Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/56d39ca4-d072-337b-95d3-6882aade0dfe.roa
File:                     56d39ca4-d072-337b-95d3-6882aade0dfe.roa (raw, json)
Hash identifier:          1ddbg8pJVgWQvZ2cmzE5PJ06WHKwOg0dTQJWSCUzqeU=
Subject key identifier:   67:A9:8E:33:1F:D1:51:20:C0:39:27:B1:CF:74:CB:EA:CF:82:17:E1
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584B1283BC43D5755418293BEB00
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/56d39ca4-d072-337b-95d3-6882aade0dfe.roa
Signing time:             Wed 20 Aug 2025 17:41:53 +0000
ROA not before:           Wed 20 Aug 2025 17:41:53 +0000
ROA not after:            Tue 18 Nov 2025 18:41:53 +0000
asID:                     30536
IP address blocks:        72.50.224.0/22 maxlen: 24
                          72.50.234.0/23 maxlen: 24
                          72.50.236.0/23 maxlen: 24
                          72.50.248.0/23 maxlen: 24
                          208.73.52.0/24 maxlen: 24
                          208.73.54.0/24 maxlen: 24
                          208.74.88.0/23 maxlen: 24
                          208.74.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:83:bc:43:d5:75:54:18:29:3b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Aug 20 17:41:53 2025 GMT
            Not After : Nov 18 18:41:53 2025 GMT
        Subject: CN=19bc0129-a6cf-49ad-a4f7-9096b53bc8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:44:9a:d4:0f:87:3a:ed:56:59:cd:11:d5:
                    59:b0:c3:aa:00:47:87:99:ab:d5:ac:9b:0e:87:b4:
                    17:ad:0b:62:27:4d:1b:1b:11:e5:da:af:c8:67:20:
                    d0:c7:bf:36:00:d2:68:f4:a6:ed:31:38:2c:61:75:
                    ac:19:f3:81:4d:e5:92:b4:a1:e1:d1:26:41:75:66:
                    a6:45:72:31:03:61:3c:69:e0:8e:62:20:f2:15:a2:
                    af:42:5f:0b:c6:5e:a1:9c:bf:64:7e:6d:25:81:2e:
                    82:17:bc:97:4b:7e:15:c6:47:b8:7a:fd:39:d3:be:
                    58:a4:39:f3:56:e7:e6:72:d5:54:f4:a5:db:52:a5:
                    7f:dd:5b:17:da:b1:ce:58:e3:c8:cd:43:29:79:94:
                    75:a3:a9:84:f8:71:a3:ec:70:1c:3e:16:4a:e1:60:
                    bd:2f:d0:fd:cb:0f:59:49:50:72:83:91:40:64:21:
                    5d:4a:04:60:1e:63:a1:9c:02:27:60:11:cb:93:b7:
                    51:01:e0:fa:b2:11:8c:65:03:6c:4a:87:3c:fa:9c:
                    b0:ec:75:23:17:70:14:3d:ca:a2:7d:30:1b:b3:d7:
                    81:13:24:48:f4:e9:51:69:b1:9f:c6:ef:cd:49:76:
                    8e:f0:7e:22:4d:1f:61:37:fa:91:e5:ea:37:80:e0:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:8E:33:1F:D1:51:20:C0:39:27:B1:CF:74:CB:EA:CF:82:17:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/56d39ca4-d072-337b-95d3-6882aade0dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.50.224.0/22
                  72.50.234.0-72.50.237.255
                  72.50.248.0/23
                  208.73.52.0/24
                  208.73.54.0/24
                  208.74.88.0/23
                  208.74.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:20:cd:9a:e3:40:21:9f:d4:50:c0:5f:fc:9f:8d:e9:73:
         b6:9c:ba:4a:8a:5a:c2:7a:ca:bf:19:50:df:85:d9:b4:10:3e:
         e2:bc:8f:14:af:6c:37:62:1b:7e:7b:b8:9e:1d:4e:10:3c:33:
         c4:cd:27:c1:43:cd:45:77:38:e0:56:93:08:3c:9b:56:22:50:
         57:ee:11:c5:b3:72:95:39:8d:37:74:98:10:5f:bc:d8:71:d0:
         e7:b9:e1:89:28:bf:fb:e7:5d:89:59:65:af:1b:58:93:71:01:
         63:9a:72:cf:94:c8:e6:28:a6:f7:43:03:97:81:89:70:c5:01:
         32:aa:e0:fb:c9:64:3a:cf:be:db:f0:43:74:b7:97:95:69:5e:
         a0:b3:d3:38:10:ff:0a:92:72:b4:42:19:1f:43:b2:fe:6e:67:
         e4:34:c1:e3:bf:71:d0:d1:2f:9d:a3:68:79:19:c8:40:fa:eb:
         f1:e3:20:06:ec:dd:44:b3:14:a6:65:cb:77:b9:2e:06:a6:92:
         67:3e:8e:fb:0d:d8:0a:dd:76:29:fa:d3:6c:2c:50:63:be:de:
         d8:b4:58:df:cc:83:c2:a9:ad:ae:fa:4b:fd:1a:49:b2:95:1e:
         0a:01:ed:74:e3:e5:0d:80:ab:ce:bd:de:81:ae:b8:16:c5:77:
         41:21:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:52 2025 by rpki-client