Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa
File:                     0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa (raw, json)
Hash identifier:          A+q0EtsRbHjdDKU/p56BCC8IzsPS68Jp65SW9GMkkcg=
Subject key identifier:   FC:5D:98:C0:BE:2D:FE:3E:E7:B6:42:63:58:45:F0:82:75:7F:66:12
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F4328584AC2E0DCDAFC82A876E0D9E610
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     36100
IP address blocks:        72.10.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:dc:da:fc:82:a8:76:e0:d9:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=27a5883d-08e6-4af7-aad9-82aced7089c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:00:f8:c4:e5:b0:e6:18:46:a3:46:45:6f:
                    63:31:1e:77:0d:14:1f:41:92:b1:d7:4c:cf:19:b7:
                    17:a8:37:48:3a:f5:ca:cc:7c:d9:84:f1:d3:cc:98:
                    b2:97:59:c2:59:68:27:31:ab:87:aa:91:56:fd:fb:
                    cd:16:2a:af:88:74:b2:30:66:8f:5d:48:b7:2d:d9:
                    76:8a:05:fa:e0:b3:6f:6c:9e:81:3d:b3:ee:01:dd:
                    83:b8:35:1a:72:02:1c:70:f4:fc:47:1e:d9:d4:1f:
                    b5:57:8f:b8:6b:94:4f:45:4a:04:22:ff:7a:d3:f2:
                    48:4d:cc:74:d5:03:c8:4b:00:37:57:f4:bd:b2:34:
                    f5:3f:b9:f4:50:63:05:a9:d4:76:f7:0a:fa:87:02:
                    23:23:e1:2e:71:4d:80:a5:60:9e:80:7d:70:9a:21:
                    31:f5:b4:06:1b:bb:25:c4:00:27:83:15:b4:bd:ad:
                    1d:19:1e:7f:ad:c5:30:26:ed:4f:b3:56:ac:21:0c:
                    a0:ff:2c:60:0a:38:57:5f:07:cd:7c:fb:3e:ca:36:
                    f2:7f:e4:bb:36:88:f9:c2:d1:f0:88:e0:5e:38:36:
                    b1:63:62:3c:b2:70:dc:38:8f:bb:71:7b:36:5e:db:
                    71:8d:c7:97:9c:0b:4c:0e:22:a9:0e:5b:e0:10:3e:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:98:C0:BE:2D:FE:3E:E7:B6:42:63:58:45:F0:82:75:7F:66:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:1a:57:fa:21:af:e4:cb:6b:08:45:19:79:51:83:62:e8:
         aa:4c:ed:1a:bb:40:d1:c7:68:10:c7:65:0b:99:f9:3a:6c:11:
         1e:cb:5c:47:df:8e:bd:2a:4e:46:a4:89:81:84:5b:da:ef:9c:
         8a:70:fd:71:13:87:32:ea:ba:0b:4c:96:be:3f:1d:6c:35:40:
         91:d7:ec:fc:90:12:15:8d:2f:6f:88:39:0b:d1:fa:fe:4e:77:
         2e:9c:45:d3:f2:c2:5c:5e:0a:96:eb:3f:f2:27:f5:a5:f6:29:
         3e:93:95:41:a9:30:28:2d:3d:a3:9d:c8:94:77:6c:b3:e5:42:
         e3:63:f0:19:5c:9c:01:2d:61:01:91:42:e5:50:d8:11:a5:19:
         9a:7c:56:14:67:f8:6e:50:a4:29:48:e3:d3:f3:6a:67:00:5b:
         18:86:f0:85:66:72:cc:0c:cf:3a:a1:48:1b:fd:36:9f:95:07:
         0b:7c:c6:25:77:74:39:9e:1e:52:71:88:a9:17:98:d7:31:f0:
         17:cd:75:c7:0d:ec:4c:cf:87:5c:06:e1:76:ee:df:2d:ea:4d:
         66:09:20:10:41:c8:9d:5e:8e:bf:75:12:ea:82:1a:66:6e:a5:
         ef:1a:a4:05:81:9f:83:97:bc:75:7e:b4:61:76:ad:ab:27:28:
         27:d3:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:31:26 2025 by rpki-client