Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa
File:                     0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa (raw, json)
Hash identifier:          WwJlPE7wIHlUqnsRr2HDsf7/dI35AklMJZa0ESSibxM=
Subject key identifier:   D8:8D:8C:9A:76:DE:B3:56:10:44:58:FA:EF:61:63:73:00:C1:E1:9D
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584A7A4B4578F37FF422160F26A8
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     394437
IP address blocks:        72.20.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:45:78:f3:7f:f4:22:16:0f:26:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=7d7707b2-a594-4f79-80b4-eebe4aea8191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:46:6e:db:20:8a:79:99:89:4a:c9:d7:40:
                    0e:44:1a:c2:45:ba:df:26:0d:3a:7f:bc:0c:79:ec:
                    d6:eb:97:83:7a:1d:4b:09:92:50:35:a8:d8:3a:f9:
                    f6:0c:23:8c:a4:c0:1c:a3:04:7e:da:d0:7b:a5:8f:
                    7e:b3:d8:08:14:6d:a1:1e:08:37:e5:a7:ac:de:bc:
                    c3:53:20:fa:a2:7e:ea:34:a3:07:80:b9:07:d8:c4:
                    37:88:af:55:f5:aa:5e:c1:64:9a:0a:3f:ec:2f:a1:
                    e3:20:d8:76:87:dc:a8:cd:d3:78:d9:3a:07:73:8a:
                    f6:30:47:eb:a3:bb:ba:30:00:ed:8a:74:89:69:a4:
                    6c:12:29:ad:01:4e:4e:59:b4:3e:3e:2b:0b:fb:06:
                    1f:d2:36:f2:50:5d:c8:7e:b6:e9:d9:82:5f:a5:a2:
                    d1:21:40:be:52:ec:19:93:9a:f2:3e:b8:b4:1f:2c:
                    ef:d3:fa:1c:12:31:66:ea:4b:f0:c6:9d:1f:63:62:
                    8a:74:6f:9b:f6:47:ce:8d:99:21:8a:76:33:3b:a4:
                    18:d8:f7:75:e5:59:f6:57:49:d3:97:22:6c:30:a7:
                    24:f1:d3:94:1d:e6:5e:f9:97:bb:1c:bf:1e:d4:ff:
                    89:e6:72:22:1f:4a:ab:b1:a5:18:05:7c:ce:27:c5:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8D:8C:9A:76:DE:B3:56:10:44:58:FA:EF:61:63:73:00:C1:E1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:3b:8a:b4:1d:f3:7e:36:f4:de:c6:c8:8c:eb:fb:75:ac:
         b2:c6:88:2f:7c:3a:29:79:c8:69:2b:dc:03:cc:81:7d:30:e9:
         48:a8:9c:80:a7:34:35:b6:2c:50:0c:91:1a:f5:7d:44:e2:63:
         23:15:84:42:74:dd:05:f3:10:b5:80:8a:53:ec:c0:8c:08:27:
         68:25:6d:5b:e5:3b:a4:23:bd:d6:fa:60:16:02:0b:c0:48:bb:
         bc:56:81:d8:86:e0:b5:46:10:8f:ea:20:66:ca:ee:47:ac:93:
         8c:76:64:6f:a9:1b:e3:c8:50:3d:0b:4b:95:ac:b0:f4:e2:8f:
         65:d9:95:0f:2b:e3:eb:3f:c5:44:89:4e:e0:d8:1b:d7:53:b9:
         7f:85:ab:34:09:2b:65:8c:1e:73:a6:1d:5b:e0:7f:47:56:52:
         3a:bb:b3:61:36:07:b8:5c:8b:0f:ca:00:af:49:80:2b:e9:8e:
         ae:02:58:1c:69:66:b0:2e:4a:fa:ac:3a:90:f5:a2:9d:78:96:
         fb:f8:f0:50:28:a0:70:83:48:78:9a:cf:93:5e:f2:4b:4b:24:
         a2:39:a2:71:05:cc:1f:eb:e5:91:68:3c:f2:f5:30:4e:d6:72:
         02:8a:d0:ac:fd:fc:06:b8:b2:69:bc:6d:a0:1b:61:b9:06:d6:
         df:19:b1:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0V483/0IhYPJqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
N2Q3NzA3YjItYTU5NC00Zjc5LTgwYjQtZWViZTRhZWE4MTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6JGbtsginmZiUrJ10AORBrCRbrfJg06f7wM
eezW65eDeh1LCZJQNajYOvn2DCOMpMAcowR+2tB7pY9+s9gIFG2hHgg35aes3rzD
UyD6on7qNKMHgLkH2MQ3iK9V9apewWSaCj/sL6HjINh2h9yozdN42ToHc4r2MEfr
o7u6MADtinSJaaRsEimtAU5OWbQ+PisL+wYf0jbyUF3Ifrbp2YJfpaLRIUC+UuwZ
k5ryPri0Hyzv0/ocEjFm6kvwxp0fY2KKdG+b9kfOjZkhinYzO6QY2Pd15Vn2V0nT
lyJsMKck8dOUHeZe+Ze7HL8e1P+J5nIiH0qrsaUYBXzOJ8XlqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiNjJp23rNWEERY+u9hY3MAweGdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMGFjNTY5OTgtYWIyMS0z
ZjRiLWFkZjctODVkNTE2YzFhZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuQO4q0HfN+NvTexsiM6/t1rLLGiC98Oil5yGkr3APMgX0w6UionICn
NDW2LFAMkRr1fUTiYyMVhEJ03QXzELWAilPswIwIJ2glbVvlO6Qjvdb6YBYCC8BI
u7xWgdiG4LVGEI/qIGbK7kesk4x2ZG+pG+PIUD0LS5WssPTij2XZlQ8r4+s/xUSJ
TuDYG9dTuX+FqzQJK2WMHnOmHVvgf0dWUjq7s2E2B7hciw/KAK9JgCvpjq4CWBxp
ZrAuSvqsOpD1op14lvv48FAooHCDSHiaz5Ne8ktLJKI5onEFzB/r5ZFoPPL1ME7W
cgKK0Kz9/Aa4smm8baAbYbkG1t8ZscQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:21 2025 by rpki-client