Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/20142d99-e924-3a6c-8751-7d6218a6ea0f.roa
File:                     20142d99-e924-3a6c-8751-7d6218a6ea0f.roa (raw, json)
Hash identifier:          /BG8J9yBw+GywJXGgmm8JtUaavQzUYApMjTudH89xcI=
Subject key identifier:   A6:15:D0:2A:ED:94:81:F0:CB:63:A3:8A:E1:D3:DF:55:BF:5B:08:04
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584ABBE635F58B237BF55306ED00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/20142d99-e924-3a6c-8751-7d6218a6ea0f.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     7015
IP address blocks:        72.46.136.0/24 maxlen: 24
                          72.46.137.0/24 maxlen: 24
                          72.46.138.0/24 maxlen: 24
                          72.46.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:35:f5:8b:23:7b:f5:53:06:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=1da9bd87-5e0c-4adf-9310-e69651e97e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:83:84:34:0a:ab:36:e2:cb:35:1b:f4:65:
                    b6:21:a3:77:3d:ab:45:56:10:77:d3:47:49:60:2b:
                    6a:e4:0b:59:a5:ff:04:b2:6b:72:b0:70:0f:1e:e0:
                    e5:50:fa:c4:07:bb:5d:d4:6e:dd:e1:ea:1f:af:31:
                    59:1f:b8:52:27:e0:80:27:b1:6e:2e:42:d3:b3:8a:
                    fd:4e:26:32:94:4e:2b:25:a0:cc:51:0f:70:32:62:
                    fe:e5:47:ed:08:d1:e6:34:8b:41:33:f0:58:aa:bb:
                    7c:23:be:7f:2e:67:11:d4:0c:33:8a:19:ac:05:df:
                    b1:80:a2:f8:58:e5:92:31:34:01:c7:60:4d:35:2d:
                    17:8d:c1:3f:1a:e3:3c:9e:03:92:00:14:f5:1d:a3:
                    a9:49:a0:da:58:86:d7:85:7a:c6:a4:07:ba:73:2c:
                    f7:f2:6d:27:c4:d8:91:d0:df:a3:58:83:7a:3b:02:
                    c7:42:30:45:03:3b:c1:b4:8b:54:1a:2e:a7:9c:6a:
                    8d:47:93:96:ac:63:a4:b6:e0:05:63:e3:93:dd:ad:
                    08:32:fa:83:a0:d8:c8:78:ad:c4:a9:07:6e:0e:ae:
                    0f:18:74:74:6a:1a:49:d9:d0:3d:01:43:27:08:4b:
                    dd:31:b4:b5:b4:5e:49:76:28:50:ce:56:d7:8f:e6:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:D0:2A:ED:94:81:F0:CB:63:A3:8A:E1:D3:DF:55:BF:5B:08:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/20142d99-e924-3a6c-8751-7d6218a6ea0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:e5:30:37:9b:a7:b5:81:d2:ae:1c:5f:cc:f2:73:ab:66:47:
         e4:ff:45:75:82:ea:c9:df:f8:69:d3:90:ee:08:5a:73:fb:32:
         83:56:9f:24:9f:ee:e7:75:17:f7:14:02:fe:ca:df:e5:a0:23:
         7f:4b:ef:12:88:21:9a:61:54:42:c4:48:dd:01:6f:17:8d:e9:
         39:c1:da:c8:bb:e9:cd:5c:5a:9f:f8:8f:86:d0:56:1a:5e:6f:
         27:ad:a3:e8:f5:a6:c6:0f:5f:21:25:2a:d0:0b:e1:8c:09:84:
         f3:32:84:11:7c:ba:33:0f:74:48:dc:6d:a1:de:a3:66:84:2f:
         e0:07:42:8f:e7:c4:2b:01:03:e2:48:6e:86:4f:03:32:9d:d8:
         88:81:29:ab:44:fd:89:02:b8:d9:5b:a6:fc:34:5c:c9:68:fb:
         a4:c1:f3:f1:22:c7:8b:4e:9c:c6:97:29:46:74:ed:ed:f2:97:
         c0:69:ae:f6:4d:74:c7:fe:30:26:02:fa:e8:38:60:29:83:ee:
         bc:0a:56:2a:6a:22:40:39:ac:60:52:31:3c:0c:d7:3f:03:7e:
         d0:84:19:d6:e8:f7:e1:3b:67:84:54:90:f6:e2:fb:de:b2:85:
         9c:a6:19:51:3c:67:f7:a6:4d:9f:67:6f:65:a6:17:2e:96:de:
         0e:f7:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:20 2025 by rpki-client