Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa
File:                     f19facf1-4a12-311e-8e58-61e270fe2255.roa (raw, json)
Hash identifier:          uSF4mg+7qPZEA8AWPTGBDXzhb00/8BruPME/VnvIku8=
Subject key identifier:   F8:4D:9B:A0:02:89:4F:38:E5:80:61:1C:1D:4A:90:7F:6D:18:E7:94
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858499AF48A7B5599C741771FEC80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     11090
IP address blocks:        72.35.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8a:7b:55:99:c7:41:77:1f:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=72db3d09-8728-4512-b29a-ccf6d6bf0157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:06:e1:be:59:59:8d:d6:7b:10:0a:a3:b6:
                    e5:b7:b0:ca:be:ba:a8:a3:51:d6:5a:94:6c:ff:b1:
                    2f:a6:3a:37:4b:f0:8f:ca:d6:e9:a7:85:1c:28:ae:
                    b1:e8:63:ec:83:7c:52:c6:63:26:62:e4:3a:90:b7:
                    ca:0d:b7:31:d0:04:aa:66:ff:85:22:0e:fc:de:4c:
                    c5:40:5f:a4:e7:1f:3c:83:41:88:a4:a9:f7:c9:9b:
                    82:88:9f:92:90:75:45:92:5a:7a:6f:9c:e0:2d:1a:
                    73:20:ad:de:b7:12:51:a5:9e:c7:d4:74:ca:44:e4:
                    fa:37:b4:88:c2:92:e2:1d:5e:8a:2f:fe:3b:4d:c3:
                    f7:10:49:eb:27:18:6a:9b:0c:44:ad:18:80:b9:85:
                    17:f3:dc:9a:3c:54:92:8c:a9:a8:e4:76:46:b9:ee:
                    f2:88:72:2f:0b:02:76:a2:60:a5:70:a1:db:58:d7:
                    18:a0:ed:e8:26:13:b7:03:cf:8e:54:0e:31:44:dd:
                    83:ac:94:d4:27:29:d4:5c:0d:04:d0:d4:d3:bf:a7:
                    fd:9a:78:7d:f4:55:e2:d4:56:47:02:e3:87:99:4f:
                    f1:ea:25:60:91:70:5a:d1:54:2f:f5:2b:ba:15:a0:
                    fd:6b:81:91:92:4f:ee:f7:2f:71:a8:a6:db:be:53:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:9B:A0:02:89:4F:38:E5:80:61:1C:1D:4A:90:7F:6D:18:E7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:42:d1:75:dc:2c:ee:6a:80:45:ea:ea:5a:ca:01:b1:eb:dd:
         22:1d:8a:69:fd:dd:e9:59:b5:d5:50:16:2c:a9:5f:1e:75:85:
         b7:62:aa:93:b2:5e:06:bb:42:8c:b2:35:ac:c0:52:68:b2:97:
         35:78:7f:84:c6:08:8e:8a:89:93:76:a8:07:d3:12:e2:61:05:
         6b:63:2a:be:1d:83:e9:57:33:f3:bf:7d:1a:38:e9:f7:02:af:
         b6:ea:09:4d:7e:03:df:9c:4e:a7:07:28:5f:75:b4:15:d5:b6:
         36:e8:fe:1a:98:53:a6:90:45:a7:28:82:5c:7f:21:ae:1d:17:
         af:ea:6a:57:13:f1:e6:d2:5a:8d:66:54:32:36:2f:c6:45:1b:
         7a:fd:d9:14:b8:71:1f:f5:d5:9e:8c:fd:17:48:91:85:33:cb:
         d5:37:b7:b3:65:b6:02:11:dc:da:16:84:92:a9:e6:ec:87:21:
         77:91:83:95:9a:20:55:01:31:fb:81:c4:be:ad:38:ea:ff:fa:
         0d:46:d4:77:9a:1c:be:93:11:80:bd:b3:ad:d7:12:16:0b:44:
         5f:33:bf:b5:1d:f5:fb:b4:7b:08:3a:6a:68:a2:7c:3b:a9:8e:
         f5:82:84:22:99:8c:6f:8a:2c:4f:27:34:32:48:10:65:4d:8b:
         6d:14:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:04:43 2025 by rpki-client