Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
File:                     59a8d12c-2901-3f55-9792-58f7dfe71557.roa (raw, json)
Hash identifier:          pf/quCKHB4wjKX2WcoTJqECt5b3nTw/epaTw4sUSsCo=
Subject key identifier:   22:A4:69:C8:2E:F3:72:8F:58:9C:11:72:E4:ED:39:84:BE:DE:DE:B3
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F43285849C904ECC6D17A36C16EB2D740
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        155.72.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ec:c6:d1:7a:36:c1:6e:b2:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=af5e6131-f075-4946-8aaa-0c39838a465f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:7a:e8:3b:af:de:86:db:fa:ca:4d:b2:4f:
                    0e:43:71:33:82:a7:62:df:bc:31:a2:14:87:3a:77:
                    00:7f:0d:52:fe:c8:60:0c:3a:bd:1b:cd:b4:6f:1f:
                    32:f5:1e:3b:a9:b1:fe:83:50:b2:fd:20:6f:be:e3:
                    5f:0a:6e:ae:08:cd:c2:a3:ba:07:4f:5d:37:63:9a:
                    a1:1a:a7:4a:da:d2:0f:8d:29:63:fe:2e:d9:73:f9:
                    2c:ac:91:04:e6:a5:54:7f:58:3a:f1:69:8e:c1:4f:
                    c9:ad:bd:df:64:63:cd:03:64:96:d9:ef:5a:b8:fd:
                    e0:27:b2:5f:1a:88:0f:a3:77:71:73:61:08:98:1a:
                    af:0a:e2:14:a5:17:9f:a2:06:cb:d8:c8:46:c2:ad:
                    f4:99:7d:45:3a:0e:0f:62:5f:f3:be:ee:18:da:13:
                    00:65:ce:c7:eb:f2:54:07:94:f7:ec:fd:ab:8b:f0:
                    9b:a4:d1:00:cf:22:c7:c2:46:53:53:8a:de:46:33:
                    05:0d:73:d5:74:50:b2:78:82:12:17:c4:25:37:d6:
                    fd:e5:7e:3a:ba:7c:d7:02:9b:09:9a:6b:78:59:5d:
                    8f:06:5c:6e:57:0b:2a:12:84:e8:83:cc:42:3b:7c:
                    16:7b:a7:31:10:d1:a7:09:17:58:c4:b2:ac:b9:99:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A4:69:C8:2E:F3:72:8F:58:9C:11:72:E4:ED:39:84:BE:DE:DE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:90:ef:97:04:e0:c8:ce:a3:c8:c5:9c:07:f7:8a:39:7f:
         25:8b:12:88:c3:e3:e1:e8:f1:c0:2e:b4:13:a8:fa:ef:8c:ad:
         cf:5d:cc:43:50:8b:bd:ee:ad:ca:50:ff:9c:c4:34:97:4b:70:
         b3:69:6d:99:21:bf:8b:3b:d5:66:55:35:a9:cc:d9:63:0f:bd:
         62:a7:bd:31:e3:41:3f:a1:9f:d8:14:7e:28:d4:de:dd:da:40:
         48:42:6f:6d:9f:41:56:2f:e1:60:f6:b5:3b:4c:8f:1d:b8:a5:
         c0:a1:82:29:4f:a6:4e:1c:45:c7:af:f7:f4:da:03:cb:df:d8:
         e9:37:93:b6:76:86:d2:25:a0:52:a2:23:51:20:0c:6c:7b:b4:
         c6:97:0b:66:c6:6a:7d:69:e7:60:a6:d2:f4:a6:65:f0:91:bc:
         c1:d8:6e:12:98:ff:e0:a7:0a:6c:fd:c9:a0:4f:f2:78:c8:ae:
         90:ea:6b:bc:0d:27:79:c1:3f:10:c5:44:63:ac:19:62:66:8b:
         01:92:b6:bb:8f:67:43:01:44:70:9e:0f:7c:67:71:42:9d:01:
         b6:b2:e6:64:c3:99:1b:90:10:09:27:ad:df:d7:33:78:2d:5e:
         ad:e9:f8:62:7e:7f:27:bf:b9:65:e5:38:00:3c:42:27:7f:2d:
         26:9f:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:33:24 2025 by rpki-client