Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa
File:                     b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa (raw, json)
Hash identifier:          E0qC0DDEo8+MPe4oZq1DWKMS4R1Rb47BTiF9Ev5mqK4=
Subject key identifier:   8A:E4:5E:D6:17:81:7F:11:35:BD:17:A6:3A:81:CE:2A:46:2F:F1:ED
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584AB650E2ED87C62CF5C2967F00
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        72.13.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e2:ed:87:c6:2c:f5:c2:96:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=640d3be0-20d7-4f67-8872-81aad63f7cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:f2:19:69:2d:5f:8a:fb:94:db:af:6c:c5:
                    23:67:fb:d4:ff:b0:ef:58:d7:16:98:44:4b:4b:82:
                    02:c9:d9:97:8c:f1:7b:00:68:63:05:16:bd:db:84:
                    d0:65:6f:bd:3a:28:42:1d:a2:f2:ea:13:fe:d4:73:
                    d8:22:31:58:fc:91:73:cf:cf:74:b4:0c:4c:b5:64:
                    ab:e9:80:fc:81:39:80:b2:23:78:15:1d:18:61:76:
                    4d:85:08:f0:28:d9:87:cc:27:e1:c9:8b:12:96:3a:
                    99:52:3c:5c:9a:f8:d7:26:91:5f:b4:67:dd:6a:21:
                    bd:12:96:44:48:0c:2a:1e:92:53:e6:3a:da:16:bd:
                    06:a0:a2:cf:91:e3:1f:30:00:36:f5:bc:2a:56:d7:
                    d0:59:86:95:f6:70:73:98:94:9b:8b:9a:dd:24:cb:
                    b4:1e:1c:1e:7c:8c:d4:1b:c4:38:d9:ad:fd:3a:52:
                    23:91:5b:9d:a8:91:ad:3f:d2:76:3b:a4:c1:20:2b:
                    a4:95:25:75:f5:35:87:1f:df:c9:c4:4b:fb:58:49:
                    39:52:2d:8a:11:c6:59:d3:25:5f:f7:7d:f8:63:ec:
                    3f:c1:a0:4a:48:f2:54:dd:03:6f:46:b3:e9:02:d3:
                    e1:6a:a2:00:9c:4e:07:ec:23:74:81:e5:c0:bd:15:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:5E:D6:17:81:7F:11:35:BD:17:A6:3A:81:CE:2A:46:2F:F1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:3c:cf:ea:f7:c0:4a:f9:02:ff:ea:47:7b:12:f1:b0:18:
         5e:42:0f:dd:f2:24:e4:73:4b:3b:56:fa:f3:ef:e2:8b:fd:2a:
         00:80:0f:e5:24:80:e6:63:5a:71:65:10:1a:63:d6:06:a4:5a:
         41:03:00:81:e3:a5:75:a5:ad:17:64:f2:f7:13:61:08:fd:c8:
         6b:e4:40:47:76:aa:6b:fc:37:d9:d2:3a:77:5b:8d:ed:29:c8:
         65:ea:80:d1:6e:22:fc:65:e2:ff:e2:fd:3b:7a:85:e9:74:de:
         1a:f5:ea:90:5e:30:2a:d3:d1:50:a2:04:ab:41:20:7a:00:92:
         a9:21:09:1d:b7:80:4e:43:05:69:0e:5a:1e:d4:f7:09:32:d3:
         38:5d:22:b9:69:26:e3:24:fa:e7:cc:be:7c:b1:25:c7:e7:b8:
         51:68:58:73:9a:c8:e1:b0:84:b0:fc:de:9f:9d:ad:61:5e:75:
         36:82:f0:3f:53:6a:75:cb:de:4f:f8:8a:57:51:03:b7:51:cf:
         e1:eb:72:83:10:4a:3b:2b:31:de:af:2b:4b:6c:e9:3d:29:a1:
         13:d4:b6:78:24:8e:f7:dd:3b:bf:f3:89:b2:e9:86:6d:a0:c6:
         75:d9:22:44:45:50:16:a7:62:2b:2e:4e:0a:90:9c:e5:ed:04:
         2d:2d:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:51:02 2025 by rpki-client