Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
File:                     d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa (raw, json)
Hash identifier:          Slada3Q3dzwETRnVCRolnrLJspPFxPcp4VD73RjCIlE=
Subject key identifier:   1E:18:64:2E:8C:A5:89:A4:4D:6E:32:3C:87:BC:58:E9:D7:05:BB:B9
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584A480AE83FB91C57CD46A1B380
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     19871
IP address blocks:        72.22.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e8:3f:b9:1c:57:cd:46:a1:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=b05aa622-ba45-4c97-a96c-5f33c107a9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:a1:8e:ed:c2:54:51:83:63:2c:1b:9e:b4:
                    d1:6d:44:a4:c1:57:ca:4e:5f:15:ca:39:ca:be:7b:
                    33:03:e6:e4:a3:42:7d:c3:46:0e:c8:00:03:af:96:
                    ea:bd:fe:35:bd:2d:c8:c2:f3:dd:fa:43:4e:f7:24:
                    00:e3:4f:f1:c2:04:4b:d4:2e:3c:c7:33:80:60:79:
                    80:a2:b7:9c:32:4b:07:ca:a0:d2:35:9f:e6:e8:22:
                    9a:a3:d6:2c:b6:8f:a0:59:fd:a3:4c:82:ea:0b:80:
                    1d:aa:c4:56:eb:91:9f:a4:a4:fe:d8:d1:a6:29:0a:
                    1b:ac:6d:cd:af:88:35:72:ec:18:9e:e6:48:27:dd:
                    c0:dc:1e:72:71:a6:a0:08:bd:fd:c8:74:18:b5:df:
                    e6:9c:c8:0d:0f:20:2c:b7:c7:b1:b8:00:74:54:1c:
                    17:2d:4b:17:a6:90:a0:0b:18:fd:e1:e3:96:6a:4d:
                    f6:59:d9:ab:98:fd:e6:07:1a:53:fc:0a:19:4c:1d:
                    3a:45:58:60:9e:e6:e2:bb:cc:b1:8d:54:f7:05:55:
                    ca:b7:72:f9:f9:47:c1:c5:93:55:ef:3b:65:f6:06:
                    be:21:35:2b:48:91:bc:12:10:37:ae:e8:e1:14:c9:
                    55:d2:48:c4:b9:54:b3:23:28:54:4e:13:f5:d5:1f:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:64:2E:8C:A5:89:A4:4D:6E:32:3C:87:BC:58:E9:D7:05:BB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:45:c7:9d:b7:a6:5c:7a:0c:c1:14:e1:eb:c4:9e:9f:25:
         b3:55:58:f2:ca:d7:19:50:32:b9:c4:62:fe:17:dc:25:aa:f0:
         3f:82:67:b1:31:87:fd:ec:85:85:c4:ff:83:0a:59:dc:f7:fe:
         47:e3:bd:6f:94:d0:76:78:29:03:8c:06:98:a4:9f:ea:a8:d0:
         ad:e0:4a:24:69:ca:91:74:e9:6f:f6:d6:84:ca:74:46:3a:4a:
         fe:03:47:da:74:fe:75:16:81:d4:0c:ad:e9:ad:85:7e:02:08:
         5f:f6:42:cb:85:ba:21:83:d1:d0:d8:c0:3b:f6:86:ce:01:2f:
         fe:2d:e1:7d:68:63:1d:06:c9:0d:48:24:ee:5a:13:70:4d:14:
         bd:9c:83:a6:ea:4e:76:3b:44:b0:c3:1c:c2:c8:eb:1c:cf:f3:
         5e:b0:e2:b8:0d:e3:36:14:33:21:ce:c2:d5:d8:51:9f:5a:c2:
         ef:c7:62:ba:61:a0:f1:23:6f:bd:f3:61:c3:3c:fb:41:e7:e8:
         76:8e:9b:be:4b:07:03:6e:06:2a:ae:72:84:56:6d:6a:65:74:
         58:90:8b:cd:03:fb:57:77:44:ee:18:12:6f:bc:38:78:23:a2:
         88:51:86:ee:ef:83:4e:61:7f:cc:27:23:97:60:9e:7d:a5:e0:
         48:aa:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:48:12 2025 by rpki-client