Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa
File:                     39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa (raw, json)
Hash identifier:          FLhOS8gyHyC9T14BYV3AuVaFH7EIx2g85bfrHkyQOK4=
Subject key identifier:   06:FC:C7:4B:0A:83:56:C3:DF:FF:D2:1F:54:3E:BE:EF:46:31:93:1B
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584AC2E106A33B26F36FBD38AC80
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     395425
IP address blocks:        72.42.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:06:a3:3b:26:f3:6f:bd:38:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=7d40ef22-171e-446e-97d0-3a1f66d0c6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:c2:d6:c3:65:6f:44:48:13:f5:1a:4e:16:
                    de:5e:45:ae:db:ae:6f:0c:b8:c3:0b:6b:a7:cd:c5:
                    99:f4:77:f9:33:7d:0e:cd:ca:ed:26:f8:e6:cf:eb:
                    6c:9e:36:c5:0d:a7:f6:28:9b:a0:f6:91:62:e9:93:
                    d4:26:44:98:13:94:7c:7f:d0:80:e9:24:6f:37:f9:
                    5b:a0:01:27:af:97:c0:8a:0c:73:56:89:93:3d:11:
                    3d:0e:7f:5e:a4:11:d9:ca:0a:27:0d:e5:1d:8e:52:
                    5f:83:6d:be:35:bf:f1:af:0a:ad:91:20:67:2f:8a:
                    72:a8:63:59:09:ea:b2:bb:79:92:96:63:8f:5a:8b:
                    d1:d6:b9:70:82:3c:11:77:dd:28:06:1a:bc:52:44:
                    b6:77:ee:bb:aa:75:1e:b2:a6:a8:38:e5:e8:5f:02:
                    70:fb:25:08:5a:cf:10:eb:b2:34:fb:62:7f:13:0d:
                    71:f9:11:fc:46:49:c0:e5:c4:d3:b3:35:3f:7c:da:
                    2f:90:61:3c:13:80:b4:ba:f4:f3:98:47:3d:52:30:
                    c2:da:15:e9:25:1f:6a:39:af:3d:1b:69:89:ce:de:
                    73:3e:b8:b2:90:7a:62:c8:45:cd:39:f5:0f:a2:28:
                    96:01:04:12:f4:40:05:6d:22:0e:d3:b1:6f:e3:85:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FC:C7:4B:0A:83:56:C3:DF:FF:D2:1F:54:3E:BE:EF:46:31:93:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:ff:2b:1e:a3:75:03:30:e6:93:0b:f6:eb:33:0f:1a:a1:
         9e:3a:c7:48:1f:3c:df:ab:f9:29:3e:74:4e:ee:b4:df:42:0a:
         84:20:0f:bb:c3:a7:9a:53:9f:9d:83:86:95:7d:c4:a5:62:50:
         f8:9a:76:a5:d6:25:06:b3:97:93:c2:df:9d:9f:d0:b2:a8:ff:
         f5:6f:ea:5d:8e:13:21:59:2c:5b:98:9d:6c:93:91:46:5b:d2:
         df:b2:12:62:62:4b:3a:81:e8:13:63:c9:e7:32:80:82:99:a1:
         ed:05:73:00:f2:19:bc:51:a7:71:31:83:40:f8:73:e2:d9:f8:
         3d:92:51:04:69:38:90:f7:f1:d8:f9:8c:7b:e6:d1:f6:67:d7:
         01:85:69:d5:c8:20:ed:94:d0:86:a0:62:42:86:62:06:5b:a1:
         03:33:24:bb:7e:d6:46:5c:b4:72:29:14:22:65:70:b2:a9:17:
         e3:26:1b:8b:71:42:a8:2d:f0:09:d4:5c:21:e1:2d:3e:59:79:
         3c:38:28:a3:9e:b8:81:70:ac:d8:af:5a:c3:61:b6:1a:b8:47:
         13:27:81:26:bc:00:bb:35:de:9f:51:57:76:63:92:8c:0a:00:
         b8:e6:ee:c7:fb:c4:ba:70:2d:36:bc:1e:4f:c7:81:7c:2b:65:
         33:f3:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:19 2025 by rpki-client