Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1e47767c-5031-3e27-95be-f1d2cc198456.roa
File:                     1e47767c-5031-3e27-95be-f1d2cc198456.roa (raw, json)
Hash identifier:          eGBCTnmUvXvCvA2PDN0c+1u35oKiN7OQY3bGmeWyMsY=
Subject key identifier:   22:0D:2C:8D:57:B4:26:1D:75:AD:7B:1C:33:9C:D4:E4:AE:62:59:D4
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858496A19AF8E35200CE969664D00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1e47767c-5031-3e27-95be-f1d2cc198456.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     62610
IP address blocks:        172.81.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:af:8e:35:20:0c:e9:69:66:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=205ef2ed-d1a3-48d2-9c64-a8cde3486f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:08:92:1a:4c:ae:e3:a8:c4:33:51:76:f3:
                    39:2d:e8:fb:b9:48:27:79:00:3d:e0:d6:0f:e4:76:
                    ea:4c:e4:6b:0b:f3:cd:24:4b:3d:9b:08:f5:a5:ab:
                    37:97:19:35:c6:a9:e2:8a:51:0f:4e:39:aa:2c:84:
                    75:63:1d:26:63:e0:43:42:30:74:84:6b:b5:60:3d:
                    99:83:e8:ee:44:0d:5a:49:aa:e2:15:fd:5f:16:e5:
                    56:40:29:59:a4:5e:8d:11:d2:f2:45:6a:ea:b1:9c:
                    36:32:35:41:aa:3c:bd:82:47:83:be:28:f8:c7:fe:
                    31:54:4e:d9:b2:e1:9b:82:42:24:b4:9e:04:a3:c7:
                    d2:05:f6:1d:3f:6f:bb:b1:94:36:9c:38:5b:77:93:
                    29:53:fc:c6:6a:da:10:fa:6e:55:93:41:58:06:0c:
                    c3:de:bb:78:0f:de:bc:da:fc:71:d0:bf:d4:7c:56:
                    3c:d3:86:b3:3b:6b:72:a7:4c:ed:9f:09:ac:aa:0b:
                    50:62:9a:b8:42:a9:0e:40:44:0e:db:dc:4a:dc:ce:
                    6a:43:27:50:df:c2:12:73:6f:9b:b2:29:05:44:8d:
                    a3:28:b1:f6:6d:8f:d8:b9:fd:56:54:ea:94:33:a3:
                    6c:0e:c0:64:43:0c:59:ef:b9:29:1e:29:05:84:9d:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:2C:8D:57:B4:26:1D:75:AD:7B:1C:33:9C:D4:E4:AE:62:59:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1e47767c-5031-3e27-95be-f1d2cc198456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:07:32:16:bb:55:6e:a0:4b:96:85:72:fe:9b:06:f2:96:62:
         33:b2:54:be:e7:32:da:1b:86:29:93:9f:82:ab:d1:b7:60:e0:
         ef:e2:52:92:73:06:15:6c:87:af:78:d4:e2:ce:f6:e6:02:43:
         f4:b1:c6:eb:42:d4:fa:a4:43:9e:34:c7:4c:7b:ed:5f:07:6d:
         90:17:fc:2b:83:5a:b2:db:9d:99:ea:7f:31:34:02:3d:eb:ce:
         1a:99:38:50:22:68:3e:02:f0:5c:28:8d:37:b3:29:65:08:73:
         72:60:4b:2f:c5:70:9b:cc:c9:2c:26:e5:6e:b8:71:34:47:f8:
         05:7e:a8:25:21:30:90:89:fb:5e:f5:fc:09:04:29:32:60:9b:
         3e:95:a6:b1:ec:a3:60:8a:e5:31:6a:59:81:49:97:45:ed:4c:
         24:4b:30:cd:c9:d0:9c:ef:51:31:08:15:db:34:9f:27:64:df:
         0c:47:fe:74:46:72:43:fa:e1:6f:43:19:15:14:60:46:40:ea:
         a0:2e:b1:83:4b:71:5d:73:6a:d1:ad:6a:79:d2:b0:ad:6e:b9:
         e6:75:b1:6a:3a:58:4d:ac:1d:10:d1:58:02:b9:1a:d1:50:7f:
         43:ea:74:75:07:83:1a:10:5c:21:e2:66:71:4b:6a:f9:29:cf:
         8f:90:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:07:58 2025 by rpki-client