Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ee9e380-7ff4-3834-9988-9fe4553a0667.roa
File:                     0ee9e380-7ff4-3834-9988-9fe4553a0667.roa (raw, json)
Hash identifier:          Yc/RvFwfg+OXWoHh0aYUHzOmA8WaHPYyK0wLVO5iTTM=
Subject key identifier:   C0:FC:34:1B:5C:B8:15:A4:BB:62:35:A3:81:3A:2C:92:F5:B2:22:88
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285849BC74B203D9825383762D8040
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ee9e380-7ff4-3834-9988-9fe4553a0667.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     16739
IP address blocks:        208.72.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:b2:03:d9:82:53:83:76:2d:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=05745b9a-ce1c-437b-bbc5-c678fe54be39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ce:6e:78:3b:ed:6b:9a:74:40:42:a4:86:14:
                    8d:50:aa:aa:79:6f:c2:f0:00:c2:1d:59:fe:c1:8b:
                    6e:2e:29:75:1b:4d:73:37:55:85:31:9d:02:07:9a:
                    90:fc:3e:8c:0c:30:84:c4:d4:7f:30:6c:a1:a7:f7:
                    8f:2c:20:a3:d8:f0:fa:a6:cd:69:db:ac:49:37:27:
                    a4:4c:39:78:ca:8e:6d:c9:32:ab:56:09:2d:20:f0:
                    16:7c:f4:ae:90:64:6d:34:87:d7:1e:59:cc:10:65:
                    79:a7:8f:c3:dd:fd:3c:d7:58:a8:cc:ef:2f:89:2c:
                    83:e1:4f:85:89:aa:20:5c:bf:ef:93:0f:2d:d1:05:
                    f8:35:4d:27:82:81:a3:7f:c0:74:8e:22:23:68:97:
                    ae:89:71:e2:44:4a:75:35:1e:81:45:60:33:95:28:
                    f1:0b:67:af:76:9e:51:1f:5c:77:95:67:b3:46:8f:
                    96:a5:0a:cb:e1:78:61:89:d9:e2:5e:fb:2c:f3:a1:
                    b8:f9:aa:b6:cd:9d:bd:9e:47:81:e5:bf:b0:eb:94:
                    62:4e:fc:2e:ae:68:b9:6c:17:56:70:88:b3:8e:45:
                    d1:de:29:45:dc:b6:42:ee:16:f3:0c:73:d3:9b:e3:
                    44:a1:90:3e:53:23:53:5e:54:a3:44:37:24:63:d5:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:34:1B:5C:B8:15:A4:BB:62:35:A3:81:3A:2C:92:F5:B2:22:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ee9e380-7ff4-3834-9988-9fe4553a0667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:20:1c:de:74:2d:d2:06:2f:d1:5b:d8:f7:77:98:f9:1f:99:
         2c:43:74:75:3a:e2:c0:a0:0f:ca:fd:2b:27:b1:9f:25:88:e5:
         fb:10:1f:c6:bd:15:49:b8:7f:ce:19:57:85:43:c4:28:08:94:
         11:a3:72:4f:77:74:10:fe:bf:32:ff:e3:79:6f:10:78:bf:aa:
         0e:b1:2d:c9:e2:9d:93:c8:9d:e6:d4:7e:51:f2:d8:7a:e1:f9:
         3d:92:b7:e5:da:c0:a4:2e:8e:64:16:f9:38:11:24:e2:d0:fa:
         8a:47:b3:ba:c5:78:a7:8e:d3:c2:b4:dc:c5:8f:b5:f8:63:42:
         0d:7c:a3:93:f3:be:3d:49:75:67:a0:44:7d:fb:79:55:1c:0e:
         ac:7a:0a:c4:5e:22:4f:a6:df:4b:c1:18:c6:8e:bf:00:fe:d8:
         a4:43:59:7a:27:2b:6a:fa:c9:f2:84:1b:69:cb:72:31:4b:f7:
         c2:28:c3:ab:b4:70:c9:66:32:f7:a6:d2:af:73:14:f3:2a:20:
         c1:b4:5d:49:73:64:84:f1:c7:d6:a9:f3:03:3a:f1:3f:46:cc:
         5e:d3:0f:e4:fe:e0:c5:e0:f9:e3:08:bd:cc:48:78:9d:ac:c9:
         ba:bc:39:28:8e:b1:49:b3:6f:33:24:be:14:38:f8:09:47:f7:
         0a:7c:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:46:15 2025 by rpki-client