Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa
File:                     37d8317a-63d8-3727-8121-5e81bc5e9a95.roa (raw, json)
Hash identifier:          yj+wVEwno0pvuhPE8/7Y+aTxPa3nUc+jX2PmgVLfdEM=
Subject key identifier:   F2:46:7E:64:86:81:91:AB:D8:07:BF:D7:FD:D4:A6:56:E0:88:A6:BE
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584AADF10132279651F6AC2C6B90
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        72.13.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:01:32:27:96:51:f6:ac:2c:6b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=99ff17d6-0148-4d19-bb4c-7627c7998a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:1a:c6:3f:a9:3b:36:80:d6:fe:cf:5f:07:
                    c1:e1:74:ce:a7:e2:e6:81:19:1e:61:af:bf:e6:de:
                    b4:65:4c:ce:29:ec:28:7b:53:87:6b:a6:24:48:fc:
                    98:a1:5b:53:c0:97:e4:a4:1b:ed:e2:cd:c6:84:8d:
                    c0:bf:32:9d:cb:48:63:67:53:c5:eb:cc:08:37:42:
                    3f:c7:47:6a:26:ed:ef:cd:36:3d:e4:02:ce:5c:90:
                    d9:50:1b:d6:5a:0e:80:c3:4d:1d:3f:46:e2:b5:d7:
                    62:18:4a:28:34:94:72:f7:80:ab:33:92:bc:a8:b7:
                    64:51:eb:fc:2f:62:72:b8:e5:2b:9a:fe:bf:83:c9:
                    e3:27:5d:4b:af:08:93:74:6e:27:7b:3a:5d:51:4d:
                    67:a7:90:ed:0a:16:bd:20:88:7f:4e:c6:8f:b7:c7:
                    f8:6b:d9:68:da:a0:b6:1e:21:87:c0:6c:8f:be:8d:
                    5c:36:f6:cc:fa:2a:b6:47:35:61:68:a0:af:0b:89:
                    9e:f4:1f:53:78:cd:1d:d6:fc:55:ef:0f:18:52:32:
                    c2:13:c5:2d:45:ad:d5:b0:b7:1a:da:23:f2:f9:1b:
                    51:72:c1:b9:59:93:d0:4f:9e:8f:2e:bb:5c:6d:8c:
                    ba:cf:e9:5a:eb:19:14:d4:5b:65:97:fa:d3:e6:ce:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:7E:64:86:81:91:AB:D8:07:BF:D7:FD:D4:A6:56:E0:88:A6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/37d8317a-63d8-3727-8121-5e81bc5e9a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:2c:74:72:69:76:5e:e9:70:74:0c:f8:ce:91:48:ae:90:fe:
         3b:44:da:83:bb:94:07:3c:52:50:e0:fc:61:a7:85:6e:35:c1:
         09:2b:22:0d:b7:44:74:0d:88:e1:f5:86:a7:77:63:43:80:6c:
         2f:60:3d:db:99:55:61:b5:d2:69:c3:41:2c:d0:67:b5:ec:d3:
         c9:b6:78:b6:58:a9:1a:96:79:18:cc:a9:a0:ca:48:44:19:11:
         ca:73:a2:22:ce:00:b7:63:49:e5:d8:47:6d:85:97:13:c2:e2:
         33:d8:e1:13:5a:6b:78:c9:2e:13:fa:8c:67:47:5b:0d:17:2e:
         59:5d:d1:e0:90:eb:f8:60:2a:b1:19:46:96:60:d1:2d:d2:43:
         16:c7:65:49:56:53:fb:f4:c0:3f:d9:fc:22:99:f8:c1:df:ca:
         14:1a:be:81:48:56:e1:f0:01:6f:ed:f6:ca:c1:48:76:c6:12:
         8f:07:6b:f9:72:d9:b6:84:dd:52:59:2b:9d:96:97:61:ff:05:
         5d:02:d2:da:0c:39:f3:49:d4:72:ab:09:91:16:a0:ad:81:bd:
         a7:d2:f0:67:23:ef:49:f1:ba:71:c4:4d:a7:54:aa:f2:19:8f:
         66:3e:55:31:06:ca:8e:df:1f:8d:6b:b8:7f:a2:76:c5:00:58:
         ab:d2:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:30 2025 by rpki-client