Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f55b5cef-0679-3b82-a305-d657042f02c3.roa
File:                     f55b5cef-0679-3b82-a305-d657042f02c3.roa (raw, json)
Hash identifier:          8Of73DchQpOa/SOOoKuaQsiryid0ptY8igcmsEVpc9E=
Subject key identifier:   CD:C9:1D:40:49:AB:E4:D5:BA:D3:79:E0:1D:C3:4B:EE:59:2D:C1:C9
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858499854486A593B3EA043F4DE40
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f55b5cef-0679-3b82-a305-d657042f02c3.roa
Signing time:             Mon 21 Apr 2025 02:26:31 +0000
ROA not before:           Mon 21 Apr 2025 02:26:31 +0000
ROA not after:            Sun 20 Jul 2025 02:26:31 +0000
asID:                     21859
IP address blocks:        72.14.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:54:48:6a:59:3b:3e:a0:43:f4:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Apr 21 02:26:31 2025 GMT
            Not After : Jul 20 02:26:31 2025 GMT
        Subject: CN=34f0a7fb-2d02-42af-89b5-c04683a5752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:7f:1a:05:0a:0a:19:29:c3:37:68:7b:d9:
                    1c:1f:fd:e9:6d:c7:09:0c:1c:a9:36:30:a3:ea:64:
                    56:29:3c:b0:66:d2:2c:90:a3:b8:5d:f9:dd:1c:61:
                    c9:35:ca:30:07:b3:b6:86:ee:ba:5c:7e:ac:3f:e0:
                    df:f5:e6:27:29:21:50:e5:7a:55:8e:5b:a8:70:fa:
                    e6:51:eb:5c:ea:39:10:68:ce:24:30:ab:0b:59:27:
                    93:c7:07:b4:83:88:f8:1c:25:4c:15:a5:a4:c1:1b:
                    b9:28:90:00:6c:68:34:c4:39:fb:df:32:cf:eb:46:
                    78:70:53:4d:e8:18:7a:02:1f:e9:2f:99:58:16:de:
                    c3:ca:cf:2c:a5:43:f1:f1:c9:ab:a4:9d:3e:14:87:
                    ea:c0:eb:ac:f3:ee:e8:70:ed:d2:88:58:2b:2a:e3:
                    d2:0b:01:53:56:42:d7:e4:8f:75:84:d9:b4:b4:50:
                    0b:cb:d0:93:82:2b:1e:88:1b:82:3d:21:09:e2:29:
                    7f:b0:98:0c:f9:cb:1e:97:d3:5b:fd:cd:53:ef:7b:
                    f9:1c:aa:cd:24:5b:c4:0e:f0:aa:58:c0:25:84:b1:
                    46:b5:9b:cd:e3:57:8b:3a:8f:ed:2d:3f:28:cd:88:
                    a0:f9:f9:02:f3:da:a1:ea:87:06:cb:ee:36:06:51:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:1D:40:49:AB:E4:D5:BA:D3:79:E0:1D:C3:4B:EE:59:2D:C1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f55b5cef-0679-3b82-a305-d657042f02c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:71:5f:7a:4d:cd:30:8f:f4:b7:b0:f3:6f:b6:35:cf:09:
         7b:d6:ab:18:4d:c4:fb:02:b7:19:bc:84:3d:a3:dc:54:ad:b2:
         c1:9f:2f:f8:06:d4:62:ab:69:30:7d:37:61:02:2a:c5:bb:95:
         e3:10:b0:e0:e7:54:5d:51:9a:0e:21:ea:57:97:89:ce:38:48:
         c6:36:ae:cc:0b:d2:fe:45:df:4a:07:f9:5a:4e:b7:e3:00:8e:
         65:46:6d:3d:38:21:c0:38:96:28:0e:fe:e9:aa:5d:cd:80:63:
         d4:7c:cb:c8:48:93:29:54:22:66:30:2b:2b:e2:4c:c9:31:ec:
         4f:b2:0d:c2:28:b9:a0:89:7e:53:c4:06:8c:c9:1c:68:36:ea:
         10:bf:a2:74:8b:8a:ab:09:be:b2:24:d2:30:cf:16:d5:4c:fd:
         bb:59:60:32:ba:8c:2e:89:dd:82:68:e2:9e:94:6a:07:07:bd:
         a2:a2:41:ff:1d:4c:f0:b0:17:ea:2a:ea:89:d1:a2:28:65:0b:
         f2:c1:0b:bc:bd:18:aa:37:c1:a7:57:2c:f5:fe:c1:1f:7c:bb:
         44:83:f1:a9:21:3b:8d:5b:fe:d4:2c:95:73:b9:27:a7:f7:73:
         77:67:87:8e:c1:2d:16:de:c1:23:64:e2:09:b3:0d:bd:39:bf:
         f5:72:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:47:02 2025 by rpki-client