Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa
File:                     5af33709-1f6c-3c8c-9294-6f80a56247c6.roa (raw, json)
Hash identifier:          HOPe3+Gwkc3Q+GhK6YGITDfyTPnIRysPu2s97Ci2iVA=
Subject key identifier:   30:FE:29:23:9E:5B:1E:21:3F:04:16:81:7D:BF:7C:AC:3D:CD:AD:10
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285849E7BA839F00E1360DD28DA680
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     35793
IP address blocks:        72.14.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:9f:00:e1:36:0d:d2:8d:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=89d4a4a9-91dd-4e49-a6bb-1739f286e00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:a7:8f:e4:33:8d:d8:fa:91:e8:cb:4c:42:
                    45:3c:cd:93:0a:b4:9d:49:2e:85:f4:47:06:0b:22:
                    b1:ce:87:3b:da:2e:8e:4f:d8:3e:7a:18:85:59:d2:
                    83:37:35:51:9c:bb:a0:a0:82:80:6b:9d:bd:bc:a3:
                    6b:42:ef:ba:cf:0e:14:e0:ee:64:1a:db:95:f9:63:
                    b7:2e:b4:ed:48:d4:41:75:74:31:66:ec:b4:45:73:
                    16:93:54:2e:9a:21:8b:ef:e9:5d:e8:51:1f:1d:e7:
                    d9:06:66:a9:ca:f3:75:80:81:40:7c:ca:ff:2d:ec:
                    5e:32:63:c9:27:32:41:1e:95:e9:99:82:12:02:db:
                    05:47:6f:76:aa:52:bf:78:95:91:94:ee:d0:39:2a:
                    c1:e7:10:d9:5e:3e:fd:22:c6:ac:0e:62:33:ad:8c:
                    80:eb:46:89:c0:b2:d3:29:77:0c:eb:6a:7b:b8:0e:
                    36:27:e4:aa:21:c2:d8:e0:a9:bb:70:e0:28:b0:e2:
                    5c:88:2c:49:3b:bc:2c:b2:ee:e0:a7:ae:6b:49:b8:
                    35:e6:19:a8:c7:b1:1d:53:ee:77:18:66:91:58:71:
                    a4:29:79:13:28:57:9c:c2:b6:2d:97:e4:1a:80:b8:
                    de:04:71:5a:a6:03:ee:da:3a:eb:f1:86:13:2d:46:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:29:23:9E:5B:1E:21:3F:04:16:81:7D:BF:7C:AC:3D:CD:AD:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:42:56:13:82:5c:69:27:dc:72:8e:be:da:d5:95:cb:0c:
         ae:c0:b1:d6:5b:15:13:30:9c:f3:62:55:fe:5f:78:48:62:35:
         25:af:4e:fe:53:fe:6a:97:c5:7d:78:fb:a8:c6:72:20:5a:aa:
         25:1d:d4:3d:6a:0c:e2:40:61:ad:3c:3a:8c:b1:9b:95:18:be:
         e6:e0:c9:7b:71:63:d5:25:0d:13:f5:5c:c6:16:b2:93:c2:01:
         72:30:07:85:38:77:25:cb:7f:74:a6:e6:39:06:02:e1:c4:21:
         7c:fe:e2:ea:f7:e3:81:57:7d:92:d4:9a:5b:07:db:d1:e1:3e:
         11:97:2e:2a:8e:eb:03:ed:cd:71:0e:db:fc:2d:f5:a0:07:a0:
         2e:59:2d:05:f2:cf:69:94:a8:e7:27:3f:91:76:49:bd:5e:40:
         a6:f2:ba:20:9f:d0:d3:43:61:bd:c7:32:14:49:2b:a3:90:9e:
         df:cd:8d:a1:ee:9f:eb:c7:bb:75:56:0a:0f:57:28:9a:88:5f:
         8f:58:1a:e8:7f:fb:7c:6c:05:29:6d:30:18:c0:18:00:bf:ed:
         00:f0:85:3c:08:40:03:37:21:b1:0a:20:79:d2:1c:f2:bc:95:
         74:c2:a9:c0:5f:f3:91:0e:11:8f:22:4e:af:e4:0d:b1:cf:13:
         dd:4e:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:32:06 2025 by rpki-client