Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b74b61a4-02a2-3e01-a598-1b22edcf060d.roa
File:                     b74b61a4-02a2-3e01-a598-1b22edcf060d.roa (raw, json)
Hash identifier:          fLls6ZbpOmACN7OZaUoK5kmQgvD+jhwv8lQFrEJd9sI=
Subject key identifier:   F7:D2:0B:E7:A1:E9:ED:2E:E0:EA:31:3A:DE:E6:DC:51:29:5D:C2:AE
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285849FCAA77EA9DA4C5E8E1269080
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b74b61a4-02a2-3e01-a598-1b22edcf060d.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     393506
IP address blocks:        72.14.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:77:ea:9d:a4:c5:e8:e1:26:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=1b8be60f-39a6-4d54-8c26-4dd22e6e7dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:16:9a:57:0c:ce:aa:cc:36:09:db:cf:51:
                    a2:e9:da:df:79:9d:c6:b7:bf:09:2b:a6:b5:3a:c4:
                    90:cd:47:9c:8d:b3:8b:33:71:d7:3b:3b:03:e6:b5:
                    1f:7d:70:6d:d6:56:76:54:12:70:7e:63:fd:8b:c0:
                    06:56:46:ee:8c:2d:70:ed:5f:17:4e:b7:bb:75:32:
                    b2:d2:b4:e3:c8:18:e0:de:32:56:ac:9e:3c:65:5d:
                    78:c0:1e:4b:8a:04:7e:73:b5:7a:63:b9:28:7d:a3:
                    6c:b0:8d:5c:4b:f1:7c:79:38:94:b0:11:60:05:5c:
                    fc:ae:94:9a:15:1e:48:1d:ef:33:65:3a:e8:f0:0e:
                    93:b9:e0:a2:a8:ec:c9:44:5a:2e:c3:96:64:51:d4:
                    27:24:7a:3b:ff:f8:04:57:d9:12:59:a1:5d:da:47:
                    f0:72:b1:3b:dd:28:e2:e5:38:a7:0d:3f:91:28:bf:
                    96:d2:2a:0c:a8:e5:ac:c8:72:51:af:da:83:16:ed:
                    5c:d9:66:46:b4:f6:5d:32:79:36:82:ee:b3:8d:21:
                    28:f6:ce:08:46:e4:f6:d3:0d:69:7f:ee:57:4d:55:
                    c1:98:6a:c5:5f:f2:33:09:67:ab:5b:79:7f:11:15:
                    3c:0f:78:f4:ab:a6:88:4f:53:61:01:ad:96:db:e7:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:0B:E7:A1:E9:ED:2E:E0:EA:31:3A:DE:E6:DC:51:29:5D:C2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b74b61a4-02a2-3e01-a598-1b22edcf060d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:37:98:6e:c5:d1:b6:cd:92:fa:30:9e:7a:eb:96:4c:ea:
         56:a8:7e:63:72:f2:06:5d:5a:58:d0:03:0f:29:83:30:ec:1f:
         a7:fb:d8:0e:12:43:30:ac:2c:a8:22:e9:45:fe:e8:d0:0f:62:
         5f:a7:23:30:d2:ac:9d:58:69:aa:92:9e:0d:01:ff:b8:9a:01:
         f5:11:e0:7c:65:b4:42:e6:b3:e0:a0:f4:fe:8f:87:86:26:d6:
         1b:ed:d0:c4:79:03:40:cc:6f:0c:9c:f5:ce:69:f6:04:9a:b7:
         19:5e:97:b6:66:d4:c8:f5:4d:be:88:ac:b4:fb:26:3b:fe:c6:
         1e:17:28:33:6b:ee:f4:d9:3b:3d:87:21:b7:3b:36:4f:a8:42:
         35:39:da:9f:a1:d6:0e:26:86:16:cb:c0:b7:99:3b:a4:da:59:
         3b:4d:1d:59:eb:75:ea:d6:a2:9f:52:3f:e0:16:e4:5e:7b:af:
         15:1c:52:11:89:e4:5e:49:d0:4e:54:47:e8:f8:c4:4d:39:c7:
         f0:a5:86:0d:01:fd:7f:52:df:42:58:47:78:8c:35:46:01:da:
         38:27:7f:f7:f6:de:f9:e2:8e:62:9d:28:72:80:7c:f3:a1:5f:
         5e:c3:a0:25:75:cd:5b:43:09:e6:46:78:2d:87:18:cb:32:e3:
         8f:27:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:42:14 2025 by rpki-client