Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52e481f4-64f8-3d63-ad40-121e9f60245b.roa
File:                     52e481f4-64f8-3d63-ad40-121e9f60245b.roa (raw, json)
Hash identifier:          KVtTnCGWc2LU+AoD0Ckj/kpJ2DuPhcMhQJmZZq6Uj8o=
Subject key identifier:   BB:30:FC:55:DB:D3:98:CD:A7:6C:FB:C4:DB:7D:99:46:16:FD:D4:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9A5353723581220B2B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52e481f4-64f8-3d63-ad40-121e9f60245b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.17.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9a:53:53:72:35:81:22:0b:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=cefc8a45-6b80-4cc2-90ef-ab517b5ba27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:53:b1:20:97:9c:bf:35:bf:85:a2:0b:bb:
                    e5:94:07:4f:9f:d5:de:e0:be:25:ed:da:0e:09:ed:
                    16:31:67:2c:cd:ba:8d:6e:e5:a0:dc:0d:5e:dd:81:
                    8e:9f:0c:b5:2b:b4:ec:a3:f5:75:d6:f5:ce:e0:84:
                    20:e2:74:f1:00:f9:21:c3:d9:f7:44:68:eb:7b:0f:
                    17:2d:b6:4a:11:f8:d2:ca:3d:24:65:a3:b5:e6:b8:
                    32:86:5d:97:d5:1a:6d:87:8f:09:de:25:3f:a2:b1:
                    b1:7b:c7:34:0e:ad:8c:73:fc:f0:e8:da:4d:49:9f:
                    3d:17:f2:dd:78:32:95:9d:9e:77:dc:dc:92:3b:b6:
                    79:57:0e:31:1c:90:98:b6:22:29:e2:24:c1:29:8f:
                    8c:5b:73:2d:9c:2e:f9:c3:cb:f4:5f:b2:62:db:75:
                    15:7d:68:39:cf:c7:f2:3b:2e:9c:3f:0c:ee:90:41:
                    40:24:26:03:08:2f:fe:55:ec:4e:f8:de:7e:35:fd:
                    d7:95:ad:43:73:29:1e:90:82:48:15:7e:d1:42:e8:
                    a8:ac:6a:48:95:f2:61:01:fb:dd:62:14:f3:c3:8d:
                    f3:f8:6b:86:9d:0f:74:ac:26:72:a9:79:37:2b:7c:
                    f6:49:6f:91:64:ed:e4:2d:e0:25:a3:28:62:53:41:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:FC:55:DB:D3:98:CD:A7:6C:FB:C4:DB:7D:99:46:16:FD:D4:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52e481f4-64f8-3d63-ad40-121e9f60245b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.17.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:31:e3:06:00:84:41:58:63:10:93:ad:57:a3:e7:1c:39:48:
         66:b4:85:56:aa:3f:7f:3a:c2:f1:57:1e:d2:fc:0a:69:a0:66:
         5e:c5:2b:77:2e:b4:f3:6a:a3:56:ac:08:0f:f8:c7:1f:0c:49:
         8d:23:c8:bd:e8:e8:d6:0b:10:01:fb:d2:d1:1f:fe:94:81:05:
         6e:fb:93:76:de:70:9c:32:e5:12:c4:ce:2a:16:c9:67:6d:b9:
         1a:06:47:d8:b3:08:2e:47:27:6b:96:0c:e2:56:69:87:f5:69:
         6c:bb:ec:79:1e:cd:29:84:f3:c1:6f:7c:f8:1e:29:67:4f:7e:
         83:cc:bf:64:67:98:ae:9f:55:d0:b6:13:d2:f3:ed:81:fd:59:
         97:39:0a:d3:5d:70:c6:ea:3f:20:1e:87:54:f1:8c:0d:4c:62:
         28:d9:98:64:a2:3c:c6:5c:44:e1:05:f5:26:29:e3:f0:18:38:
         14:86:de:dd:b5:8e:6b:54:06:a3:ee:ed:f0:78:7b:85:00:a9:
         f1:91:d6:f7:8c:43:0b:04:95:ac:28:25:97:30:6d:21:13:e3:
         e8:a4:98:9a:02:af:2d:ac:d2:18:f4:72:fb:c2:cd:45:97:f0:
         c6:f9:ba:b2:c6:16:7b:77:db:5b:76:e9:c9:5f:26:8c:1a:61:
         59:ef:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:29:26 2025 by rpki-client