Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa
File:                     de012c4e-185d-3ce9-b093-964f60565a71.roa (raw, json)
Hash identifier:          5eJErmknKrrGGllB8dwSzGjaEdVVvyBZzvvnTKR0v4Q=
Subject key identifier:   7E:84:21:B9:D0:A7:29:57:E4:3A:34:BD:72:A2:36:84:15:4D:7C:93
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584A1B600399E25145D17EF480C0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     21949
IP address blocks:        72.15.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:03:99:e2:51:45:d1:7e:f4:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=ae8396ad-2b58-4fd7-bb15-23f9b11859fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:15:22:97:3f:7a:b5:f7:be:1e:6d:bf:6c:
                    ca:24:ae:20:1a:f0:25:77:74:ce:20:ef:40:e0:79:
                    33:f5:f2:b8:79:24:94:3b:4c:92:00:b0:ce:32:a9:
                    c7:10:f4:18:d5:41:6d:6e:ca:b7:a2:a2:66:10:a6:
                    43:79:8a:cb:86:a3:0c:24:55:0d:c9:6b:fb:26:81:
                    48:2e:ba:c4:d1:a7:27:17:05:ac:5b:f3:0a:27:bf:
                    e3:74:da:c5:aa:e5:92:39:81:be:1e:1f:86:7a:0e:
                    b3:ed:b7:22:16:94:09:44:38:40:75:1c:4c:2a:8a:
                    7e:4c:30:64:29:45:0c:cb:b4:45:40:cc:8c:48:f5:
                    15:07:2d:8e:c1:8d:75:67:d2:1f:e3:26:ac:6d:77:
                    66:7d:86:79:48:27:89:38:ec:f2:c1:c4:e9:d9:a8:
                    30:1b:2a:01:19:b8:31:d1:f0:66:b4:f0:11:d1:24:
                    cf:9a:a8:37:46:13:7f:8a:56:58:40:e4:0b:53:f5:
                    5d:00:7c:f8:39:3f:61:00:14:89:82:67:97:71:fa:
                    7c:e4:84:ad:d7:41:31:81:06:2d:c6:03:67:c0:46:
                    50:74:9c:42:34:63:37:9d:7a:7a:13:47:a2:4c:59:
                    5c:fd:68:f8:a3:3b:af:9a:e4:95:4c:36:00:d3:36:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:21:B9:D0:A7:29:57:E4:3A:34:BD:72:A2:36:84:15:4D:7C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:f0:93:e0:db:70:78:46:dd:a9:b0:16:ba:2e:02:35:94:
         ad:c0:57:c8:98:ae:e1:5d:f4:ea:d6:56:01:ac:36:94:69:19:
         79:f2:55:3f:32:2b:91:a6:14:93:4a:31:bf:42:8e:61:13:e8:
         14:ff:db:64:8c:5e:ca:60:f7:c8:70:47:85:d4:b0:ba:d1:e6:
         cf:1b:7c:64:64:ca:0a:62:f7:28:8e:b1:6d:0d:f3:ac:bf:7e:
         e1:ec:ff:47:61:1e:cb:df:2b:30:80:58:07:a6:cc:87:77:07:
         da:df:93:29:29:6f:b4:de:c9:cf:00:9c:0e:ab:46:07:a6:95:
         5d:3c:19:64:02:55:30:ce:26:46:be:6a:c5:2b:4f:2a:b4:be:
         5a:f2:cb:f8:3c:3f:68:20:96:68:b0:1c:c4:9e:0e:04:b7:36:
         bc:19:14:bd:7a:f6:61:53:cf:14:d6:a7:96:60:fc:67:18:10:
         d3:e0:8c:37:0d:39:14:91:fb:17:b7:04:34:a5:2d:e4:f4:4d:
         b5:5c:f8:5c:0e:77:31:fa:58:37:74:83:60:ec:30:88:3e:73:
         93:34:1c:84:45:5a:5f:f2:9c:44:18:a4:38:11:6b:25:4f:95:
         94:fd:06:f8:ce:1a:68:46:50:e0:9c:93:3c:09:b1:50:48:5a:
         18:c5:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:44:32 2025 by rpki-client