Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa
File:                     f5c2204a-c798-3685-8995-a2829476ac78.roa (raw, json)
Hash identifier:          2QGjf1f2TaDohhxgFKpEuUbodmBB+OG175OWaVBcgkQ=
Subject key identifier:   EE:72:05:32:49:BE:08:73:86:EA:D5:C8:51:84:CE:DA:E3:48:12:D6
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584968B4266DCC38B90F972A9D00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     46606
IP address blocks:        72.22.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:26:6d:cc:38:b9:0f:97:2a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=33abb21f-eb8c-4179-b6a0-7e784e8f199c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:f2:84:c8:ab:0c:f7:a1:bd:25:88:35:ec:
                    4d:b2:6e:13:03:56:29:c9:23:38:20:6b:b2:24:b2:
                    18:ec:31:15:aa:47:28:f0:af:97:97:78:14:db:da:
                    97:bb:1f:54:9a:c8:0b:87:c4:56:ae:06:58:92:c9:
                    e0:b4:c0:d5:5b:3f:83:9e:67:f3:0e:58:4b:87:97:
                    b8:b0:7f:b6:ef:f0:13:a3:6d:93:f0:78:53:d5:36:
                    78:08:5c:34:60:e2:8c:4b:a1:83:8a:3d:4e:65:ba:
                    5a:88:bc:68:db:a8:fa:11:df:44:69:a4:09:5e:8e:
                    1d:e5:14:fa:ea:a7:38:be:89:80:f0:d4:e5:72:2e:
                    17:5d:a9:6f:f8:a6:eb:6a:d0:86:99:55:3b:8c:40:
                    47:26:d4:57:5e:20:1e:a1:a6:39:2f:3b:cf:1f:1b:
                    d4:9f:2f:0f:b1:cd:05:06:fd:e7:98:53:2e:e5:99:
                    8b:c6:f5:25:d1:02:a3:55:56:0b:25:a2:3f:58:fe:
                    be:65:64:f0:ed:2d:76:a6:83:4d:1d:d8:5a:7b:75:
                    eb:b7:71:a0:3c:65:9f:67:05:49:2c:01:55:73:52:
                    3d:fe:ed:e6:d7:5a:7f:26:fd:5d:60:8f:3b:25:2d:
                    09:c6:f9:85:4d:b2:42:26:3c:52:66:4f:40:04:f2:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:72:05:32:49:BE:08:73:86:EA:D5:C8:51:84:CE:DA:E3:48:12:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b7:19:a5:2b:84:f3:f4:2f:1b:c2:8e:d1:90:37:b2:5f:89:
         03:f4:50:86:1d:75:3a:bf:92:b8:d9:f8:de:3f:82:10:1a:dd:
         02:48:aa:77:37:af:fe:8c:87:7c:00:9e:8c:44:45:72:f0:97:
         c9:70:29:94:56:94:88:3b:b7:b9:a3:38:84:ec:23:ad:97:95:
         ff:41:09:66:ab:fa:13:51:0a:69:be:33:20:1f:9c:e6:37:e6:
         39:45:fe:41:a0:36:1a:14:54:e0:e2:81:e5:17:f0:d6:fb:18:
         9c:69:c2:98:66:23:85:5c:1c:7a:f5:5f:ea:8e:e0:c7:c8:cd:
         96:2e:44:6d:30:e2:f3:76:f2:51:70:34:b4:12:e4:55:84:9e:
         35:43:c6:20:8c:1a:48:80:f0:9c:20:93:ea:cf:e9:2a:ad:3f:
         00:b0:99:0b:4f:63:f6:f6:7c:a3:8f:9c:e2:fb:77:41:1c:6c:
         00:04:6a:5e:c8:97:a0:2a:c1:54:53:bf:7c:86:79:f5:85:18:
         bb:cb:55:e7:b5:47:46:76:0b:c4:cf:8b:59:ba:74:0e:ee:56:
         39:9d:95:97:9d:40:23:fc:18:fd:88:5c:dd:9b:1d:8d:48:22:
         91:a2:50:43:ab:26:ed:c8:d5:dd:0d:dc:29:36:be:87:b5:62:
         7c:01:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:42 2025 by rpki-client