Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
File:                     a8a238f7-752f-3b08-9a4a-8c095f31d878.roa (raw, json)
Hash identifier:          Q8wbgaMypjvpo9L8KeeMLqHHGSPU6lATwQiwzSxjk8U=
Subject key identifier:   3A:90:53:DE:B6:13:DB:88:E0:1F:D2:91:36:D9:6C:C4:6B:E5:E6:ED
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584A51D06D19C4084DB07C9843A0
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     36374
IP address blocks:        72.18.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:6d:19:c4:08:4d:b0:7c:98:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=8cd08ee3-8682-4559-aba1-9457077fc100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:41:63:db:07:f8:66:dd:f3:3d:13:e6:3a:
                    a1:b3:3c:bd:8a:de:cd:7b:89:ad:ab:19:41:58:5a:
                    47:f3:eb:75:31:62:6e:eb:b8:8c:29:0a:d6:e9:05:
                    3d:e6:48:24:5c:f5:49:4d:99:d9:5c:26:53:bd:0d:
                    56:1d:f5:29:63:b8:83:7c:b1:a9:2f:d7:a3:6b:d2:
                    9c:47:ef:8f:d1:72:ae:2f:63:41:b1:6f:ab:c1:a2:
                    d7:67:8b:02:64:38:89:ea:d3:f5:fd:1f:a4:1b:77:
                    66:d6:81:6b:3d:51:f1:db:52:02:54:15:bc:c0:a6:
                    51:ff:15:f3:ed:70:b7:7c:71:bd:5e:3c:7e:df:ae:
                    e3:4e:18:d0:ff:a4:db:ea:cc:4a:8a:97:53:5a:f0:
                    b5:d2:ed:27:42:36:65:c1:d9:57:31:da:3d:e8:7d:
                    f6:0c:48:53:7a:ac:c4:ca:f7:fc:07:ae:56:a8:e8:
                    e7:bd:ae:99:3e:25:1b:cc:62:39:2d:2f:0b:9f:bc:
                    34:3d:a5:70:d5:c1:e2:83:03:53:65:53:88:f4:5d:
                    8a:6e:52:b3:c6:b2:2c:4a:1b:2b:02:50:16:e7:c8:
                    75:3e:b2:4c:ef:dd:d5:50:de:b0:60:38:1c:91:fe:
                    e8:46:ee:5d:1f:d2:ee:a9:5c:5c:7c:9b:1e:3f:88:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:90:53:DE:B6:13:DB:88:E0:1F:D2:91:36:D9:6C:C4:6B:E5:E6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:20:a3:d5:fd:0a:ba:25:49:2f:34:57:77:99:f2:26:15:
         f6:5d:55:e2:be:c1:7c:47:69:b2:1b:c3:89:ec:27:0b:11:88:
         02:fc:0d:c3:4c:06:e4:51:fb:c5:f1:ec:ed:28:a0:4c:21:b4:
         0e:9c:20:c4:02:15:22:b8:be:cd:ed:56:4b:94:f0:19:bf:5e:
         b2:17:b5:c7:c8:e1:87:d6:4c:ae:e3:be:2f:d8:fe:1f:42:18:
         43:1d:cc:91:b3:90:cc:8f:95:47:1e:30:f5:24:01:63:0b:6e:
         8e:ca:35:28:0f:05:a4:a1:b8:0d:9b:c5:44:f5:bb:10:92:e9:
         30:fa:41:ca:d9:c8:b5:e1:c0:27:01:49:71:07:74:d1:c6:d2:
         57:1e:4e:a8:94:b5:2c:dc:21:4a:9a:26:be:67:5a:99:18:41:
         23:81:39:95:ef:21:9a:b0:b6:60:36:e4:85:1d:0b:9b:0a:26:
         0e:fe:9e:32:91:e6:de:c3:02:d0:6b:c7:49:25:46:9a:cd:b6:
         c0:85:4a:33:61:34:b7:4e:1f:4d:31:b6:40:a5:77:10:e2:08:
         32:77:54:aa:ab:3d:9d:bd:ae:21:1c:77:af:17:5a:68:f4:1d:
         c2:3e:d7:52:bb:71:c1:a7:37:60:6a:e4:ca:96:5c:0d:6b:80:
         68:d1:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:10:52 2025 by rpki-client