Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/f09590a2-b836-314a-8783-ae249965a74e.roa
File:                     f09590a2-b836-314a-8783-ae249965a74e.roa (raw, json)
Hash identifier:          aerxyyvw1/UwrbQJIj1sXNQM2CLYQWY4kaWJpp7Hvl4=
Subject key identifier:   FD:C9:13:9E:19:93:2D:D7:9D:07:F7:1D:1F:BE:90:B8:59:DB:EF:61
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F43285849D85F9236F8715AA569C3B240
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/f09590a2-b836-314a-8783-ae249965a74e.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     27419
IP address blocks:        162.216.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:92:36:f8:71:5a:a5:69:c3:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=5f4a3d5b-0b53-4a1a-a111-77afe3f2cb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:a2:97:93:48:14:9b:a5:cd:93:c2:76:62:
                    90:2d:1d:12:75:7f:50:32:aa:aa:46:9a:e7:69:1d:
                    c0:0f:4d:31:2d:23:73:2e:b7:75:57:7d:57:b8:b8:
                    44:49:c0:06:a1:3b:4a:70:7c:7a:03:a5:8c:10:a0:
                    cc:12:47:bc:59:9c:76:69:0a:73:4a:91:60:43:d3:
                    ac:8d:16:7d:7d:0d:71:2f:31:5b:87:d7:00:89:18:
                    19:ec:a4:f1:e2:27:5a:63:63:c3:0b:b0:e1:7a:94:
                    25:a3:5b:47:31:53:c2:92:69:fa:d0:a3:f1:a1:53:
                    98:65:97:25:e2:83:cb:d0:05:d0:bb:28:d1:c2:cf:
                    14:ed:7d:0b:a1:9c:c5:dc:de:97:74:13:73:2a:19:
                    68:4f:bb:b6:0f:f2:fa:d8:80:1a:1f:ea:fe:d9:49:
                    36:8a:10:d6:51:7c:61:57:18:65:17:cc:f1:c3:a1:
                    75:57:27:8b:6c:e7:40:73:20:a1:84:01:d4:98:1a:
                    f8:d4:ef:0b:d0:eb:8e:c9:b0:3e:8e:38:16:49:57:
                    46:da:33:b3:83:06:69:2e:a7:5a:09:b0:d5:38:ab:
                    27:8d:5d:9d:57:41:a8:77:99:69:06:26:42:59:79:
                    84:b7:d6:8d:ac:ba:4c:cd:5f:bf:ee:ad:fa:1e:09:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:13:9E:19:93:2D:D7:9D:07:F7:1D:1F:BE:90:B8:59:DB:EF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/f09590a2-b836-314a-8783-ae249965a74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:26:fb:85:62:a9:11:51:c3:d4:7c:53:34:19:04:2d:6e:
         0f:49:3a:86:87:d8:b7:e2:98:e8:1f:d5:6b:7e:96:a0:ee:a5:
         cc:14:66:e4:56:af:70:83:ba:45:d1:45:77:af:e5:ff:02:9e:
         c0:49:26:0a:df:94:50:06:36:ab:5e:00:86:2d:a1:71:76:46:
         6e:4c:01:28:8a:43:4d:14:64:8a:a7:6f:30:76:07:fc:c9:81:
         97:29:a5:48:6f:42:a3:5a:fd:f8:7e:ae:71:da:db:4a:2d:36:
         82:1a:2c:2f:cf:81:20:b1:c1:80:04:c2:83:24:13:a0:5d:1f:
         62:41:e5:91:59:2d:93:a1:86:fc:36:39:7c:de:bb:4a:9d:72:
         53:19:b8:99:75:1c:7d:23:c9:a4:df:ba:76:99:93:0c:65:e3:
         17:52:28:6d:61:1d:62:33:20:a6:b7:74:01:f7:56:05:e9:00:
         95:28:7b:57:78:3f:61:bb:68:eb:b4:8f:c1:d8:46:49:5c:6e:
         9b:94:05:a7:69:54:25:17:ed:bc:38:9a:f9:24:1f:53:43:60:
         c5:43:fd:e9:d9:ef:1f:71:07:20:d5:da:9d:2f:70:8b:91:87:
         7e:8d:6d:50:b0:c5:b9:65:87:4f:d8:4c:42:21:2a:6f:7d:b7:
         a5:8a:83:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:14:52 2025 by rpki-client