Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa
File:                     a257f246-17a5-3501-b8c6-4b74e9394e23.roa (raw, json)
Hash identifier:          V2EpRj1RS0rtJKFqhIiFgWS+hkAF4XFZTVliBgvgKhk=
Subject key identifier:   BD:7A:79:5F:60:C6:5B:88:30:21:90:2A:38:5C:B2:DC:B9:DA:C5:EF
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F43285849B6DF5A7ACD360B57E04B08A0
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     54665
IP address blocks:        72.162.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5a:7a:cd:36:0b:57:e0:4b:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=e7869833-b9ae-4129-a026-e04259a4a9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:7b:bd:0d:30:85:57:27:57:85:8a:22:af:
                    15:ec:88:5a:21:74:aa:b9:06:7d:16:d4:74:fb:19:
                    a7:0c:4a:a7:72:67:43:e8:8e:47:2e:df:5e:08:29:
                    95:75:91:8a:d7:41:eb:49:89:1c:30:e3:0a:67:b0:
                    67:3b:0c:ef:e2:49:fb:8b:59:ab:d2:10:29:3a:be:
                    bf:4c:48:58:28:e2:13:5b:4e:2d:fb:da:10:ef:84:
                    e9:56:1e:0e:ee:c2:2a:76:9d:33:df:94:e6:c3:71:
                    33:55:51:d6:14:ec:67:46:f0:89:13:a7:14:40:f8:
                    8d:21:9c:c4:42:f7:f4:1e:61:81:3b:16:63:9d:99:
                    0d:eb:3d:f2:28:7f:06:6b:c4:c8:53:94:b9:56:be:
                    03:94:d4:18:38:65:36:12:37:3b:de:d4:f8:25:5a:
                    e8:c8:0b:cc:ea:55:66:bf:2d:e2:05:04:c6:20:01:
                    8a:66:6e:2b:48:40:41:ae:ce:f8:cf:f6:43:ec:4a:
                    1b:b1:91:53:d5:82:60:e8:2a:fd:d9:cb:89:23:8b:
                    13:cf:da:e4:9a:83:03:b3:6b:92:f5:e0:a1:64:54:
                    b5:e6:be:a9:00:d9:79:08:c6:df:86:18:ac:12:4b:
                    3c:a2:0b:16:63:1a:3a:cb:fd:06:8a:c0:10:22:ef:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7A:79:5F:60:C6:5B:88:30:21:90:2A:38:5C:B2:DC:B9:DA:C5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:07:76:1f:6c:02:87:a5:6d:2c:5b:19:51:13:3d:65:6b:5f:
         e2:7c:10:f3:71:99:81:cf:e7:bf:ad:d9:4d:b1:65:f6:0d:f4:
         1a:2a:ee:91:10:0b:54:97:ba:36:90:d3:a9:16:78:d2:84:f1:
         e2:77:80:1e:68:9b:9a:93:3f:9b:56:bf:a9:81:a4:0b:d4:9d:
         8b:4a:0c:7d:0f:d2:9d:f8:94:8e:55:99:21:29:9d:f5:c8:b1:
         0e:2a:6d:26:7b:e4:ab:1e:0b:91:c0:0b:41:12:10:76:f2:00:
         0d:0b:88:39:41:fa:b4:e8:9b:02:1d:3c:7f:51:6f:0d:a9:54:
         91:c3:ce:5f:af:2f:e6:6f:f5:57:4a:c4:99:ff:a2:0d:59:d4:
         31:5d:37:ea:20:d1:0c:d8:0a:70:00:be:50:d3:5b:95:43:4e:
         fa:26:0d:f6:f9:d3:e8:c7:dd:a9:7c:ce:93:a2:b0:21:c9:53:
         18:11:60:7c:69:89:1b:bf:f6:fa:b9:3a:29:59:8b:c8:8c:ee:
         7d:0c:41:db:e9:29:0e:b5:05:4a:2a:ca:5f:57:09:35:ca:c3:
         bc:22:be:8c:7e:09:5c:f6:ec:dd:26:e5:04:8b:1d:b7:4e:73:
         1d:17:1e:93:4a:dc:ab:2d:83:8e:b3:a2:96:0a:ed:d7:d9:4e:
         b9:09:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:45:50 2025 by rpki-client