Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
File:                     b70f42e6-c660-3f95-a2e5-3707bb43c217.roa (raw, json)
Hash identifier:          5bPpgaZclF8AbTzffLZz77QceAjprgJw+G6wQVTychw=
Subject key identifier:   ED:69:4B:E0:10:09:FB:03:C6:25:8E:F1:0A:0D:04:D9:50:0D:56:CC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DC8F9E864A8761ECB4331080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        72.255.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:9e:86:4a:87:61:ec:b4:33:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=979a556f-362f-4612-a7c8-10cf30fe0f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:2c:de:14:59:8e:05:21:8b:f3:10:d7:b2:
                    17:89:4f:a4:79:3d:ff:fd:c6:c5:27:8a:47:c0:1c:
                    b1:f8:61:36:93:2b:bc:41:e3:cf:c2:7c:44:59:26:
                    c1:59:36:c4:2d:a1:e0:42:92:ca:49:ca:f6:07:d5:
                    e8:39:a3:b4:2c:0e:49:fd:a9:03:40:10:bb:a6:dc:
                    1c:ed:eb:9d:e6:56:28:db:31:7c:83:e8:12:e6:19:
                    97:7f:7b:31:51:be:94:14:13:e3:fe:57:3a:f6:54:
                    73:f2:ed:c0:45:8b:03:2b:7c:68:a3:f8:12:89:f0:
                    99:09:00:b7:61:86:5c:38:82:1a:8e:2a:f2:6f:f3:
                    6a:b2:84:65:c3:e5:02:c3:1c:13:7a:63:9e:fc:01:
                    15:40:92:b9:3e:69:74:07:c8:7d:24:83:26:e0:4e:
                    a0:f6:3c:34:07:f2:07:b6:13:15:f3:29:ed:8b:94:
                    50:8c:88:f2:05:cc:bc:49:7e:86:12:3d:e3:ae:05:
                    55:88:ee:08:7a:8b:70:d7:b8:fa:6a:c9:22:12:d2:
                    b7:f8:1d:80:d1:ed:1c:04:86:51:d4:a5:1e:d9:c3:
                    9c:6b:f9:db:b7:ea:82:a8:fb:f6:0b:b1:5f:6c:db:
                    10:01:71:f4:5f:d1:25:4e:cf:b9:a5:63:ee:62:dc:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:69:4B:E0:10:09:FB:03:C6:25:8E:F1:0A:0D:04:D9:50:0D:56:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:df:60:64:6c:29:4d:49:11:50:81:a5:e1:42:56:45:99:
         05:c3:b9:69:e0:50:e0:9b:a0:78:1f:58:00:90:24:e6:17:9a:
         6e:18:76:af:0b:e7:28:25:76:19:22:df:99:75:f4:cc:2f:15:
         f9:88:04:da:7e:be:bc:49:5e:8d:a9:a8:54:79:8c:db:33:cd:
         5a:3f:a8:2e:f7:49:e1:4d:88:87:52:6e:b9:35:2e:f7:60:a0:
         a9:23:8e:87:24:24:2e:ed:de:ab:a0:7b:84:0b:fb:d3:d9:02:
         c6:9b:c6:23:57:ed:0a:72:86:ff:a4:17:5c:3a:ee:15:7b:5c:
         66:b2:f5:81:4d:30:8f:d5:3c:72:72:e1:8b:45:16:82:66:bc:
         53:6d:8e:27:aa:03:07:77:11:44:21:31:4c:d6:96:bf:96:63:
         20:ae:29:14:46:0f:10:be:ec:5b:d7:2c:ab:37:29:58:f4:a0:
         ae:6b:22:46:67:65:8b:b2:40:a9:24:80:e6:93:59:cd:36:16:
         60:98:da:36:a1:65:82:96:e6:8f:75:88:6f:a3:c4:5e:10:9c:
         e5:1a:65:9d:3b:1a:fb:bd:a7:fc:90:60:1e:05:08:52:98:42:
         ba:64:71:77:b2:17:35:53:de:bc:ae:2c:da:29:64:cc:d2:0f:
         89:90:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:57:00 2025 by rpki-client