Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/722cbae6-82f0-3bbe-a62d-b514baee941c.roa
File:                     722cbae6-82f0-3bbe-a62d-b514baee941c.roa (raw, json)
Hash identifier:          LV2OoK6PUka7WGpl7pMdhimSV1137bU4gaHE46N8W1I=
Subject key identifier:   5C:1F:A3:3D:DD:5F:C3:36:97:12:98:5B:30:F4:F4:B5:67:7D:B1:8E
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285849F43DA3C63B5CDD43F77F87C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/722cbae6-82f0-3bbe-a62d-b514baee941c.roa
Signing time:             Sat 24 May 2025 00:35:16 +0000
ROA not before:           Sat 24 May 2025 00:35:16 +0000
ROA not after:            Fri 22 Aug 2025 00:35:16 +0000
asID:                     834
IP address blocks:        72.9.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:3d:a3:c6:3b:5c:dd:43:f7:7f:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May 24 00:35:16 2025 GMT
            Not After : Aug 22 00:35:16 2025 GMT
        Subject: CN=12eb7ccb-99f5-4d97-988c-2291b657611b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a8:e5:1d:e6:e4:de:48:8d:2a:c0:2b:8c:55:
                    c7:3f:3e:d4:3b:43:37:0d:3f:3c:fb:97:e1:91:8f:
                    4a:2b:cd:3c:5d:aa:b4:fd:14:a1:e5:a5:e5:8e:f6:
                    89:02:6d:ff:dd:d8:5e:b1:de:6d:3a:07:5b:99:6c:
                    7a:cd:8c:a1:e3:34:41:c0:b8:a2:ed:35:63:bf:21:
                    30:05:7b:38:6c:56:66:8d:05:92:59:4a:e3:b6:3e:
                    22:b3:d0:fc:90:1b:5d:43:8c:c6:2c:58:d9:8e:df:
                    9c:2e:08:f5:ba:a7:ae:47:c9:da:2b:3a:63:2f:56:
                    c2:a3:c3:7c:b5:77:ff:fd:01:dd:a6:28:27:30:70:
                    8d:e5:80:89:45:12:0b:78:44:dc:75:82:47:83:64:
                    ac:52:94:4a:f4:03:0f:ee:36:2b:6c:e6:2a:c3:b7:
                    6a:ab:67:33:b3:21:f2:b4:04:ad:a4:81:04:1b:4a:
                    ed:cf:78:54:18:7c:1f:ca:85:ab:2f:27:c6:68:4c:
                    35:8c:a6:35:d4:fd:14:42:b5:d9:fc:6f:79:7c:9e:
                    b5:c7:37:e0:6f:fb:0f:38:34:7e:e8:f9:87:d7:96:
                    fe:82:c0:93:6b:79:4c:1e:a3:9c:f5:ce:84:d6:fe:
                    88:01:c8:29:75:d8:75:a7:14:de:03:0c:4d:31:e2:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1F:A3:3D:DD:5F:C3:36:97:12:98:5B:30:F4:F4:B5:67:7D:B1:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/722cbae6-82f0-3bbe-a62d-b514baee941c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:34:6b:65:94:b6:bf:6f:93:f1:e9:3b:ad:41:54:a1:7c:79:
         23:16:31:95:03:47:a5:75:32:73:33:ab:6e:62:3a:cf:48:f9:
         73:ef:36:71:dc:67:03:3f:9f:e9:fc:c3:cd:2e:f6:39:36:3f:
         a5:53:3c:52:99:61:b6:be:ba:ab:77:3f:b7:5b:00:50:30:ae:
         46:ad:15:cc:67:5c:0e:85:75:a1:c2:75:49:cb:fc:4d:b1:f8:
         a3:b2:2a:5a:f8:b4:a8:ed:f9:7b:a8:52:e5:02:d1:08:8e:fd:
         fe:9c:03:b5:64:26:fb:fe:48:d0:52:2d:ff:62:77:f2:cc:ac:
         91:99:06:44:5b:72:10:26:2f:9e:35:40:8e:ea:90:8c:be:6b:
         6b:24:e5:c8:4f:09:08:03:f9:a3:72:14:4b:2e:55:ee:05:8c:
         70:aa:47:d7:f7:90:84:96:8c:0e:af:62:31:e6:e3:ba:0e:48:
         07:bb:f7:3c:5f:da:dc:1e:bf:b4:52:da:ae:b9:67:20:71:52:
         58:a9:19:ee:ce:f6:31:6e:a7:ff:30:e3:47:1c:76:66:a7:57:
         31:0b:9a:1a:5c:27:be:02:d9:85:3a:86:b7:07:39:d2:0d:f1:
         fa:b5:10:84:3a:40:89:82:0a:80:b9:62:f8:ee:52:eb:72:19:
         ec:3a:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:55:05 2025 by rpki-client