Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/15f24b66-dbb0-3253-9695-b4bada323f5a.roa
File:                     15f24b66-dbb0-3253-9695-b4bada323f5a.roa (raw, json)
Hash identifier:          JCPkqGI5OTGvinGtAelOijFKzQTvIjOSKhgdNdBU9KE=
Subject key identifier:   BD:61:12:A8:18:A5:F8:7D:BD:DA:55:7A:BE:C1:BC:E1:F9:FD:45:64
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849E7BA8688E8AD751C8D5DE700
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/15f24b66-dbb0-3253-9695-b4bada323f5a.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     11693
IP address blocks:        72.15.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:86:88:e8:ad:75:1c:8d:5d:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=835c39b7-9546-4668-b9e4-1a1161013d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:e3:a0:a5:e2:67:5b:a6:d1:54:39:61:7d:
                    43:3e:97:a9:68:84:8d:26:f1:06:8f:7b:87:97:9b:
                    22:1c:35:b8:80:0a:09:67:d9:0f:50:20:2c:b5:7d:
                    c2:c7:4a:c9:16:55:64:45:9d:f3:90:78:87:7e:e8:
                    78:6a:e6:60:c2:84:31:9d:8b:34:39:d2:97:f8:89:
                    f4:5e:eb:2a:8d:39:85:93:3b:df:5f:b0:b8:71:8e:
                    bf:4e:5a:11:6f:46:74:ed:96:0f:5c:de:9a:3b:60:
                    5b:18:cd:f3:b4:86:e9:60:fc:12:1d:75:13:3c:83:
                    66:29:32:03:e7:f4:6c:02:5b:6c:08:ee:2b:0c:e5:
                    da:47:e0:55:e0:ef:02:d2:8b:1f:fa:06:34:e1:97:
                    15:33:d3:76:18:62:da:7a:eb:42:75:e2:8f:bf:c4:
                    b9:ff:8e:e8:67:38:40:5e:bb:79:03:73:55:0d:95:
                    94:32:cd:c1:68:29:70:14:cb:de:fc:bc:5f:d9:d2:
                    3f:d6:6e:0c:d7:df:62:c8:89:e0:18:23:d6:25:8e:
                    9e:dd:63:66:80:be:47:15:42:d8:f3:97:f5:ae:1d:
                    35:41:8a:d7:fd:77:50:bc:55:71:63:6a:70:97:e5:
                    0d:4b:8b:f5:5f:fc:c7:49:1b:a0:77:b9:24:bf:6b:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:61:12:A8:18:A5:F8:7D:BD:DA:55:7A:BE:C1:BC:E1:F9:FD:45:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/15f24b66-dbb0-3253-9695-b4bada323f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:5c:bb:b5:5f:47:82:26:4a:b8:50:2b:a5:06:f6:e3:27:
         06:89:2f:48:85:95:ad:52:b1:d7:fd:71:23:83:af:c8:95:44:
         f3:9f:8a:06:ac:d2:d3:4e:28:fb:3e:77:6f:60:73:9c:f4:a0:
         f5:4d:de:b6:5c:7e:07:96:08:4e:03:47:2f:85:bf:68:3e:7b:
         2e:d3:03:d1:8a:51:ee:49:01:37:86:58:be:69:74:2b:7d:de:
         bf:3d:64:f5:40:9e:c8:5e:2c:45:1c:e6:4c:58:bc:d2:1d:5e:
         54:09:6d:a6:d5:94:54:e1:dc:c0:01:7b:3f:fe:4c:d1:a9:dd:
         c4:da:bc:b6:05:17:4b:38:71:6f:5b:5f:79:ab:68:f7:fa:75:
         e3:11:80:b5:c9:1a:48:41:16:b1:4d:b5:a1:c5:65:0b:c1:91:
         b0:f0:cd:bd:4e:7c:c4:23:7d:c8:86:c0:d4:27:b1:b5:68:03:
         e1:1b:0b:0d:34:ec:c4:57:f4:ee:f5:d4:36:f5:eb:8d:14:e3:
         b0:bb:e1:b5:8d:8b:3b:32:5c:d7:da:ce:c3:be:92:ee:1b:d3:
         45:9c:84:e0:36:4e:db:16:31:62:86:79:90:e9:76:83:d9:54:
         1c:fc:f7:eb:38:c6:66:31:43:14:1b:2e:76:8a:28:c1:53:66:
         5d:ad:6e:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoaI6K11HI1d5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
ODM1YzM5YjctOTU0Ni00NjY4LWI5ZTQtMWExMTYxMDEzZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lPjoKXiZ1um0VQ5YX1DPpepaISNJvEGj3uH
l5siHDW4gAoJZ9kPUCAstX3Cx0rJFlVkRZ3zkHiHfuh4auZgwoQxnYs0OdKX+In0
XusqjTmFkzvfX7C4cY6/TloRb0Z07ZYPXN6aO2BbGM3ztIbpYPwSHXUTPINmKTID
5/RsAltsCO4rDOXaR+BV4O8C0osf+gY04ZcVM9N2GGLaeutCdeKPv8S5/47oZzhA
Xrt5A3NVDZWUMs3BaClwFMve/Lxf2dI/1m4M199iyIngGCPWJY6e3WNmgL5HFULY
85f1rh01QYrX/XdQvFVxY2pwl+UNS4v1X/zHSRugd7kkv2tBJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1hEqgYpfh9vdpVer7BvOH5/UVkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMTVmMjRiNjYtZGJiMC0z
MjUzLTk2OTUtYjRiYWRhMzIzZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcOXLu1X0eCJkq4UCulBvbjJwaJL0iFla1Ssdf9cSODr8iVRPOfigas
0tNOKPs+d29gc5z0oPVN3rZcfgeWCE4DRy+Fv2g+ey7TA9GKUe5JATeGWL5pdCt9
3r89ZPVAnsheLEUc5kxYvNIdXlQJbabVlFTh3MABez/+TNGp3cTavLYFF0s4cW9b
X3mraPf6deMRgLXJGkhBFrFNtaHFZQvBkbDwzb1OfMQjfciGwNQnsbVoA+EbCw00
7MRX9O711Db1640U47C74bWNizsyXNfazsO+ku4b00WchOA2TtsWMWKGeZDpdoPZ
VBz89+s4xmYxQxQbLnaKKMFTZl2tbrc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:53:43 2025 by rpki-client