Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa
File:                     821b4c9f-d1f4-39de-bddb-539d083748cb.roa (raw, json)
Hash identifier:          qzyegbzEoXNIu+cUtX//UPHBJHv0jhTfy7raBa1MOok=
Subject key identifier:   95:A8:E9:17:7B:99:63:9F:54:32:31:93:5F:F7:29:FA:02:D5:AA:DF
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F43285849CBCF8DDA04C06E3776910440
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8d:da:04:c0:6e:37:76:91:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=b5e01408-abf2-45c1-81fa-11bc9ab67734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:91:ca:b1:23:ee:0c:c0:96:52:dd:82:42:
                    ac:e8:06:53:60:22:dc:56:75:0d:24:4c:ff:16:2d:
                    09:ab:27:6c:e7:0b:b4:70:2b:f0:50:61:c7:a8:9a:
                    f6:4c:7d:6c:f0:a6:97:78:f4:da:6b:96:e3:03:9e:
                    66:6a:f2:9e:d0:b8:87:9e:ec:98:03:6b:b8:cb:33:
                    86:e5:88:17:55:d0:71:80:f9:78:6c:16:42:34:b4:
                    81:1a:d7:d8:ff:e3:4a:f0:cb:61:e0:4a:4f:86:14:
                    68:68:41:1d:98:da:16:bf:67:3b:c7:00:6c:6d:7d:
                    1c:70:49:09:82:02:e6:a4:e0:5b:b8:f2:78:e5:25:
                    2c:9b:92:77:1b:9e:41:e6:75:58:65:dc:ce:b2:10:
                    41:a1:30:d2:41:a3:dd:18:20:3a:cd:0b:03:d7:08:
                    5f:6d:7f:c6:26:d3:98:12:76:99:67:b4:6a:39:91:
                    bf:37:9a:d4:bd:a9:69:13:4d:33:d5:78:68:7f:1a:
                    d6:78:1f:a7:31:1c:27:03:07:d6:17:46:28:76:6a:
                    a1:a3:2a:a1:5e:13:a6:2d:d5:9e:14:8c:17:91:cb:
                    25:4c:7d:cf:a3:34:c5:5a:2f:60:73:44:aa:dd:cd:
                    fa:b5:65:90:c3:56:6a:fe:56:81:a4:e6:8a:78:34:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A8:E9:17:7B:99:63:9F:54:32:31:93:5F:F7:29:FA:02:D5:AA:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:f9:bd:cb:11:1a:95:91:78:09:93:4a:c3:f9:f3:0f:0d:
         9a:63:cc:88:64:82:09:87:40:f5:ac:17:e7:e6:1d:e3:40:c4:
         51:74:42:55:ed:e6:de:d1:4f:5a:d5:37:ac:74:48:dd:70:a7:
         0c:53:4c:99:33:64:71:a7:58:a8:27:71:a5:ae:b3:4e:2f:cd:
         17:03:ed:bf:0f:f0:7a:6b:ab:cf:b2:0e:05:0f:1a:d5:5f:b5:
         47:97:5c:61:ef:81:b3:b8:9f:77:3a:da:71:7f:7f:b9:68:41:
         97:d9:25:3c:c2:db:f1:1c:7a:ab:c1:a6:65:b3:eb:41:94:53:
         c0:c2:c5:b5:f0:53:f0:29:ab:f2:28:ca:79:da:dc:b5:5c:d8:
         db:6f:e0:ff:8d:0b:64:52:69:92:ab:bd:28:c4:a8:39:ef:af:
         ec:ca:37:bc:f8:da:f7:14:19:61:d1:6f:ba:1b:53:04:1b:b6:
         47:dc:ca:16:6a:f8:7d:c6:97:a2:bd:62:91:ca:fb:08:0a:d2:
         6a:bb:e1:46:46:fa:7f:dc:a6:c6:ff:6c:32:cf:84:1a:74:86:
         79:b3:c2:9d:1e:c2:73:5f:6a:e7:c2:d6:82:74:56:f1:dd:1e:
         ca:b5:57:4d:31:2d:a5:90:ed:09:d9:aa:ae:fe:2b:be:44:2e:
         22:2e:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:34:19 2025 by rpki-client