Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02cb9083-1790-3b86-9870-2e69d7095b6c.roa
File:                     02cb9083-1790-3b86-9870-2e69d7095b6c.roa (raw, json)
Hash identifier:          cYo6KNjCv4vUL2JVLw7tlAtFAXAuQngaJEkECMstSWc=
Subject key identifier:   14:9F:09:D3:A4:0A:22:F6:3E:2A:DF:59:21:88:FC:D4:A6:AD:27:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F87A9D8A9C194AD72E95C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02cb9083-1790-3b86-9870-2e69d7095b6c.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     7342
IP address blocks:        64.6.72.7/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:9d:8a:9c:19:4a:d7:2e:95:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=2a036260-5f82-4acd-a006-0924788206e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:3b:de:c9:bc:23:2b:f1:33:f7:ad:6e:17:
                    09:fc:5d:11:e5:2f:cf:15:75:c8:99:bf:81:98:f9:
                    58:1b:7a:d5:64:bd:6c:dc:48:5c:f1:84:c3:89:63:
                    ef:10:16:af:b5:9e:2b:9e:df:3e:6c:98:93:16:73:
                    88:13:a4:a7:7b:da:e2:c2:db:88:7f:ca:7e:c4:f7:
                    c5:64:be:e7:53:9e:ad:5a:86:1d:6c:d5:87:da:cf:
                    c9:7f:6c:17:5f:c2:a8:40:71:ba:76:bd:32:6e:5f:
                    a3:7b:54:84:b3:03:a5:56:30:aa:7e:f7:e1:7c:dd:
                    10:43:91:c1:63:dc:cc:73:ad:68:b5:35:e1:7d:4a:
                    96:84:a4:b2:f8:c2:a8:70:6c:9f:47:1b:12:73:9f:
                    1c:d9:ed:ea:8c:ae:07:fb:88:9e:51:f8:db:7a:65:
                    22:74:a8:c1:de:9e:3f:d9:e5:fc:15:26:8e:32:7d:
                    ff:39:6a:23:8c:55:3a:75:86:f0:cd:b0:df:98:82:
                    37:a5:28:4f:48:df:5c:d7:b5:e0:52:9a:10:2e:05:
                    e4:65:51:21:cd:9c:a9:9c:f9:06:ca:c3:87:5e:4e:
                    5b:37:05:b0:6d:5a:8a:34:04:cc:65:2d:fa:fa:27:
                    9b:3a:6f:8b:27:e1:c7:cc:e4:4e:be:98:07:7e:3a:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9F:09:D3:A4:0A:22:F6:3E:2A:DF:59:21:88:FC:D4:A6:AD:27:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02cb9083-1790-3b86-9870-2e69d7095b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.72.7/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:cb:d0:fc:f2:21:15:6a:0b:d1:3f:11:43:3e:c1:63:61:
         cb:41:b3:f0:41:31:f5:08:31:50:1e:52:90:d5:ef:31:4e:b7:
         18:c8:3d:68:90:19:9b:78:d3:53:aa:5e:e3:90:bd:19:48:1f:
         b9:97:f1:5b:37:47:62:ff:74:6f:82:7c:f8:85:29:5b:64:cd:
         2a:00:31:8e:a2:b8:1f:ff:7f:39:a5:96:a1:e1:40:9c:8c:e7:
         29:30:9f:88:49:cb:12:40:19:0a:b0:c5:65:f9:a0:29:03:b7:
         3c:69:4e:71:6d:31:c3:52:bd:91:f0:98:82:fa:2b:b0:41:8d:
         39:b0:41:77:9d:89:99:21:27:40:a1:56:4d:74:af:57:f6:95:
         20:21:eb:8f:0b:74:16:8f:e9:cc:82:23:ae:82:52:17:af:ab:
         92:0c:3d:45:be:37:e4:9c:01:d6:eb:0e:ea:a6:4f:dd:75:14:
         76:3e:d8:57:cd:26:56:f6:0b:74:b6:4e:d9:ec:f5:2b:e8:89:
         de:32:f2:47:78:86:9b:ed:fa:43:46:0b:e1:f9:89:7c:6b:1d:
         66:3e:a9:d7:04:33:b1:8f:11:32:7f:41:a1:9f:ba:0a:ed:17:
         e4:ec:76:f3:be:7f:87:a1:e6:fb:d2:c0:2d:e7:df:df:dd:e7:
         64:28:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:15:10 2025 by rpki-client