Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa
File:                     6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa (raw, json)
Hash identifier:          dWtSOz5ccfIC7I5ja4QtqGHrM8jtKG8oyyRqGHe08Ns=
Subject key identifier:   C1:EA:0C:35:41:C7:1F:87:27:ED:33:BF:98:A4:BD:B2:CE:2F:0F:D5
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285849CBE5984DF63282F9FEF15E80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa
Signing time:             Fri 09 May 2025 13:45:32 +0000
ROA not before:           Fri 09 May 2025 13:45:32 +0000
ROA not after:            Thu 07 Aug 2025 13:45:32 +0000
asID:                     214143
IP address blocks:        72.14.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:e5:98:4d:f6:32:82:f9:fe:f1:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May  9 13:45:32 2025 GMT
            Not After : Aug  7 13:45:32 2025 GMT
        Subject: CN=373baf79-60c9-4682-a2da-e6a0cf6e6dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:c3:d6:4f:f5:13:04:90:7e:3a:0e:b0:7a:
                    d6:e3:7f:8f:73:54:34:10:4c:54:f3:ea:a9:b7:3f:
                    11:d8:ff:07:d9:72:47:66:65:c4:81:71:e5:1e:4e:
                    fe:f1:01:71:7e:7a:62:97:b3:c5:0e:55:a6:b6:61:
                    85:23:9d:96:aa:9d:60:4e:f8:a0:1a:1d:b7:78:52:
                    41:e0:a7:af:67:4e:db:7e:52:b9:73:e6:40:d5:34:
                    fd:b0:2c:6c:1e:a0:7b:4f:db:7b:3b:98:66:60:2e:
                    6c:57:df:bf:29:d7:ec:1a:d5:da:db:1a:b4:ad:ba:
                    63:21:d7:e5:24:ee:4a:ac:02:b5:f0:72:2a:db:4a:
                    9d:ad:26:76:6d:dd:ac:de:ab:a7:51:fd:bb:46:da:
                    15:27:b4:31:ee:cb:91:93:cc:4d:dd:70:96:c1:62:
                    41:b3:ee:af:10:f4:7a:ac:56:90:e3:91:a7:7c:5e:
                    e4:65:04:d8:98:17:65:4e:dd:2a:18:be:e2:e9:be:
                    7a:2b:0c:39:95:81:c8:63:e2:25:7c:ed:4d:fe:ed:
                    a2:8d:89:d3:a4:b1:d8:ee:09:52:6e:fb:87:43:91:
                    c1:40:9a:cf:04:56:8f:92:04:a7:2b:26:3d:5d:db:
                    9c:38:c6:f4:9d:a3:a1:08:2a:f2:b9:0d:68:47:e6:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:0C:35:41:C7:1F:87:27:ED:33:BF:98:A4:BD:B2:CE:2F:0F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:69:da:d9:7d:39:af:8f:5e:e1:e2:ed:cf:fe:c2:75:1a:55:
         89:90:f0:3e:15:87:ac:ba:3b:a6:62:a9:11:a3:e9:85:41:15:
         e1:bd:2d:e6:0d:a1:df:fc:91:35:f9:6f:88:e5:f1:1b:0a:eb:
         e2:a8:06:57:d7:f4:4b:85:00:8b:22:81:0e:cd:26:af:b6:99:
         e6:88:1a:72:f3:43:1a:eb:11:27:c0:4e:93:87:71:f0:e0:f5:
         85:9a:6a:4f:18:0a:f0:34:96:33:53:dd:23:d3:42:be:96:3b:
         3b:76:b5:a9:cd:82:dc:d4:53:92:f7:31:e4:8c:eb:ed:ca:fb:
         0c:c8:f6:33:1d:cd:d3:f9:49:32:99:f5:82:8d:44:e2:9c:e8:
         6b:70:e3:31:7d:b9:1f:12:5f:bd:fc:00:58:7c:9a:73:48:34:
         0e:25:a1:37:ab:c7:1e:f9:ef:5a:d2:3f:35:dc:90:a5:e3:2d:
         9c:4b:76:e5:bb:50:b6:07:e2:5f:aa:e8:8f:cc:e3:20:53:c2:
         4b:e5:8f:f7:9e:9d:c1:ac:db:b2:74:29:3e:c2:08:76:d6:db:
         98:01:ae:0b:9b:09:91:cd:4b:f4:b5:21:68:d4:80:d9:fc:c9:
         ae:92:89:16:d6:a7:57:48:8b:ad:78:04:6b:48:e9:37:39:e8:
         22:c7:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:47 2025 by rpki-client