Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa
File:                     3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa (raw, json)
Hash identifier:          g+f5CzZycf8o0b+nwnjz85fwIxrrwznoAmIkra2wPMA=
Subject key identifier:   41:96:FC:26:12:95:A8:AC:96:DA:6B:AA:57:17:72:97:D8:81:0D:70
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AE7F43E048B1330502B62700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        72.14.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:43:e0:48:b1:33:05:02:b6:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=a32ce9da-bd8f-45d8-abd8-5a0c62e00452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:fe:eb:7e:5d:43:f1:83:1c:c1:53:a2:90:
                    ab:81:01:a3:95:eb:08:61:1a:1f:bd:35:cd:41:38:
                    8a:77:fc:5d:56:af:bb:fc:1f:a4:bb:04:b2:46:fb:
                    65:d0:6f:dd:6e:84:1d:75:8e:77:92:59:34:33:fe:
                    14:9e:2e:6b:f3:3a:c2:84:96:c5:02:31:7f:d7:73:
                    75:58:0b:a2:6b:4a:98:35:9a:a8:31:ba:31:d5:c3:
                    91:d6:99:a4:d9:04:3c:b6:d8:0c:7d:cb:09:88:5c:
                    c9:39:86:7c:49:c3:e7:b3:cc:29:9c:ae:87:c0:4d:
                    e5:b2:ff:a7:3c:3e:d0:4c:ac:b4:8d:74:a9:e4:54:
                    45:79:67:d5:07:14:70:d2:c3:98:ab:02:d6:a6:df:
                    24:ff:0f:c9:9f:9b:90:d8:4b:b1:3f:73:94:fb:13:
                    b6:f0:f2:b3:ad:6b:8f:ee:6a:bf:37:8e:3f:18:45:
                    09:2d:bd:78:cb:90:70:a7:18:69:eb:b9:ce:fd:95:
                    02:c4:8b:8b:a3:92:36:c7:b4:b9:9e:86:89:e5:85:
                    d5:07:1c:03:43:b7:16:79:69:8f:71:ca:76:43:f5:
                    5a:3f:27:f7:24:ac:c1:9f:1f:e8:a1:78:8e:41:8d:
                    0d:d6:33:cf:a1:65:9e:38:e7:df:ef:a4:e2:67:8c:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:96:FC:26:12:95:A8:AC:96:DA:6B:AA:57:17:72:97:D8:81:0D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:ff:42:f1:44:c8:98:15:02:32:c5:9f:6f:ec:0e:48:0b:
         af:13:37:37:4c:14:e6:95:34:7c:55:dc:e2:1e:f6:63:a2:22:
         c0:7a:f7:06:15:1e:a8:c9:3c:66:e2:c4:72:62:5e:de:95:89:
         f8:cd:fc:6e:5a:f9:88:c9:b3:b3:70:16:8a:6e:df:f3:dc:25:
         19:d9:65:54:bb:07:c0:f9:da:dc:a2:4c:0b:f2:87:99:6c:39:
         6d:cf:26:6e:a6:20:2d:05:84:7a:b8:4d:31:ba:b8:00:5b:4b:
         61:ca:be:11:2e:63:b2:5e:4c:9f:da:d0:84:c5:fc:33:be:fe:
         ba:16:ac:0c:b3:82:cd:8a:3f:4d:f4:3a:e9:f2:58:5e:7f:d9:
         da:21:e8:55:7f:f3:f0:61:a6:d2:cc:81:59:ec:07:3d:fe:79:
         90:f6:b8:aa:08:ce:c4:28:ee:b6:43:62:d1:d4:71:6c:76:27:
         70:25:63:1d:63:37:9d:89:8f:57:35:e5:05:cc:fb:02:27:58:
         67:98:fe:c8:18:7f:df:a4:6b:e3:6f:9f:70:ed:45:03:48:e9:
         5a:fe:06:73:48:98:34:5a:78:dd:84:55:67:c9:a5:fd:bd:33:
         bf:1f:cf:cc:40:54:a8:48:26:1b:b1:00:98:82:5f:82:41:61:
         d5:54:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:28:16 2025 by rpki-client