Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/3e72fe9b-fb31-357c-908d-5316eaea2020.roa
File:                     3e72fe9b-fb31-357c-908d-5316eaea2020.roa (raw, json)
Hash identifier:          gY7Ir6GK+gou4/dA6gh4ERHNTDaSnP6r7xDM2NAf4T0=
Subject key identifier:   B5:AF:06:66:2D:C7:AC:4D:C2:F5:01:30:96:DE:24:06:55:F9:32:8D
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F43285849B149F257B089B75C483AECA0
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/3e72fe9b-fb31-357c-908d-5316eaea2020.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     19905
IP address blocks:        205.156.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f2:57:b0:89:b7:5c:48:3a:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=fcbae323-bb5d-402b-b2c0-4f6924085c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:17:d4:1f:90:4f:b0:ab:19:3a:97:09:31:
                    d3:43:02:a0:bd:4d:77:e1:2c:5c:05:f0:a9:a1:bf:
                    ba:3a:eb:ed:fa:0b:6d:d6:9f:59:38:29:fe:3b:8a:
                    03:66:24:14:ae:34:7e:e3:fc:63:11:cf:6f:89:34:
                    28:88:73:a6:39:b9:71:1f:5b:35:8b:b6:50:2a:36:
                    1b:b0:1d:16:b3:bc:7b:5d:83:dd:27:a8:2f:8d:f6:
                    08:29:cd:70:00:80:59:b6:4a:38:5c:3d:7b:f8:b9:
                    9f:43:e6:9a:5c:a1:f5:0e:b2:34:eb:68:8e:7b:c9:
                    90:63:21:08:fa:18:87:a9:9a:62:02:00:a4:d3:c6:
                    4e:10:6d:48:18:5a:28:89:2a:2f:a3:70:96:ab:bd:
                    2e:a1:8b:13:73:1e:65:a6:c8:9e:94:8e:8b:27:d7:
                    13:3f:04:d7:55:f4:4e:83:a9:39:cb:1b:34:ea:39:
                    a2:69:42:22:b5:0b:23:a1:cb:61:14:04:ec:c1:7d:
                    cc:d5:dc:7e:9f:ef:83:41:f9:9c:e7:bf:d3:f9:94:
                    51:c2:90:33:e9:46:eb:07:1e:d2:6b:4e:14:90:72:
                    1e:c7:ea:ed:d0:85:bd:2c:03:e8:c9:f5:63:f4:59:
                    6c:5e:98:bd:8b:b3:2a:d5:5b:11:6d:34:77:60:b7:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:06:66:2D:C7:AC:4D:C2:F5:01:30:96:DE:24:06:55:F9:32:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/3e72fe9b-fb31-357c-908d-5316eaea2020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:83:f9:1e:8b:3b:0b:4d:0e:d8:72:c0:77:dc:f4:87:02:
         99:38:61:36:b3:49:ba:b0:6c:59:1b:c3:bd:77:2c:dd:78:95:
         09:95:42:d8:60:3a:27:b5:a7:54:5b:d2:61:c7:ef:cc:11:c6:
         fe:2c:78:f1:b3:bb:35:c5:ab:43:67:80:e3:7a:73:dc:19:11:
         c7:9f:68:ae:59:b4:de:c4:f5:54:7f:f1:37:54:07:23:0e:1f:
         1e:d0:17:84:18:b1:98:b5:a5:b1:7e:d8:8e:47:c4:c2:a7:23:
         89:cb:cb:8d:b8:d8:01:dd:88:cd:42:0e:90:38:8d:49:9f:e1:
         2d:ca:fb:25:37:46:06:f4:46:10:37:e5:bd:9d:db:69:dd:13:
         2e:12:6f:e0:30:74:f9:3e:31:06:c4:cc:b6:37:8c:0c:db:71:
         c2:f6:b5:60:ba:40:8a:2f:a5:ce:9f:a7:ae:84:ff:80:82:e2:
         6a:40:9f:6f:ce:92:b0:69:c6:3d:e1:e3:27:35:ed:b2:75:0c:
         ef:03:08:87:44:d3:b0:ec:41:83:31:f8:97:4e:f0:a2:29:a6:
         50:10:e6:0d:4d:86:75:de:40:50:e8:76:2c:82:01:7f:3e:01:
         5c:23:ce:dc:b4:ba:bb:ce:6e:2d:29:56:61:53:03:f6:68:69:
         e4:66:7a:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfJXsIm3XEg67KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzk2YmJhOTUtYjE1OS00ODY3LWE2NDgtYTlmZjg4OTcz
YmUxMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
ZmNiYWUzMjMtYmI1ZC00MDJiLWIyYzAtNGY2OTI0MDg1YzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjMX1B+QT7CrGTqXCTHTQwKgvU134SxcBfCp
ob+6Ouvt+gtt1p9ZOCn+O4oDZiQUrjR+4/xjEc9viTQoiHOmOblxH1s1i7ZQKjYb
sB0Ws7x7XYPdJ6gvjfYIKc1wAIBZtko4XD17+LmfQ+aaXKH1DrI062iOe8mQYyEI
+hiHqZpiAgCk08ZOEG1IGFooiSovo3CWq70uoYsTcx5lpsielI6LJ9cTPwTXVfRO
g6k5yxs06jmiaUIitQsjocthFATswX3M1dx+n++DQfmc57/T+ZRRwpAz6UbrBx7S
a04UkHIex+rt0IW9LAPoyfVj9FlsXpi9i7Mq1VsRbTR3YLcyAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWvBmYtx6xNwvUBMJbeJAZV+TKNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OTZi
YmE5NS1iMTU5LTQ4NjctYTY0OC1hOWZmODg5NzNiZTEvM2U3MmZlOWItZmIzMS0z
NTdjLTkwOGQtNTMxNmVhZWEyMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzk2YmJhOTUtYjE1OS00ODY3LWE2
NDgtYTlmZjg4OTczYmUxLzc5NmJiYTk1LWIxNTktNDg2Ny1hNjQ4LWE5ZmY4ODk3
M2JlMS5jcmwwHwYDVR0jBBgwFoAUtusl9Lerc/uJ6agb3SIo2qd7XHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83OTZiYmE5NS1iMTU5LTQ4NjctYTY0OC1hOWZm
ODg5NzNiZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZxIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpzg/keizsLTQ7YcsB33PSHApk4YTazSbqwbFkbw713LN14lQmVQthg
Oie1p1Rb0mHH78wRxv4sePGzuzXFq0NngON6c9wZEcefaK5ZtN7E9VR/8TdUByMO
Hx7QF4QYsZi1pbF+2I5HxMKnI4nLy4242AHdiM1CDpA4jUmf4S3K+yU3Rgb0RhA3
5b2d22ndEy4Sb+AwdPk+MQbEzLY3jAzbccL2tWC6QIovpc6fp66E/4CC4mpAn2/O
krBpxj3h4yc17bJ1DO8DCIdE07DsQYMx+JdO8KIpplAQ5g1NhnXeQFDodiyCAX8+
AVwjzty0urvObi0pVmFTA/ZoaeRmegI=
-----END CERTIFICATE-----
Generated at Sun May 11 10:30:05 2025 by rpki-client