Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/64033f75-285d-34a2-b22c-2ec0a26a59ea.roa
File:                     64033f75-285d-34a2-b22c-2ec0a26a59ea.roa (raw, json)
Hash identifier:          LYyLu3JHzRS//Rw+Kg08IJf4T9vhtuDZYyQCrnyJqo8=
Subject key identifier:   12:11:23:19:D8:37:02:B3:33:48:3C:21:9D:AD:6C:4C:8E:DD:1C:4A
Certificate issuer:       /CN=583545a7-f188-4e07-8a43-44ccc99e03bb
Certificate serial:       010D0C9F43285849CE9A5AC9C2D7929075C9BF00
Authority key identifier: 48:17:F5:30:41:45:A7:3E:9D:00:C4:F6:5C:EC:37:38:5C:19:7B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/64033f75-285d-34a2-b22c-2ec0a26a59ea.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     11714
IP address blocks:        72.15.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/583545a7-f188-4e07-8a43-44ccc99e03bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/583545a7-f188-4e07-8a43-44ccc99e03bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5a:c9:c2:d7:92:90:75:c9:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583545a7-f188-4e07-8a43-44ccc99e03bb
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=250ab38f-74fd-4ea9-bf6c-4b9563170d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:89:f9:77:7b:e7:8e:95:ec:26:2c:18:62:
                    26:a5:d1:f7:8f:d1:44:fe:44:20:f8:58:f0:a0:a5:
                    06:04:4b:42:5e:77:70:e6:b5:96:49:11:d3:9b:3a:
                    78:aa:c2:f7:cd:02:8a:7e:06:9b:03:e1:68:a4:5d:
                    0c:2b:08:86:0c:47:b6:d0:0e:29:86:54:cb:12:fd:
                    d9:f0:84:66:1f:dd:b1:a2:33:54:70:26:14:c8:ea:
                    15:97:59:78:aa:47:da:c2:fa:40:20:84:a6:ae:05:
                    2e:fe:a8:5d:19:92:d6:fe:bc:b1:d5:17:16:4b:66:
                    17:2d:d7:21:dc:a6:44:61:04:1b:ee:b5:d5:d4:30:
                    93:97:9f:dc:72:35:d8:49:a0:2f:77:49:4c:a0:c7:
                    6c:f9:68:9e:35:57:bd:f2:12:3c:f3:71:80:91:ac:
                    43:69:08:15:e0:82:3a:bb:11:39:60:69:1a:00:3d:
                    a8:be:50:9e:3f:52:26:de:d8:9a:a6:68:8a:45:87:
                    e6:26:18:44:46:38:8e:22:af:60:a5:c3:c1:f7:79:
                    36:28:97:7f:ff:73:b4:91:a9:ce:d4:f4:91:1a:0d:
                    3b:fc:42:36:2c:35:64:7a:af:fc:1e:d0:c0:9a:ec:
                    7b:dc:bf:d4:66:ed:84:14:7c:fe:32:ea:d4:82:bf:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:23:19:D8:37:02:B3:33:48:3C:21:9D:AD:6C:4C:8E:DD:1C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/64033f75-285d-34a2-b22c-2ec0a26a59ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb/583545a7-f188-4e07-8a43-44ccc99e03bb.crl

            X509v3 Authority Key Identifier:
                keyid:48:17:F5:30:41:45:A7:3E:9D:00:C4:F6:5C:EC:37:38:5C:19:7B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/583545a7-f188-4e07-8a43-44ccc99e03bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:7d:ad:70:a6:73:0f:53:07:74:e8:74:e7:29:85:f8:36:
         59:73:17:ee:91:f6:80:c8:9b:20:1c:c0:31:05:65:2a:de:35:
         92:55:4b:d2:72:21:cd:52:06:70:0b:86:ef:b5:b0:2c:ba:58:
         ca:3f:03:e2:c6:00:a8:c7:66:d3:50:de:a3:f2:17:df:ef:24:
         fb:d2:ae:59:c1:cf:5e:b4:08:82:2e:ca:60:d7:8f:68:58:55:
         d5:d9:b6:94:43:5a:db:f3:1f:4d:ae:79:0a:2a:cc:52:dc:1b:
         2e:27:18:8f:03:c6:6c:56:be:db:c2:34:dc:91:e6:4f:00:f6:
         75:24:c9:ee:a0:4a:07:0b:43:63:f3:bb:b3:9a:70:50:87:92:
         ed:61:87:26:13:0d:5a:5a:a8:48:db:f9:af:5b:fa:ea:2e:eb:
         25:af:1c:f6:80:fb:15:84:d3:b5:ba:31:a1:6b:28:fb:15:87:
         c5:aa:ba:f7:fb:ac:c6:3f:18:19:a7:bb:2f:f0:17:ec:01:75:
         46:16:51:6e:ba:96:1b:0e:5f:2d:aa:b2:16:2d:61:2d:1f:82:
         74:3c:75:80:bc:d7:73:32:b5:bf:be:5c:73:f2:7a:1c:34:b9:
         57:de:bf:cf:4b:84:2c:03:66:ed:b9:bb:d2:77:95:3d:1a:c9:
         8b:f7:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:18:06 2025 by rpki-client