Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27de5258-bc83-3da3-b0e8-20381f226aef.roa
File:                     27de5258-bc83-3da3-b0e8-20381f226aef.roa (raw, json)
Hash identifier:          VXaHazOgF44TZCAPI3NHc6PwgrcEcfLzwjUenDZZuVE=
Subject key identifier:   12:00:55:BA:65:23:38:77:1A:0C:22:B3:E1:36:10:EE:90:60:35:EA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6BD2374B3B3BD4B1BE60
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27de5258-bc83-3da3-b0e8-20381f226aef.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.238.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6b:d2:37:4b:3b:3b:d4:b1:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=6393d009-ca5f-49a6-b2a2-bb789a14d696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:fe:36:50:54:6d:a6:7a:c5:1f:6d:24:42:
                    94:5f:a3:db:ab:66:b8:46:c7:5c:d0:8b:4b:3c:18:
                    b6:75:e0:bb:0b:c6:cb:0f:70:28:85:9b:9b:0d:50:
                    b5:66:94:c2:ab:2f:79:68:e1:25:63:23:3a:cf:58:
                    46:fd:fc:18:4d:df:e1:86:4c:51:e0:fd:81:b5:00:
                    5b:5b:e8:67:8a:68:14:67:6e:15:24:9a:8e:ee:b7:
                    83:3b:0e:02:2c:4d:04:c5:96:42:7c:ae:95:83:6d:
                    51:7c:e4:e5:e2:33:59:8e:f1:77:bd:46:52:d1:27:
                    44:a8:67:33:46:90:8d:74:b0:e2:c5:bf:d0:b1:f0:
                    57:ac:a0:58:1e:64:3c:60:f7:90:d7:6b:2c:5b:6c:
                    27:61:42:af:86:84:63:5d:c8:74:09:56:9d:7b:9e:
                    0f:da:2b:7c:11:4d:14:ab:94:1e:73:05:24:d4:02:
                    78:b2:42:9d:8e:7d:0a:7b:fd:dc:93:64:1f:b0:27:
                    77:83:1e:1e:4a:5c:f7:e1:4e:33:0c:94:68:ff:c2:
                    0a:57:73:dc:c2:9b:4c:9c:b1:fe:a2:12:b7:14:ec:
                    85:e7:10:a2:bd:31:60:c7:d3:4f:86:25:d8:4e:2c:
                    06:3d:59:5e:ef:24:3b:67:90:ae:47:69:f9:dd:9e:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:55:BA:65:23:38:77:1A:0C:22:B3:E1:36:10:EE:90:60:35:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27de5258-bc83-3da3-b0e8-20381f226aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.238.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:0b:4f:20:67:62:33:54:94:2b:c9:75:40:67:3f:d6:98:
         0d:df:51:03:07:0f:32:bf:0c:80:36:89:ea:4a:c3:3b:bd:72:
         db:1c:e0:7e:f3:f6:0e:3a:62:ac:5f:7f:ff:e6:c4:4e:b6:d1:
         6f:a5:d5:00:e9:27:9d:eb:fc:48:75:85:77:da:0e:72:36:7e:
         55:df:58:e7:30:e7:40:c1:4d:49:30:1e:86:db:ef:52:19:7d:
         08:a3:e1:5a:5b:f6:65:a4:fe:ca:1f:ee:d8:10:e2:a9:03:6f:
         e7:3a:32:05:02:be:98:c5:76:96:7c:ef:ce:ab:bb:60:dc:c8:
         f9:88:63:cb:c6:41:5f:92:8d:eb:e8:ef:33:c6:f5:79:17:c4:
         9e:66:66:c1:74:92:5d:a4:b1:bb:79:c4:50:cf:61:b2:7f:61:
         2d:e2:93:ac:56:a7:c7:ab:a8:90:5a:c7:23:de:e5:a5:9a:a7:
         92:78:2e:e5:c9:74:0d:e6:26:c9:9f:3f:12:ad:b9:e3:f3:a8:
         b2:2d:18:3f:38:88:59:f9:9f:97:72:54:9f:68:7d:31:bb:64:
         e3:66:d1:dd:3a:90:f4:f9:4f:c5:58:bc:ae:ad:3f:cb:55:02:
         d8:47:36:f1:5b:16:4f:43:07:63:f3:4e:a5:7e:30:7c:d6:93:
         f2:81:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:09:03 2025 by rpki-client