Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/dfb56cda-de8a-3943-86a6-41974b667679.roa
File:                     dfb56cda-de8a-3943-86a6-41974b667679.roa (raw, json)
Hash identifier:          UU9+Xw5CrMEh51tPG+Fh0shQ7ucF+aS0Z/0WPbV6Pkg=
Subject key identifier:   B6:11:F3:C2:A7:C0:AC:71:CB:24:AC:30:66:3B:E0:3E:FF:53:19:BD
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B2496D148E2086BF6E4216000
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/dfb56cda-de8a-3943-86a6-41974b667679.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16583
IP address blocks:        72.140.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d1:48:e2:08:6b:f6:e4:21:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=e2d55ad3-641e-494c-9bf6-6c2982855f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:c6:21:11:8c:ff:28:84:af:65:20:fe:6c:
                    76:ff:6b:83:e4:da:7a:a8:46:74:c0:a3:1d:08:e4:
                    54:f5:c8:0b:0c:41:02:da:c3:ec:af:b6:5a:38:c3:
                    95:b8:73:88:4a:2f:24:d3:ae:cd:5b:ec:a1:3b:47:
                    6e:eb:6a:ed:d3:39:ff:69:e1:6b:d4:1e:fd:af:86:
                    28:06:75:6b:e6:29:aa:59:7d:02:03:86:c6:e0:72:
                    03:74:8a:a7:3f:16:ef:af:96:8b:d8:5a:b3:95:ac:
                    c9:e6:fb:c5:3b:f3:ff:b5:3e:38:f6:82:7b:eb:1b:
                    84:22:fb:8a:d9:a4:4b:af:a5:b1:67:52:e7:c0:45:
                    4f:65:ad:87:0a:f5:b1:f7:08:16:88:29:df:a5:b7:
                    a5:15:c0:23:0a:6f:6b:af:58:17:e7:2c:d5:26:99:
                    08:84:fa:d1:a2:fb:d5:e1:8f:e0:22:e1:7f:12:da:
                    f0:75:30:33:55:a2:39:df:c3:3d:7f:3c:a7:ba:fd:
                    17:08:ee:9a:d9:cd:0a:dc:b1:90:73:ae:95:c9:5e:
                    29:e8:12:ee:2f:e2:2b:e3:fa:07:93:fa:33:ff:4e:
                    b6:e6:d2:b3:f8:1a:75:c6:47:e2:79:b9:31:c9:84:
                    53:e9:1e:14:18:c2:c5:32:f1:f8:b9:36:ba:c7:a1:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:11:F3:C2:A7:C0:AC:71:CB:24:AC:30:66:3B:E0:3E:FF:53:19:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/dfb56cda-de8a-3943-86a6-41974b667679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.140.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:96:28:78:9c:b8:46:8a:92:48:a8:49:d2:39:71:d0:96:b7:
         eb:32:7c:5c:ec:a0:9e:d3:00:60:85:e0:ff:97:38:bf:f8:71:
         cc:9f:9d:a9:c0:ba:25:c6:90:18:fd:f0:1a:a0:ed:6c:58:00:
         10:b3:00:e4:72:9d:31:e6:7b:40:b8:5e:93:c6:a0:ce:a5:7d:
         ba:5e:0a:8d:86:f6:55:3a:40:ad:b9:8a:f6:22:7d:94:c5:cb:
         8f:59:1a:37:4a:2d:7b:13:13:c7:f7:91:6e:84:45:cf:4b:3c:
         4f:e7:71:3f:60:6a:12:3d:57:5a:ac:8e:20:56:e0:33:aa:ba:
         95:fc:ab:5f:4d:33:a1:87:5a:31:13:e6:71:ad:0d:c5:2f:95:
         da:e6:f3:f3:73:2d:e4:96:45:03:0e:3c:10:9b:3a:34:45:3f:
         48:88:16:6e:39:0a:86:4d:f4:e8:95:cd:60:48:63:fd:8c:98:
         18:e3:c2:13:73:88:62:16:0e:26:bc:c1:94:37:83:7a:f2:b8:
         78:a4:9b:0f:3d:b6:33:c8:bf:9c:0e:bf:d5:a7:3d:68:b0:0d:
         f9:3a:5f:fd:49:8d:42:2f:8e:cd:34:99:56:b3:1f:91:bc:18:
         11:dc:ea:6f:5e:df:a2:f4:b2:9f:42:70:3a:f4:3e:c4:53:73:
         4e:0c:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:02 2025 by rpki-client