Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa
File:                     25b10e5c-852c-3501-b71d-be7d75acec57.roa (raw, json)
Hash identifier:          03qmVjF9Grx1p3W9Nv3A8Yx/yfIGAsqktG9iLkEFVTE=
Subject key identifier:   6D:57:4F:2F:3D:43:8F:D0:79:F4:80:16:95:E2:04:44:6C:F6:BD:70
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858499AF48B0023F264EBD2E6BF80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     11090
IP address blocks:        72.35.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8b:00:23:f2:64:eb:d2:e6:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=30eea72d-4f75-45ac-b70b-3bd270e8a80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:e1:34:3e:15:8a:3e:19:ca:4d:e3:cb:78:
                    d8:47:60:5a:88:c3:cd:d1:97:83:ea:06:00:50:5f:
                    e1:79:8c:9f:32:29:6a:f6:a9:cf:81:15:ba:61:aa:
                    f4:d8:6a:c2:d8:2e:f4:74:1d:28:2e:4e:fd:90:0f:
                    e3:73:e9:db:0f:2c:d2:49:57:b3:55:f7:c1:40:ad:
                    e1:7b:50:07:fb:72:2c:20:1f:4f:fb:63:28:6e:66:
                    74:77:3b:09:83:dd:ca:20:40:f9:d5:7d:47:41:f2:
                    c4:ff:ed:2b:c9:34:f4:e4:ce:9b:79:75:40:53:0a:
                    5c:8e:b1:58:49:9c:0c:87:51:63:e1:63:2d:ae:1f:
                    18:b9:81:3b:f3:9c:fa:70:52:58:2a:ad:e2:77:28:
                    ab:19:6a:1c:17:18:09:a7:45:86:f6:8d:bb:1b:a7:
                    0c:32:f7:45:20:52:9b:1f:07:2c:9e:28:63:94:f9:
                    67:17:46:ee:3c:e7:50:2f:08:9c:09:0c:5e:10:14:
                    d4:29:d4:39:00:e1:38:c3:3c:89:f3:ff:32:d7:fe:
                    2a:49:61:90:0d:00:d3:b0:cf:e9:05:ca:6c:ee:30:
                    4f:5d:af:a1:7c:0c:bc:73:3c:8e:ea:48:cf:c1:b6:
                    63:62:93:68:af:6f:84:3f:cf:33:0e:4f:16:fc:6d:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:57:4F:2F:3D:43:8F:D0:79:F4:80:16:95:E2:04:44:6C:F6:BD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fa:60:34:3d:e9:d9:e6:a8:25:63:9d:49:66:42:b2:ee:13:
         53:de:70:67:04:32:2b:12:56:58:50:a9:f1:c3:e6:4a:ea:8e:
         fd:de:0c:40:b7:6f:85:1a:b2:e6:32:4f:ac:a5:38:0f:1e:96:
         da:3b:b5:5e:55:77:4d:ba:3c:16:fb:cc:c1:9b:9e:a8:93:5a:
         d3:15:98:6f:74:93:bf:66:85:ce:b0:93:a2:6c:53:74:67:db:
         6b:49:84:0b:1b:c0:b2:9c:4a:a9:4c:7f:6c:6b:66:f5:86:ae:
         a9:81:d6:1b:e3:3c:12:cc:f7:84:48:af:4d:9e:57:85:5b:e1:
         d4:51:98:bd:08:22:07:20:0e:c8:f3:3c:88:43:d7:a6:3e:27:
         e4:58:49:48:4b:ec:d2:41:50:49:e2:51:3a:ec:c8:3c:93:a7:
         26:98:d0:86:d7:99:2c:77:91:60:41:b7:6d:93:79:cc:2b:21:
         e8:65:b7:9e:bf:75:88:16:03:1f:79:65:ac:11:29:2c:7f:54:
         ab:6f:c9:56:ae:cb:d7:81:54:35:fc:39:d0:91:b5:dd:51:3b:
         03:c6:f6:ea:55:0d:9e:ed:80:04:7e:9d:d5:1b:ed:bb:5b:3c:
         a3:68:8a:32:a8:bb:94:48:0e:b4:9d:50:14:21:41:b9:0b:30:
         a8:c1:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:12 2025 by rpki-client