Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/fe7b0e99-c671-383a-a651-229cc6e1a962.roa
File:                     fe7b0e99-c671-383a-a651-229cc6e1a962.roa (raw, json)
Hash identifier:          mKlltxLHi+yp9fbtn6LbXMbbrVpe9K1OsMCjlXKF1gA=
Subject key identifier:   85:D5:06:AA:2E:64:F9:B7:82:F0:50:77:E4:8B:70:25:48:41:2E:AB
Certificate issuer:       /CN=c22717c6-604d-4453-a20f-3430af557f6e
Certificate serial:       010D0C9F43285849DCD0E7BB5321D16327784AA8
Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/fe7b0e99-c671-383a-a651-229cc6e1a962.roa
Signing time:             Thu 15 May 2025 15:12:35 +0000
ROA not before:           Thu 15 May 2025 15:12:35 +0000
ROA not after:            Wed 13 Aug 2025 15:12:35 +0000
asID:                     7922
IP address blocks:        72.42.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:d0:e7:bb:53:21:d1:63:27:78:4a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e
        Validity
            Not Before: May 15 15:12:35 2025 GMT
            Not After : Aug 13 15:12:35 2025 GMT
        Subject: CN=096e188a-bae4-4e2b-99b4-8635e443d7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:47:55:20:15:3e:47:93:cf:82:be:62:1a:
                    23:97:65:48:3a:b8:43:1d:6b:69:a4:21:d9:20:bb:
                    48:63:8a:41:10:bc:fe:3c:7f:23:d2:f1:45:86:d4:
                    f8:22:8c:5d:37:8c:da:61:b9:c1:dd:1d:02:ac:66:
                    7b:00:2e:32:bf:ba:92:20:f5:89:aa:11:d4:2f:cb:
                    10:5b:4a:ee:ff:80:e9:c5:1c:6c:0a:dd:ed:6c:fa:
                    ae:5a:9b:c2:ff:eb:82:25:32:c9:46:bc:46:dd:47:
                    a1:16:73:f1:d9:26:fc:c2:e1:f9:cc:34:bd:3d:a0:
                    15:59:7d:72:94:46:7b:17:a3:c3:f3:36:ea:4a:c9:
                    15:65:20:ab:9f:e7:f9:53:1b:e6:2f:6b:a6:3e:b9:
                    7e:cd:82:3e:be:e6:26:30:14:f6:1b:d4:1a:cf:86:
                    f8:af:c8:54:1f:a0:35:8d:70:bc:3f:ff:73:ee:cb:
                    3b:98:a3:ad:8a:9e:85:2b:74:78:40:40:7c:7a:5b:
                    41:ad:77:06:9b:22:d6:af:37:f5:cc:86:38:fa:b0:
                    e8:ab:a6:bc:eb:6a:82:2b:5b:76:d5:41:ec:3c:e9:
                    dd:f0:cc:c0:33:d8:5a:75:9a:53:53:9e:af:30:d0:
                    41:22:31:96:6d:2d:b8:17:74:07:08:6f:3e:4f:c5:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:06:AA:2E:64:F9:B7:82:F0:50:77:E4:8B:70:25:48:41:2E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/fe7b0e99-c671-383a-a651-229cc6e1a962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:df:c1:31:c3:99:1f:ba:b7:5e:2c:04:b8:30:a4:fc:1f:09:
         89:de:6f:0b:fb:6b:85:9b:66:31:cf:fa:ba:8f:72:ae:d2:b4:
         4f:eb:3e:95:fd:23:79:39:c4:fa:7b:8d:85:8b:80:12:51:cc:
         08:53:ea:20:16:cf:a4:e2:f6:e0:e5:ff:a5:52:b0:a8:ee:95:
         45:da:15:79:a8:b5:29:99:7b:3b:df:a0:c5:43:07:80:64:e5:
         90:43:f8:c5:6b:86:c2:76:0b:fc:b2:1c:4f:a6:4e:4a:92:2e:
         fa:47:14:03:1d:af:b9:c6:a6:c6:14:03:e6:81:9f:37:72:e8:
         9d:f3:32:9e:a1:ad:7e:88:6e:5e:ae:40:98:26:d5:7f:8d:54:
         e0:57:8a:4b:98:19:46:9b:c7:e1:0e:77:85:45:ba:ad:9e:92:
         7f:2b:b8:6b:0b:2f:8a:d5:88:51:97:32:9f:9c:6c:b3:d9:7e:
         4f:ff:f4:a7:e3:0c:ce:c9:ec:c5:dc:7b:99:62:06:c5:66:69:
         e6:ea:3e:2e:8e:e4:43:2d:88:d1:a1:2d:ab:34:13:34:64:bb:
         b5:a6:85:9f:61:11:f4:f0:78:a4:80:ce:2b:2b:e1:36:fa:03:
         fd:88:4c:2d:7d:a9:7f:c6:bf:2c:da:49:64:92:a4:be:12:52:
         22:c6:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:52 2025 by rpki-client