Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfe64cab-0906-3657-8fed-27eaa65ec8b5.roa
File:                     dfe64cab-0906-3657-8fed-27eaa65ec8b5.roa (raw, json)
Hash identifier:          x12ZnN6ePLQYi8MHZKDeMR27lidnKLosds2v3PpMA8Y=
Subject key identifier:   85:7C:65:9F:64:00:C7:7D:C2:16:A9:1B:5F:30:EB:7E:F6:D2:EC:77
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC9DB9A98B0D4E24503D17600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfe64cab-0906-3657-8fed-27eaa65ec8b5.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     12222
IP address blocks:        72.246.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9a:98:b0:d4:e2:45:03:d1:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=883b0597-9fce-47bf-a7d1-c6c5a1cc15c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:02:c3:e8:10:ac:92:e1:61:fb:5c:29:1a:
                    0a:8e:22:94:bd:c9:37:d3:d9:57:6e:61:76:cd:c8:
                    6e:05:c2:34:3a:13:60:3a:7c:63:ab:c5:21:6d:f4:
                    7b:d1:f7:1e:1e:fb:ca:ad:e5:e6:dc:80:0e:65:a2:
                    f0:ea:a4:17:55:88:e6:2f:16:6b:b8:b4:4f:a8:19:
                    28:48:1f:77:79:f5:ee:07:bc:20:bf:2a:06:3d:bf:
                    78:3b:01:fa:69:d3:d3:bc:15:76:08:13:60:8a:b4:
                    ea:27:ff:4c:70:35:6b:cb:a3:e2:c5:c1:0a:60:ad:
                    7c:9a:f4:a5:fa:a5:6b:57:59:f0:f7:9b:7d:6f:f8:
                    7b:22:c3:20:21:aa:95:7c:c2:94:10:8b:ae:b6:97:
                    50:81:d1:d8:5d:0c:63:23:7c:51:de:bb:fa:49:67:
                    ea:0f:2d:2e:19:14:68:98:50:30:1c:bc:20:5a:4d:
                    f7:8f:73:e1:49:81:34:2d:6e:ba:54:f7:f9:53:68:
                    6c:b8:9e:e5:4b:8f:6c:39:ef:07:4a:4b:83:b4:45:
                    48:e9:98:d2:da:71:91:bd:0a:f9:44:03:d6:ee:7e:
                    d8:1b:c3:2a:f2:d8:94:a4:bb:fe:46:79:92:fe:ee:
                    6c:67:81:51:a3:28:ac:f8:2b:80:a2:5a:4e:10:90:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:65:9F:64:00:C7:7D:C2:16:A9:1B:5F:30:EB:7E:F6:D2:EC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfe64cab-0906-3657-8fed-27eaa65ec8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:13:eb:96:c6:91:a0:b0:8b:15:a0:7e:cd:8f:0b:67:7e:
         43:d5:d7:76:eb:38:4f:0b:d8:25:a8:00:a0:d3:b3:69:09:38:
         8a:68:32:cb:56:0b:01:7a:94:33:ba:98:b4:d4:9f:75:72:26:
         f2:ed:d1:82:e2:29:33:36:09:78:5f:0c:cd:f6:80:ca:68:a4:
         f8:98:42:7e:8e:4d:40:b8:00:41:72:86:52:95:52:56:70:b1:
         29:9d:6c:a2:35:67:7c:d6:b0:52:34:a6:45:36:36:00:4c:19:
         46:a5:4c:07:5b:de:23:be:86:97:39:0f:39:50:72:2b:8d:61:
         2b:79:cb:71:46:3f:5c:b9:bc:9c:b8:33:65:65:2b:13:d6:81:
         15:00:c4:29:6a:ce:64:a5:1d:ce:b3:33:d3:23:1e:e5:b1:44:
         c5:c4:1b:d1:a1:4a:e5:de:1a:9a:4e:77:59:78:af:b2:bf:01:
         45:62:57:56:cb:5d:30:27:0f:fc:00:8b:e0:3e:4d:2f:7b:76:
         58:79:fe:12:02:90:7e:ff:cf:b5:45:09:bc:62:9a:ca:25:45:
         90:a0:6b:2f:03:1b:be:a9:2c:79:01:02:51:53:8f:54:c7:43:
         46:bd:c0:73:a6:6f:db:a1:64:d0:cd:c6:b1:1e:d9:a0:82:ca:
         4a:e7:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:53 2025 by rpki-client