Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/508a577c-a2f3-38eb-92ec-9713ba256c97.roa
File:                     508a577c-a2f3-38eb-92ec-9713ba256c97.roa (raw, json)
Hash identifier:          ec5XptLzTJMj2pcUS3WfAlppDH0BvcWSzbNne7P/q40=
Subject key identifier:   65:60:92:68:55:4B:33:B2:D3:FB:0A:36:75:84:0A:28:DD:E4:A4:62
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584AAC8B7A1CDA1C30F8AC12DCA0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/508a577c-a2f3-38eb-92ec-9713ba256c97.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     62610
IP address blocks:        72.14.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:7a:1c:da:1c:30:f8:ac:12:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=d924835a-d01c-4688-9cb2-296bcfc43c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:11:a6:9f:18:75:3f:8f:99:15:ec:65:2f:
                    f4:48:ea:bb:17:d1:54:a2:f9:ba:70:be:5d:25:f7:
                    31:7a:26:bb:81:d2:4a:21:1d:fd:f5:24:1b:af:5d:
                    00:3e:c2:fb:6e:a0:18:3c:4e:d9:28:d6:69:44:c0:
                    f3:ed:7e:cc:da:d4:cb:97:33:81:64:2b:23:bf:75:
                    2d:05:c9:22:18:67:61:e0:ee:43:22:8c:71:13:82:
                    70:1a:75:3f:9d:08:38:6d:69:fb:54:5b:eb:5e:9d:
                    4e:b1:12:83:4c:5f:d7:84:ac:d0:7d:68:e4:a4:ee:
                    e2:6d:9c:8e:0d:9b:ec:5c:cb:3b:8d:7c:b7:99:7c:
                    06:e4:da:4f:8f:6e:cd:46:06:1e:e9:d1:a8:c9:73:
                    08:14:5b:32:e0:e2:09:4e:16:f3:57:e9:c1:42:8c:
                    b9:89:df:ca:70:e3:68:5e:05:58:51:13:62:20:89:
                    e9:86:ca:f8:ce:25:87:f9:2a:94:4f:1b:bb:b1:d2:
                    5f:b1:52:56:88:58:cf:e8:de:09:18:c7:ca:23:34:
                    76:71:42:5e:af:63:12:43:bd:d5:1c:be:c8:91:c3:
                    ce:f1:95:67:63:02:ba:a9:58:25:99:62:63:db:40:
                    15:3a:29:ae:ed:d5:71:fa:99:f2:2c:13:e3:41:21:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:92:68:55:4B:33:B2:D3:FB:0A:36:75:84:0A:28:DD:E4:A4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/508a577c-a2f3-38eb-92ec-9713ba256c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:b9:0e:69:03:a3:4c:f1:27:b0:29:a6:c7:c9:1d:ac:d3:
         9c:b2:68:38:c4:9f:5a:c6:ca:7e:b7:f4:51:ad:78:dd:c8:02:
         9d:8c:59:7a:14:83:f6:43:b7:1a:f5:45:9f:bf:b6:46:63:d9:
         e5:78:e4:48:42:32:fa:09:87:5f:e7:e0:26:f0:a7:a4:70:64:
         42:80:f8:6f:2d:d8:05:e0:f2:69:bb:4d:60:42:ec:a5:d3:37:
         a0:38:67:c4:09:a3:32:9e:14:7e:88:97:80:47:e6:dd:6a:e6:
         3d:c6:61:2d:67:ce:71:28:ff:86:8d:4c:55:e2:ae:49:e9:f9:
         12:52:5a:b1:76:ea:84:f6:3e:ab:f0:76:4b:6a:8d:26:34:d6:
         80:59:d7:97:b3:1c:b2:10:9c:7d:28:d6:6a:3b:15:52:ed:95:
         34:40:de:be:26:63:2f:c7:9d:43:de:16:87:89:35:fa:3c:f6:
         28:4e:bc:52:6b:20:9d:17:1c:a0:70:0f:73:97:10:56:e7:37:
         e5:e1:cc:b9:56:87:ad:2c:1a:86:bb:ff:d8:2a:ad:5d:46:26:
         76:3f:56:a1:de:6a:97:4b:16:5a:84:a5:4f:5d:39:36:97:53:
         fb:aa:d1:de:77:1c:83:28:a4:b4:ff:ce:06:59:45:a6:f8:e9:
         a0:48:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:24:14 2025 by rpki-client