Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa
File:                     e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa (raw, json)
Hash identifier:          JZ0CR53kELMlqOlGMH5k2EQ996zzS83Vh/QI/xQ9fEU=
Subject key identifier:   1C:28:54:92:81:47:7E:44:75:46:2B:D3:20:BA:C7:40:5B:50:89:90
Certificate issuer:       /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial:       010D0C9F4328584A43DB0305FB3A29926BC4ED80
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     26464
IP address blocks:        72.2.112.0/20 maxlen: 20
                          72.2.112.0/21 maxlen: 21
                          72.2.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:03:05:fb:3a:29:92:6b:c4:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=651ccdc3-2d0d-4e12-8144-03aa162c5ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:f7:dd:bd:e8:45:a0:47:64:45:e7:68:ee:
                    80:4e:66:0c:bc:02:ec:d5:f9:aa:ab:cd:39:a6:dd:
                    b4:32:20:fd:e7:75:c7:9c:57:ee:90:72:c6:d6:66:
                    9d:c7:b6:dd:c9:ef:a4:a4:cd:70:cd:ef:1c:48:a8:
                    69:90:05:9c:f2:61:75:7f:e4:2e:c6:ac:04:36:b8:
                    6d:ef:c2:56:59:e2:d2:e1:45:ee:8b:60:09:88:66:
                    73:d2:bb:3b:ab:a3:f8:43:e5:a2:43:30:4f:99:0c:
                    e9:31:48:38:9b:29:35:34:e7:80:ce:40:e5:69:b5:
                    a0:54:b7:fb:ca:d6:7e:b5:f7:b8:ab:b5:eb:ec:d1:
                    6e:98:4f:1e:d7:e0:25:50:38:41:f1:b8:c4:56:2c:
                    da:d7:11:c5:22:70:0e:1f:39:e4:69:a9:96:f9:c6:
                    5d:bd:92:83:20:5f:0a:2b:b7:ba:13:31:67:e1:76:
                    76:81:b2:8e:34:d0:7c:07:09:f9:27:24:25:96:fd:
                    81:b6:13:13:b4:87:fe:be:ce:47:83:d2:9b:a9:64:
                    9c:75:9a:62:c4:14:01:1c:be:bf:cd:26:7f:06:48:
                    0c:e5:11:9b:8f:b6:f7:cc:b6:8b:0c:25:16:4c:f8:
                    60:86:54:c4:91:c1:de:12:d5:da:f9:19:a0:8f:ad:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:28:54:92:81:47:7E:44:75:46:2B:D3:20:BA:C7:40:5B:50:89:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl

            X509v3 Authority Key Identifier:
                keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.2.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:79:11:08:d0:63:f8:8b:1e:3b:5e:99:36:13:23:f5:46:c3:
         3d:06:64:fd:24:39:b3:10:0f:ef:b6:43:26:b2:0f:07:4b:6d:
         28:66:ba:12:34:7e:96:c9:fb:85:a9:42:11:4d:48:2d:e0:b5:
         be:36:19:5f:75:f9:c3:ae:89:dc:3e:65:66:26:5a:34:29:8d:
         b1:20:54:44:63:ff:03:67:02:90:f5:50:79:b2:46:0e:b2:45:
         40:ba:95:30:b4:bc:79:f4:39:e9:98:88:05:72:fd:33:b8:18:
         43:56:92:23:e7:97:d6:5b:93:d3:8a:77:78:46:78:64:78:d0:
         bc:b9:84:f8:78:2c:1a:a8:5f:f8:93:98:09:80:8b:b2:28:2a:
         14:03:82:62:bd:43:db:dc:aa:32:9c:d2:cd:75:c5:e4:44:79:
         e2:a8:e1:3c:db:b0:05:58:78:31:3f:64:a5:14:8f:e7:5f:f4:
         cd:37:cd:80:f8:8c:15:a1:6a:7f:dd:49:b6:de:de:03:84:89:
         af:79:ef:24:32:41:5a:e7:e8:f3:23:38:a0:04:17:03:63:7f:
         52:d0:92:5e:e6:85:b0:17:ff:7d:77:ce:34:35:fc:49:ed:29:
         fa:1f:f7:60:c1:53:68:91:29:ca:17:74:07:fe:92:1e:14:a0:
         90:11:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:19:30 2025 by rpki-client