Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b6f08d70-b98f-3232-bf02-aa49267e5045.roa
File:                     b6f08d70-b98f-3232-bf02-aa49267e5045.roa (raw, json)
Hash identifier:          mqNQ2E2HxTG61Y1T2FWkpf6W2pM+AAAFn9NHsOAm46s=
Subject key identifier:   5B:00:EF:FA:FA:4D:B0:4D:68:64:B1:5E:7C:5C:24:47:63:CA:E7:18
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F8F35FB71D42F4122EC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b6f08d70-b98f-3232-bf02-aa49267e5045.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        72.22.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f8:f3:5f:b7:1d:42:f4:12:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fe646824-e219-4894-8e3a-79ab38fd96cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:d1:06:ff:96:d6:5e:e5:b9:28:18:98:d6:
                    2e:8b:3b:9c:5f:fe:c7:a9:84:7e:15:3a:70:02:36:
                    95:d3:e0:b7:11:15:c1:a2:fa:05:6a:76:c8:27:bd:
                    0f:06:6e:14:67:41:68:c8:4c:ef:4b:f9:a2:8e:6f:
                    98:64:37:89:53:ee:6c:0e:dc:ae:63:f5:27:7b:4a:
                    cc:79:50:e6:35:02:1c:00:bb:c0:48:b8:0b:6c:79:
                    1b:c6:c4:96:30:b7:4f:bd:fe:a2:50:aa:81:58:52:
                    56:d5:c5:99:36:77:9d:7e:bf:36:bf:04:f5:25:c8:
                    6a:84:4d:f1:6b:7d:9b:2a:81:92:49:b7:a8:54:b5:
                    e4:8f:1d:1e:cc:65:14:17:11:fe:94:7d:d4:d2:51:
                    8a:ac:08:b1:7b:ad:97:59:45:1e:26:22:99:42:5c:
                    8e:2d:11:04:35:c5:0c:28:a7:1e:68:e8:ee:82:c7:
                    93:81:3e:29:7e:e9:c8:9c:88:e0:43:78:13:a6:93:
                    47:f7:1f:96:bd:e6:44:50:e1:fb:65:43:a0:8e:d9:
                    60:ea:26:ac:1f:eb:9b:60:42:d7:72:9d:fa:26:5f:
                    e6:d1:cd:a5:d7:4a:a2:e0:f3:bd:4d:dd:f0:01:d3:
                    d0:ae:f5:f3:58:6a:84:45:7d:4e:3f:28:c5:98:28:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:00:EF:FA:FA:4D:B0:4D:68:64:B1:5E:7C:5C:24:47:63:CA:E7:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b6f08d70-b98f-3232-bf02-aa49267e5045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:42:6c:5b:ad:c4:f7:5e:f8:7b:c9:a7:b3:0e:38:d1:b0:8f:
         4e:8e:57:f9:62:78:7d:f2:51:45:9c:e7:ad:00:60:30:d0:06:
         0f:a1:82:26:bd:6e:e7:93:3d:03:16:1c:3f:b3:92:a0:ee:85:
         22:aa:d6:71:75:68:5c:4c:20:95:3d:bb:8a:ce:8a:05:49:02:
         d2:5b:d0:db:a6:5b:47:c4:32:0a:53:64:9d:ab:3d:74:3e:f0:
         14:b0:82:c7:2c:21:c8:3b:f2:21:ba:c8:61:8d:6e:8e:9a:ff:
         0d:82:21:03:da:20:41:aa:66:ba:93:3c:2c:2c:48:a8:2b:ba:
         55:da:85:90:2d:e3:17:d8:e6:2c:80:ae:29:71:a7:cc:df:24:
         21:40:2e:f7:0e:86:16:28:d3:c8:39:c0:ce:46:61:ed:62:32:
         df:31:21:a2:05:a2:c6:ee:94:55:c6:bd:d3:df:f2:8c:86:0a:
         5d:15:a4:e8:f7:9b:04:4f:4d:76:ee:7c:2d:90:cd:ca:dd:17:
         ab:6f:2f:34:66:11:3f:a5:f9:65:1e:15:62:8e:a4:72:e6:bc:
         0c:b5:af:b2:7f:1f:01:16:83:8e:63:60:8b:b5:b0:01:ad:d1:
         67:4d:fc:99:79:ab:9d:55:6f:09:80:33:38:62:3f:de:78:68:
         05:e7:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:19:16 2025 by rpki-client