:ae:e1:b1:6d:1e:6e:d2:bb:33:18:c8:
                    69:3b:62:54:8c:b2:00:fc:18:c7:86:a0:b5:00:48:
                    77:1c:99:95:a1:10:9c:05:3b:18:28:83:41:05:22:
                    1a:73:36:64:39:e0:17:df:13:50:f4:37:e7:ce:85:
                    74:0c:18:f9:30:1e:2f:16:02:d7:a7:03:5b:73:26:
                    38:35:78:b2:b0:13:5f:51:8b:1e:fe:a7:01:b4:67:
                    30:73:1e:ca:2d:c0:6c:fb:ff:a9:f2:e1:e5:ff:fb:
                    ba:60:95:73:01:f6:22:11:44:9c:7b:61:0d:4f:98:
                    3f:fd:a8:e4:0c:54:b6:7f:b1:d0:16:e3:27:fa:dd:
                    b9:2c:96:41:74:4a:b9:e7:89:bd:b3:e5:b8:ae:38:
                    91:9b:28:d9:e8:cf:2c:23:30:82:45:ce:07:91:b0:
                    e4:a3:d5:33:b8:5a:88:29:fa:66:5e:df:f2:74:5d:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:50:13:C5:72:33:EC:D0:87:F6:5B:40:97:0F:BE:3A:1C:EE:D6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/46995dbb-97d6-3712-87ce-2048ddabbdd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.72.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:7a:c2:0e:db:02:4c:72:e8:44:2a:6a:0e:e5:48:bf:e9:
         23:df:b3:ba:d4:63:72:ef:cf:cc:2a:eb:31:c7:50:09:71:fd:
         01:14:fe:44:8f:1b:42:30:9c:84:e7:54:77:a6:f7:d0:76:cd:
         43:22:6a:84:6c:dd:6e:7e:67:f8:2e:63:1e:19:17:37:c5:ea:
         a5:70:3a:b9:ec:96:7f:cf:cf:79:8d:6e:72:d9:d8:ee:c0:07:
         5c:56:25:de:86:e5:c8:fb:b0:f3:25:e7:48:a2:02:9a:da:fa:
         e4:a1:2a:ae:7a:35:02:5c:6a:eb:c5:ac:ff:2e:b5:b5:89:ee:
         9f:74:bf:2c:af:bc:cd:bd:ab:d0:db:d7:b2:ad:07:11:1e:29:
         f0:46:6b:0e:4a:4c:36:7a:52:a8:3a:4c:ea:d6:5c:b5:bd:df:
         4b:f2:89:c5:66:38:5a:08:f5:9a:ff:fc:f8:1f:3e:04:8f:0b:
         3b:28:8d:6b:46:ff:0b:65:80:f7:8c:9a:09:5c:58:30:12:e9:
         79:a9:b6:16:2c:a5:9a:7f:ed:22:32:f6:8d:be:29:25:21:ac:
         7d:1e:72:54:04:26:62:81:c6:37:39:55:83:31:9e:48:e8:82:
         3b:ed:7b:50:58:1a:cc:40:b6:b5:cf:ba:6c:5c:aa:d8:58:f4:
         8b:30:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:41:03 2025 by rpki-client