Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
File:                     9cc6b592-366f-3a26-87a5-415ed1867edd.roa (raw, json)
Hash identifier:          TIEbCFdvfZVhlv1ujrVtnnVQHHBgf/EQCZel1mhWFuE=
Subject key identifier:   66:28:B3:7C:38:2C:3C:6D:DB:88:5A:BA:00:8D:A1:F4:66:39:1E:7E
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584A07D534C308EF4A97783082F0
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     36352
IP address blocks:        72.249.94.0/24 maxlen: 24
                          72.249.124.0/24 maxlen: 24
                          206.123.95.0/24 maxlen: 24
                          207.210.239.0/24 maxlen: 24
                          207.210.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:34:c3:08:ef:4a:97:78:30:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=cb2877c4-59cb-4f21-972c-68065d2fda17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:cd:1b:fe:22:3a:46:42:88:a8:38:da:29:
                    3c:71:1b:13:f6:5f:be:b2:0c:1c:55:1d:05:e4:d6:
                    5c:b4:7f:d0:cb:7e:40:e3:b5:99:9b:f8:5d:fc:21:
                    7a:4f:14:f8:29:3b:7d:9e:df:24:fe:3c:c1:8b:2c:
                    b7:05:6d:60:b2:6f:32:9b:89:9f:76:2e:30:8a:34:
                    22:c3:37:41:d9:4e:12:af:e6:04:e4:62:54:ed:36:
                    18:ca:9b:29:ab:a5:30:dc:8b:f1:0a:da:29:57:b4:
                    89:92:53:70:12:1b:de:c3:01:d3:30:ef:90:bf:9e:
                    40:0e:fc:97:21:aa:d5:34:d0:ed:9e:85:0d:bf:a4:
                    9a:16:8c:b0:3d:b5:1d:71:75:15:52:f3:d9:0c:a0:
                    b1:ea:75:de:82:8f:9e:32:34:93:de:99:f2:40:35:
                    27:bc:81:a7:67:2e:7a:c6:90:f4:b4:47:7d:75:ba:
                    9b:52:5d:ed:a9:b2:3e:5e:c4:27:ea:ba:82:21:f6:
                    69:c8:b0:f5:71:29:3f:82:cc:c6:a6:06:05:5a:49:
                    ce:e6:4c:b2:b0:9d:27:00:fb:29:11:5c:15:6b:9a:
                    ee:9d:d8:53:7a:c3:9d:67:eb:df:fb:9f:bc:0e:5f:
                    b3:09:93:8e:67:1f:35:3d:77:71:32:6b:a4:5d:3d:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:B3:7C:38:2C:3C:6D:DB:88:5A:BA:00:8D:A1:F4:66:39:1E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.94.0/24
                  72.249.124.0/24
                  206.123.95.0/24
                  207.210.239.0/24
                  207.210.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:5b:2d:48:08:06:c7:d5:d2:59:98:d9:0f:2c:03:54:80:
         99:d8:f5:d5:9f:0e:a7:6e:af:d4:0d:b6:16:98:c8:ee:d4:f9:
         d7:e1:29:0a:c2:94:50:8c:a1:34:69:ba:2b:b8:ba:f8:ac:dd:
         a8:ce:62:dd:f3:d6:f1:d2:0b:5d:46:9a:8b:d8:5d:18:3f:63:
         63:8e:e5:11:9a:08:36:0d:16:e0:fc:91:08:b1:53:e5:73:2c:
         96:01:d4:9a:4c:83:d6:54:71:84:11:d9:ee:4f:de:53:87:e8:
         e2:16:1d:3c:89:80:f4:ab:8d:10:b4:2a:b2:2f:dc:36:b6:6d:
         95:8e:3b:f4:78:05:2c:00:65:5f:fb:df:be:ae:89:26:3c:47:
         85:11:60:52:90:62:c8:5f:9c:29:fe:35:61:39:a2:05:77:bd:
         27:8f:84:0d:41:41:2f:a9:cf:e5:dc:f1:b7:27:2c:9b:42:78:
         76:81:6f:89:2b:e6:79:19:b3:94:5c:4c:15:e2:08:88:63:7f:
         b6:89:2d:0a:f7:7b:82:b3:b5:01:c7:14:1c:68:2c:8c:a5:ca:
         a4:36:6b:23:97:8c:77:36:ee:41:8b:d8:15:3c:9c:e1:23:5d:
         e2:aa:f6:80:8b:62:15:7e:5a:0b:28:96:e6:89:03:17:49:d3:
         d5:9b:fe:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:19 2025 by rpki-client