Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
File:                     703f5f39-4ca1-3844-a475-708e53f14853.roa (raw, json)
Hash identifier:          eV+OcuzAuUOggQM0xukHrBcuTJnQQvqyjQzN3D1nW7w=
Subject key identifier:   D9:6D:7F:52:47:47:03:8A:47:0C:DA:B8:2C:39:1E:70:0D:3C:44:12
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584A386FA3442BCC9C12BFE5B1E0
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
Signing time:             Tue 17 Jun 2025 10:49:24 +0000
ROA not before:           Tue 17 Jun 2025 10:49:24 +0000
ROA not after:            Mon 15 Sep 2025 10:49:24 +0000
asID:                     36114
IP address blocks:        72.46.128.0/22 maxlen: 24
                          76.164.192.0/22 maxlen: 24
                          76.164.206.0/23 maxlen: 24
                          104.143.10.0/23 maxlen: 24
                          2605:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:6f:a3:44:2b:cc:9c:12:bf:e5:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Jun 17 10:49:24 2025 GMT
            Not After : Sep 15 10:49:24 2025 GMT
        Subject: CN=8eb35598-c6d2-42d5-859e-c2116b27ff86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:28:eb:e0:f2:82:95:33:24:a3:c0:62:5e:
                    fa:65:8a:19:5e:67:9c:bd:b8:5a:9d:4b:54:07:c9:
                    a2:14:6b:52:0c:44:3c:e1:81:65:7d:4c:fd:fa:96:
                    db:12:37:6a:83:39:73:48:d3:e3:6b:96:56:8c:26:
                    08:fb:a7:59:78:a3:44:71:4e:52:b0:89:f4:f7:a3:
                    bd:38:9d:a2:e5:5f:7c:f7:af:17:b4:2f:ac:ea:8b:
                    71:37:14:ca:ad:02:2b:e0:59:80:b6:73:ba:f3:bf:
                    55:fb:1c:11:22:18:7d:b2:be:2b:84:36:96:d4:07:
                    18:89:2b:10:01:60:09:a9:ed:70:b2:c3:b5:d0:4a:
                    7b:60:94:61:5b:5a:da:a5:2c:b3:dc:d5:32:62:46:
                    20:40:08:c2:c5:dd:66:a7:6d:ee:e6:ac:59:47:5b:
                    8c:cd:49:bb:32:ca:3c:fa:8c:79:71:ec:9e:b6:d7:
                    58:54:a9:00:7e:e5:b8:7d:0e:76:37:27:cd:33:15:
                    0b:38:3d:c1:17:ae:cb:38:bd:d3:11:1e:3b:67:48:
                    d9:6f:d8:52:14:e0:2a:8f:fb:fb:61:50:d2:95:b0:
                    b2:d0:c6:08:59:84:c3:dd:f9:57:47:28:95:c4:06:
                    b5:aa:fd:73:57:f3:1a:63:98:95:df:44:43:9e:58:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6D:7F:52:47:47:03:8A:47:0C:DA:B8:2C:39:1E:70:0D:3C:44:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/22
                  76.164.192.0/22
                  76.164.206.0/23
                  104.143.10.0/23
                IPv6:
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:cc:2e:a6:71:d4:92:98:98:b8:2d:29:5d:31:c2:8f:c5:
         db:40:3c:72:37:c1:40:f3:11:8b:5f:0b:51:f6:10:43:e6:02:
         6a:88:db:42:3a:08:bc:d9:1f:c5:3c:65:43:d0:10:0e:a7:98:
         fa:ac:c7:04:53:83:c4:49:5c:7d:b7:ff:2c:44:0c:6c:97:0f:
         ce:89:f0:b3:4b:9b:bd:63:9a:ee:06:3a:98:72:68:40:7a:8c:
         ae:e2:07:8b:6e:e3:51:d5:0b:a3:c6:b3:7a:1b:72:34:d8:1d:
         fe:f6:62:dc:36:f0:59:1f:ba:4c:5f:43:f7:05:93:e2:21:04:
         d6:a8:38:a7:fa:59:e5:a5:05:cc:37:f2:4d:93:4d:c6:e0:00:
         a7:a2:99:e0:07:95:b4:9a:bc:6e:ab:91:a9:4a:f8:e2:ef:b3:
         78:f2:38:6c:a8:e5:8f:98:03:bf:fa:35:3e:e7:ca:3e:54:d5:
         fb:9f:b1:c0:5a:52:6f:bc:0d:d7:fe:0b:5c:40:dc:aa:bb:a2:
         d5:aa:44:37:03:a8:f2:e6:ea:ac:f6:d1:99:3d:9d:c0:0d:47:
         14:4e:ee:4b:e2:87:ff:22:1d:4e:6e:f9:10:af:0a:c4:81:f8:
         a6:ab:c1:4b:76:d7:fc:db:62:00:9b:53:e2:17:42:6b:b5:9d:
         e3:35:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:01:37 2025 by rpki-client