Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
File:                     65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa (raw, json)
Hash identifier:          pz9BbwnNnttyKH/iZQmgcOD+2YPLMq4HVWbUSk9DaWs=
Subject key identifier:   74:37:7A:04:7F:B0:C2:47:05:64:44:57:85:E9:D2:E9:C3:13:FF:A6
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285849E7BA83E68791EBE86FEB27C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     212335
IP address blocks:        72.14.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:e6:87:91:eb:e8:6f:eb:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=0b8ad9ba-936a-4c27-8e0f-d9be99014465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:b2:42:d8:1e:1a:bf:1e:e5:de:ec:3e:2c:
                    09:a5:e8:75:73:97:e6:7c:06:da:5b:6b:0b:32:7f:
                    19:a0:66:91:c6:0d:1c:3a:48:8d:7b:95:2c:c7:e2:
                    8f:c1:c2:20:e7:58:82:b3:ac:ff:a5:e6:f1:0f:ab:
                    88:19:9b:f1:af:77:a4:94:db:d2:4a:cb:97:98:32:
                    ac:31:cf:23:ae:24:5e:e8:37:8a:3e:6d:3a:77:7b:
                    89:a5:b8:9e:56:e4:a6:9e:63:1f:22:12:ee:f9:cf:
                    87:90:b6:f5:38:40:d3:1b:1b:c2:ee:30:3d:ca:67:
                    6c:0e:45:9b:13:72:91:28:ea:fe:28:a6:9b:fd:07:
                    4f:68:78:b8:b8:46:44:59:44:8d:61:99:2d:d1:63:
                    f7:30:bb:04:dd:85:b2:3c:da:0b:6c:3d:bc:10:c0:
                    e3:9c:bb:b0:d6:ac:0a:34:09:2b:dd:ad:d7:1b:c9:
                    38:2b:53:e1:bd:80:45:c6:76:35:21:e9:a2:04:12:
                    51:b7:7b:a7:c6:d7:86:d2:27:15:49:25:59:ca:23:
                    fb:c0:fe:2e:cd:b9:0f:6d:78:71:ef:80:4f:41:fd:
                    64:07:9b:f7:92:3a:14:b4:49:10:53:40:11:13:c2:
                    6b:66:de:d1:8a:ea:f3:e0:30:d2:8c:27:6d:f5:82:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:37:7A:04:7F:B0:C2:47:05:64:44:57:85:E9:D2:E9:C3:13:FF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:09:45:96:d1:cd:39:c8:ee:55:4d:6c:4a:5b:b8:4e:29:
         ee:12:bf:ae:74:27:7d:7d:49:a8:4b:4a:83:2e:df:26:c9:0b:
         47:9d:10:ea:64:65:f4:54:a7:b2:e8:60:63:a8:65:99:6a:35:
         73:47:01:f1:74:2b:17:2c:e6:6f:2f:79:39:e1:84:04:58:f6:
         0a:e2:fc:56:cf:f6:0f:b3:b7:54:7c:31:4e:2a:74:4a:db:b0:
         b9:03:e3:4b:79:2f:5d:99:c7:a3:6a:70:81:d8:38:15:86:f6:
         f7:ab:46:6c:c4:69:0b:16:3e:c0:01:f7:a9:13:72:92:54:6c:
         f2:3d:f3:8b:16:32:e4:c0:7d:f4:d2:8b:bc:c4:91:61:f7:80:
         ef:20:3b:48:25:5e:b8:f8:eb:b0:6c:d2:8a:9c:2e:78:ed:18:
         65:0f:df:ef:cc:81:dc:6f:0f:db:64:fe:13:00:ff:73:3d:00:
         76:ab:65:ee:b3:cf:36:24:09:cd:c3:e2:6c:3a:2a:f7:0a:1d:
         c5:94:ed:94:92:be:a4:48:60:ee:dd:99:03:9d:0a:ca:0a:a7:
         35:7f:41:ea:04:1f:18:18:15:6d:b5:ac:35:c4:56:e3:7e:fd:
         72:94:50:d2:94:a7:ce:63:4a:f5:a5:a3:24:7e:7b:59:c5:c6:
         7a:ce:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:46 2025 by rpki-client