Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7518a13f-2eec-3b42-9ae6-6f388fe7c8dd.roa
File:                     7518a13f-2eec-3b42-9ae6-6f388fe7c8dd.roa (raw, json)
Hash identifier:          OKR3ANiwDM2i5gyfB+rQQcJo/0sSXLw2NAWcB9CAVBw=
Subject key identifier:   FB:73:D1:33:D0:C2:F3:50:DF:D8:98:62:D1:AC:92:C3:4C:41:17:AD
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584A14657C3CCC08B740E06E8D00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7518a13f-2eec-3b42-9ae6-6f388fe7c8dd.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     397423
IP address blocks:        72.14.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7c:3c:cc:08:b7:40:e0:6e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=787b387a-06eb-40d4-9fab-94420845ed3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:08:e4:08:3b:4c:8b:52:a5:99:44:be:b8:
                    05:18:ae:4d:dd:10:86:ea:ae:1e:2f:32:62:4f:53:
                    e3:77:41:74:4d:aa:f0:b9:b5:99:ca:e2:58:ce:04:
                    92:17:25:c0:d0:74:7c:67:49:75:1b:14:75:14:de:
                    51:05:35:ac:e8:01:a5:43:31:ee:8f:ba:d7:04:f2:
                    8e:01:99:54:f1:a9:de:a4:2a:83:17:31:da:1e:2e:
                    63:b9:f0:3d:ca:13:a5:e3:5c:4f:d4:28:ed:1f:e4:
                    99:be:53:e1:e1:15:0b:67:5a:42:45:15:52:f9:af:
                    12:83:00:a1:7d:7c:9b:12:7b:5f:c3:fd:cd:44:cb:
                    b4:29:f8:36:30:b1:a8:10:31:2e:44:79:4a:48:48:
                    57:c3:7f:1b:e5:90:c8:96:3f:a4:60:da:8f:9e:aa:
                    05:b7:46:23:30:04:06:5a:e9:5b:cf:20:59:8e:f8:
                    ad:a4:4a:25:a2:f3:13:ca:8b:92:fb:cb:16:a6:b9:
                    f3:8f:5b:2e:d1:d3:bf:71:2c:ee:3f:bc:f9:38:ac:
                    b0:78:bb:c6:0f:33:42:b8:2f:11:c4:7f:eb:31:f6:
                    7f:8c:bc:90:cc:2c:fb:dc:dc:3b:75:37:9b:3b:13:
                    c0:47:fa:a8:ec:fc:d7:69:d3:61:f5:5b:31:f6:d2:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:73:D1:33:D0:C2:F3:50:DF:D8:98:62:D1:AC:92:C3:4C:41:17:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7518a13f-2eec-3b42-9ae6-6f388fe7c8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f2:64:03:df:25:0e:29:bc:f0:d7:5d:6e:4d:3b:b4:5d:96:
         c8:ae:ed:38:bf:1b:20:db:20:4c:17:0e:e9:e8:e0:2e:5d:52:
         c7:da:26:ea:74:e6:2d:2b:ff:2b:33:e4:38:6d:c7:23:f8:b3:
         7c:3a:d7:2a:51:d7:ec:5a:91:bc:af:29:0b:24:60:87:eb:2d:
         4f:f9:39:b3:83:6c:32:f7:16:8a:b2:78:af:f1:20:74:44:0c:
         92:ff:d2:c4:42:09:b7:ea:77:2b:c8:24:8d:15:b2:cf:e7:a4:
         b2:32:1c:fa:fb:2d:2a:96:86:d7:2f:83:06:68:5d:ee:8d:d2:
         61:f5:6d:dd:22:45:d6:32:b7:57:ab:c1:91:c8:27:44:bd:a9:
         d7:ed:ec:2c:a9:77:b1:4d:9e:aa:ee:d3:7a:a6:65:dd:03:b1:
         c3:c8:75:ba:c6:61:b6:62:3f:e3:4f:b4:02:c6:15:67:41:d1:
         3d:f5:18:0c:5d:d7:7a:ae:de:09:92:0d:8d:6f:10:e7:e6:58:
         7d:46:48:f9:1e:0a:3c:4e:09:f9:69:1b:fa:fb:9e:48:83:b0:
         be:75:78:33:bb:ef:bf:2d:17:c6:43:0a:7a:f9:05:ff:12:e7:
         c7:b8:54:1f:5b:79:ec:61:d9:79:6a:75:05:e1:a3:fe:bb:bc:
         29:c7:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:20 2025 by rpki-client