Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa
File:                     5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa (raw, json)
Hash identifier:          nzTL4KqvxJyzg43gBOIfr2Gc416nby+cuD7mHyQP4ho=
Subject key identifier:   93:DE:87:50:97:6C:70:DC:72:0D:17:6E:23:5A:47:69:F9:95:DD:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ACB40FB86642EDCF549E97BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        72.247.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:fb:86:64:2e:dc:f5:49:e9:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=e0673503-2ff0-4078-ab1a-1a17da19cdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:a6:ce:4b:21:77:a4:ba:d2:18:f9:e6:c7:
                    cb:f6:94:f7:a3:d9:af:47:76:a1:6d:b0:ae:3c:ed:
                    74:4b:94:b2:60:bd:d8:cb:1a:ae:21:db:36:c2:72:
                    79:76:12:ca:e0:75:12:a9:4b:f8:8f:47:d5:c0:b7:
                    47:ac:30:3b:3a:9a:07:4d:99:11:c5:be:df:9a:7f:
                    81:df:08:a3:33:23:7c:1f:e6:c5:72:89:87:19:c5:
                    a9:0a:a6:30:a8:89:2a:51:45:fe:9c:b7:27:91:04:
                    dc:3e:f0:b7:11:5b:6d:cc:2d:f5:3b:89:a5:43:65:
                    26:59:47:8f:f8:5d:c3:9c:e0:3a:08:37:86:38:b7:
                    20:a7:45:b2:73:f0:90:80:18:f9:08:6d:0e:51:d9:
                    95:91:16:b9:a8:51:f6:38:cf:18:e4:98:f9:47:09:
                    16:04:5a:e9:86:21:a8:1d:6f:6c:ba:7d:0c:a3:ac:
                    36:8b:97:4d:93:2c:9a:42:ec:e6:6c:86:4e:14:76:
                    9a:e9:38:cb:b2:6e:39:b4:a2:e0:68:2c:2f:83:0d:
                    84:e6:58:dd:30:24:38:bb:83:86:93:31:b3:11:e8:
                    0c:9f:0a:07:b1:65:03:23:81:08:01:b3:94:59:70:
                    ff:25:f3:ac:ca:77:a1:e6:f1:bc:e5:0f:22:15:01:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:87:50:97:6C:70:DC:72:0D:17:6E:23:5A:47:69:F9:95:DD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.247.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:66:db:82:4b:ff:8d:85:6e:9d:fd:fe:8d:3b:21:be:38:e7:
         4a:e2:f2:ed:fc:3d:cc:2b:9a:cf:dc:0b:1a:66:e7:2e:7d:86:
         49:27:fd:18:28:18:3a:20:3a:12:fe:79:47:37:84:97:c9:67:
         a2:b0:a3:12:95:38:b8:14:d2:3f:10:51:5a:eb:11:50:88:36:
         73:50:47:9a:ae:df:f2:38:75:c5:10:60:e6:d1:20:16:45:35:
         3a:7c:b3:35:4a:f4:09:d9:85:6b:cb:3b:a5:2d:05:46:7a:03:
         48:39:30:dd:1d:ca:b8:8f:8a:0b:19:99:1f:63:d1:d1:7b:80:
         25:74:88:a8:ff:14:5d:d2:99:06:14:bf:ce:55:d9:8b:68:77:
         ee:37:10:a5:1d:66:09:bf:73:91:d1:20:3d:01:cc:a1:92:76:
         5f:74:5c:51:48:e6:12:17:c1:fb:5e:4f:43:f6:7e:35:c5:63:
         24:8c:36:9a:d8:d4:d0:2b:b9:ec:51:e9:71:f3:09:98:c9:b5:
         2a:64:60:f2:62:6f:b8:7f:c8:89:60:25:b1:d8:9f:f7:1e:4a:
         06:d1:ef:8b:19:a2:94:fd:92:79:42:73:9c:cc:ba:d9:be:c2:
         54:e5:be:39:95:ce:b8:f8:60:a9:cd:a4:5d:96:2b:24:6f:af:
         b4:43:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:20 2025 by rpki-client