Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa
File:                     6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa (raw, json)
Hash identifier:          VP3JftYIr9e6Uslo8SZ27Lz8jrxGjcRKcHySgQlSiys=
Subject key identifier:   EB:65:90:B7:AA:32:E7:AC:B8:B2:F0:7B:67:0E:06:D1:0A:08:F2:9C
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584B8D477BCDCF909680AFE4CF00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     214143
IP address blocks:        72.14.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7b:cd:cf:90:96:80:af:e4:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=2c120383-6162-4696-91c2-c762b78a01b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:9b:be:b8:ed:06:30:84:7e:c0:e0:fc:d3:
                    95:38:70:d1:77:85:1f:81:be:e3:f1:de:21:58:73:
                    ee:da:58:30:a8:9e:2f:db:4c:e2:88:87:2a:b5:85:
                    ec:27:19:b0:5a:ba:9e:aa:4f:ac:67:e5:21:ff:84:
                    71:38:57:e4:d9:6b:4f:09:b8:7e:c0:7f:5d:b4:2a:
                    92:de:ab:22:e5:83:22:f8:cb:40:a4:ec:9f:ca:6d:
                    7f:8b:03:00:74:5e:e5:31:6d:52:00:81:46:99:62:
                    b3:f4:7f:34:8c:86:2d:90:5f:63:d4:3b:dd:30:80:
                    b9:02:1c:83:f5:19:92:3b:4b:44:b6:87:29:30:0e:
                    8c:08:70:7a:e0:e6:13:1b:12:f7:ab:a9:f1:e9:05:
                    55:1e:cf:01:d6:d4:d8:28:1e:3c:da:30:b0:f9:ab:
                    84:71:ad:66:85:db:cb:27:84:a4:3d:58:35:0a:0b:
                    0d:f0:84:e7:bf:d4:29:95:1d:1f:71:ca:de:57:61:
                    c5:8e:10:93:fb:d4:51:fa:33:e6:a6:10:6e:b8:c0:
                    c8:99:22:8b:59:a5:e5:c2:54:50:97:10:52:84:db:
                    1c:64:24:84:c9:02:5a:a8:4c:a8:ed:76:54:5b:20:
                    23:9b:f5:85:a5:a8:4e:ef:48:7a:b0:49:ef:6e:a0:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:90:B7:AA:32:E7:AC:B8:B2:F0:7B:67:0E:06:D1:0A:08:F2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6b704cf5-cd0c-32d4-8a18-4ff31a494a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:9d:3a:6d:3e:57:e9:b1:2a:72:8c:b6:81:16:f4:cc:84:
         3c:f6:02:a9:24:cf:75:87:3d:0d:e1:06:58:f3:e4:0c:51:79:
         ef:9e:c6:05:23:c2:74:82:f8:a8:70:6d:1c:cd:a7:06:b9:be:
         66:03:5c:33:e8:6d:f7:e5:7a:77:c9:2b:a7:5d:9c:05:bb:47:
         bb:a5:a3:38:b2:a4:86:d1:f6:01:62:1f:97:5f:cd:ab:9a:1e:
         fa:7d:bf:1a:ed:f6:59:b5:85:7f:c3:54:99:fe:f1:63:8a:0d:
         4c:93:06:88:ef:39:6d:06:e4:61:0b:8d:0e:a0:d7:f8:f0:69:
         c8:30:d5:c2:a3:91:ec:00:7f:8c:53:13:47:7d:fc:59:95:44:
         4a:11:91:b1:e3:12:55:b3:16:97:d4:b5:b6:8b:58:62:7f:5a:
         75:d6:4a:51:5b:69:5e:38:c9:9a:bf:a6:17:15:17:7f:24:4f:
         1e:96:45:4d:ef:42:80:1c:2f:59:e9:81:f5:fa:f7:53:04:6f:
         cd:c5:a5:05:da:53:b9:a8:27:ad:00:a7:28:d5:f2:c4:c8:a2:
         dd:eb:b0:46:e2:3a:a2:05:a4:ff:b5:0c:4b:b7:54:de:de:64:
         28:5e:f9:7e:99:5a:e3:ec:8e:d3:cf:c4:d7:d8:8c:0c:db:81:
         5c:31:15:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3vNz5CWgK/kzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk
MmMxMjAzODMtNjE2Mi00Njk2LTkxYzItYzc2MmI3OGEwMWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwKbvrjtBjCEfsDg/NOVOHDRd4Ufgb7j8d4h
WHPu2lgwqJ4v20ziiIcqtYXsJxmwWrqeqk+sZ+Uh/4RxOFfk2WtPCbh+wH9dtCqS
3qsi5YMi+MtApOyfym1/iwMAdF7lMW1SAIFGmWKz9H80jIYtkF9j1DvdMIC5AhyD
9RmSO0tEtocpMA6MCHB64OYTGxL3q6nx6QVVHs8B1tTYKB482jCw+auEca1mhdvL
J4SkPVg1CgsN8ITnv9QplR0fccreV2HFjhCT+9RR+jPmphBuuMDImSKLWaXlwlRQ
lxBShNscZCSEyQJaqEyo7XZUWyAjm/WFpahO70h6sEnvbqBkrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtlkLeqMuesuLLwe2cOBtEKCPKcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNmI3MDRjZjUtY2QwYy0z
MmQ0LThhMTgtNGZmMzFhNDk0YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjPnTptPlfpsSpyjLaBFvTMhDz2Aqkkz3WHPQ3hBljz5AxRee+exgUj
wnSC+KhwbRzNpwa5vmYDXDPobfflenfJK6ddnAW7R7uloziypIbR9gFiH5dfzaua
Hvp9vxrt9lm1hX/DVJn+8WOKDUyTBojvOW0G5GELjQ6g1/jwacgw1cKjkewAf4xT
E0d9/FmVREoRkbHjElWzFpfUtbaLWGJ/WnXWSlFbaV44yZq/phcVF38kTx6WRU3v
QoAcL1npgfX691MEb83FpQXaU7moJ60ApyjV8sTIot3rsEbiOqIFpP+1DEu3VN7e
ZChe+X6ZWuPsjtPPxNfYjAzbgVwxFWw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:07 2025 by rpki-client