Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
File:                     4db01a54-154f-32c5-a540-8f9f89529b1c.roa (raw, json)
Hash identifier:          PhU92B1f+sgXn6qyiiJW4Fm7KEn7TwkbBng8vb6fzrM=
Subject key identifier:   5E:7A:43:50:87:6D:38:81:9B:03:9B:AC:5F:62:27:BE:78:16:7B:5B
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F43285849C20A16DAE5454C9A45FFC760
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        72.13.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:16:da:e5:45:4c:9a:45:ff:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2135195a-f858-49ed-ad2e-784196eb2044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:4c:9d:ee:5b:60:0b:de:97:24:c4:36:a8:
                    b2:83:57:e5:6d:e4:4f:3e:c5:45:a4:31:79:5e:9c:
                    3c:8c:96:e3:72:bd:6c:eb:bd:77:7a:0c:56:b0:90:
                    48:24:15:f3:9d:d1:cc:0b:82:15:15:97:cd:cd:da:
                    b0:76:61:15:f3:4a:36:b7:7d:e2:cd:82:a1:3d:8a:
                    39:e1:c6:67:11:58:46:5b:f2:86:45:ab:f3:7f:f1:
                    d1:b4:dc:8f:13:c7:06:f5:84:cd:72:64:ce:a2:13:
                    3d:37:18:e7:5a:7a:52:30:34:1d:d0:4e:70:ff:b6:
                    f2:40:9b:b7:fa:d0:06:17:ab:44:4c:d4:0b:34:9b:
                    19:7c:5d:df:82:a5:52:3b:e5:62:e9:1c:5a:42:76:
                    a7:82:0e:ea:fe:82:14:73:09:73:5c:f4:72:18:9c:
                    8e:2b:8c:0f:1c:ef:6e:2d:e1:e0:a9:3a:12:c3:b2:
                    11:5d:38:86:e8:a5:70:f8:e4:27:b0:47:0f:60:d7:
                    f2:2b:58:c8:ee:8d:da:d5:60:a2:0b:49:85:e4:b5:
                    46:58:a4:74:0f:a1:fc:d1:b4:ad:b6:58:0e:ea:79:
                    82:9f:13:44:92:f1:5d:80:61:7c:e7:db:6e:47:5f:
                    6d:c4:02:a5:66:7a:92:93:07:99:36:39:fa:b7:67:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7A:43:50:87:6D:38:81:9B:03:9B:AC:5F:62:27:BE:78:16:7B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:53:23:e8:55:38:3b:61:fe:fd:fc:3b:d6:86:cd:21:93:
         95:6b:2f:cc:37:1e:b3:b1:f4:82:84:0d:61:fb:bd:0e:09:96:
         cf:8d:7c:7d:ca:e7:17:d0:fc:69:d5:aa:0b:50:8a:ea:f3:65:
         1d:2c:55:26:c3:24:f8:1c:9c:2a:27:ad:4f:0e:b6:47:d4:52:
         7f:a7:53:d5:a3:08:3e:2b:3d:11:c5:f8:4a:ea:c3:c7:4a:71:
         85:f5:d2:12:3c:6b:1c:80:9c:c6:2a:1f:2d:ba:9e:a6:5d:46:
         be:fe:ee:10:b0:03:54:31:66:6e:89:03:1f:f5:7c:13:e8:62:
         23:04:a8:5f:3a:6f:9a:d6:29:70:07:1a:f0:65:39:58:37:1a:
         15:1d:d5:d9:ba:ba:6f:5f:7a:e5:77:0a:90:b0:1a:a4:61:c5:
         05:7e:11:9e:c8:b5:03:20:41:6d:d9:c4:e8:ac:42:2f:0c:ba:
         6b:a9:5d:79:a5:b3:e5:a3:1c:88:85:b0:e0:5d:56:0a:bd:75:
         9e:8d:16:11:2d:09:13:c5:62:5d:21:cd:c2:28:5c:bb:42:3a:
         19:e8:07:ff:f9:8e:d8:37:19:fe:5b:08:11:d0:14:57:0a:fe:
         ec:02:c9:69:27:1e:96:38:87:60:d8:c5:75:23:81:06:5f:69:
         78:6b:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:47:25 2025 by rpki-client