Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa
File:                     692f5272-0ac6-3e25-a216-1e24529614aa.roa (raw, json)
Hash identifier:          CakVK2WPUpF8NSp8E84Vq//pcfnpUaG3ULToIgsWINI=
Subject key identifier:   57:AB:C9:2A:2B:78:3E:AB:74:91:BC:2F:D5:E2:E5:97:DB:6B:D2:9D
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584AB417F16B328B2430ED77DC80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa
Signing time:             Thu 31 Jul 2025 17:54:30 +0000
ROA not before:           Thu 31 Jul 2025 17:54:30 +0000
ROA not after:            Wed 29 Oct 2025 17:54:30 +0000
asID:                     58212
IP address blocks:        72.14.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:17:f1:6b:32:8b:24:30:ed:77:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jul 31 17:54:30 2025 GMT
            Not After : Oct 29 17:54:30 2025 GMT
        Subject: CN=1f2b435b-f17f-4aaf-b3b3-4e72e0d89f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:ed:a1:cf:49:a8:03:2e:da:e2:bc:e2:28:
                    3d:d6:59:a8:10:4d:d2:d5:3d:81:e0:b0:61:51:16:
                    10:fa:63:23:f4:11:31:e1:2b:5a:92:53:b7:ba:68:
                    13:3c:46:9c:89:89:bc:1a:8f:cc:71:bf:24:67:a7:
                    7f:de:0b:c7:75:8f:7f:c2:4f:5e:06:3d:af:79:ab:
                    b5:6c:b2:f9:0d:b2:38:a2:13:50:e4:77:ae:37:49:
                    a0:84:08:30:d3:95:80:b6:d8:7b:39:88:32:28:df:
                    57:4b:fd:99:f8:00:99:8c:67:33:07:50:d4:29:28:
                    cd:1b:d7:bb:f0:2d:fa:0e:f2:2d:f2:fa:d4:f9:0c:
                    14:b2:f9:1b:b3:de:3d:b4:e0:e3:f2:0e:9a:d8:e2:
                    18:64:cf:ac:8b:1d:b9:8f:42:37:a3:81:75:1b:e3:
                    a2:cb:43:78:54:dd:2d:88:1a:dd:5c:2d:ef:ae:73:
                    2d:78:4b:e6:aa:d5:ab:93:f8:c6:b4:b5:3c:0c:4c:
                    10:7d:2c:40:f3:97:b7:22:93:13:43:dd:07:13:11:
                    fd:3a:c7:ad:f4:d9:62:65:c0:e3:39:78:bf:9a:41:
                    1e:a9:39:83:b8:94:eb:32:ea:c6:14:ad:3b:ba:d8:
                    a6:18:69:58:53:77:8f:5c:92:e4:f9:49:0c:a5:3f:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:C9:2A:2B:78:3E:AB:74:91:BC:2F:D5:E2:E5:97:DB:6B:D2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:e7:73:9e:b1:b9:8e:3a:ee:3c:68:fe:5c:6c:5f:f5:dc:
         4f:50:ba:26:80:14:8f:64:58:b8:23:5e:9d:26:43:90:f6:12:
         69:5b:57:57:f6:b3:3e:22:4b:6b:82:7c:77:9a:a0:8a:a4:06:
         60:b1:ad:66:8d:03:f4:6f:d1:8c:82:ee:97:f7:13:6b:32:cc:
         85:22:f0:4a:b6:a9:e8:46:e4:89:23:6c:ea:f3:ab:e3:c2:9a:
         b4:2e:3c:ca:98:12:14:7c:80:4a:ef:6a:c0:18:2a:4e:bb:73:
         28:87:ee:a0:b2:b3:62:90:78:2e:f3:92:2b:16:6c:16:d5:37:
         b2:85:f2:6e:22:ce:80:af:5a:c5:fd:6f:d7:2a:58:12:10:61:
         71:a3:50:ca:cb:49:95:8e:e3:16:0b:e0:ed:62:e3:32:cf:fd:
         56:de:9a:0f:f4:3a:59:01:5e:e1:3d:53:76:85:63:1a:e6:ce:
         1d:48:80:37:3c:e9:58:11:f8:8b:25:9b:d1:01:be:ce:cc:ad:
         5b:18:13:1b:94:dc:0b:15:2f:3f:3c:f5:c3:34:29:8b:3d:44:
         69:c2:c6:4a:bf:38:34:eb:16:2b:60:1d:61:72:7f:9b:fe:b4:
         12:6f:9b:12:e7:be:6b:76:df:19:c5:4c:73:a6:21:92:d5:75:
         e2:86:e8:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0F/FrMoskMO133IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI1MDczMTE3NTQzMFoXDTI1MTAyOTE3NTQzMFowLzEtMCsGA1UEAxMk
MWYyYjQzNWItZjE3Zi00YWFmLWIzYjMtNGU3MmUwZDg5ZjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0Dtoc9JqAMu2uK84ig91lmoEE3S1T2B4LBh
URYQ+mMj9BEx4StaklO3umgTPEaciYm8Go/Mcb8kZ6d/3gvHdY9/wk9eBj2veau1
bLL5DbI4ohNQ5HeuN0mghAgw05WAtth7OYgyKN9XS/2Z+ACZjGczB1DUKSjNG9e7
8C36DvIt8vrU+QwUsvkbs949tODj8g6a2OIYZM+six25j0I3o4F1G+Oiy0N4VN0t
iBrdXC3vrnMteEvmqtWrk/jGtLU8DEwQfSxA85e3IpMTQ90HExH9Oset9NliZcDj
OXi/mkEeqTmDuJTrMurGFK07utimGGlYU3ePXJLk+UkMpT825QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFerySoreD6rdJG8L9Xi5Zfba9KdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNjkyZjUyNzItMGFjNi0z
ZTI1LWEyMTYtMWUyNDUyOTYxNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+h53OesbmOOu48aP5cbF/13E9QuiaAFI9kWLgjXp0mQ5D2EmlbV1f2
sz4iS2uCfHeaoIqkBmCxrWaNA/Rv0YyC7pf3E2syzIUi8Eq2qehG5IkjbOrzq+PC
mrQuPMqYEhR8gErvasAYKk67cyiH7qCys2KQeC7zkisWbBbVN7KF8m4izoCvWsX9
b9cqWBIQYXGjUMrLSZWO4xYL4O1i4zLP/Vbemg/0OlkBXuE9U3aFYxrmzh1IgDc8
6VgR+Islm9EBvs7MrVsYExuU3AsVLz889cM0KYs9RGnCxkq/ODTrFitgHWFyf5v+
tBJvmxLnvmt23xnFTHOmIZLVdeKG6JE=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:14 2025 by rpki-client