Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa
File:                     84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa (raw, json)
Hash identifier:          /tfUivCInXvG0oS3PF+gcmqMzX7+57fO1dRMJYGLlc0=
Subject key identifier:   7D:D9:01:6F:CB:C3:85:40:E0:BB:9D:AB:DE:0D:5B:B8:07:F5:BA:AD
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A84124C8998D9ACAD600B8240
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.22.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4c:89:98:d9:ac:ad:60:0b:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8195d8ac-54a2-4404-8ae3-e0c12d5024f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:d2:33:e0:bd:0c:f5:fe:4a:1d:8d:16:ac:
                    93:c5:f2:70:ca:80:af:cf:8f:e2:3f:78:41:e5:f8:
                    96:f9:9e:ef:43:84:8b:6f:f1:ca:f6:8f:db:e5:80:
                    f9:d2:14:8c:92:e4:10:06:ed:9b:40:24:82:0b:61:
                    ec:4d:8f:3c:00:85:1b:d3:ce:98:11:cd:d6:b2:b8:
                    b8:0e:a7:f1:4f:93:f8:4e:1c:63:f2:4d:8f:d4:4e:
                    3f:5d:ef:37:cd:50:0a:90:6f:97:8e:a2:1d:d2:88:
                    16:72:f2:ac:0b:2e:33:87:8d:cd:a4:5e:c1:79:3e:
                    bb:3a:6d:23:5f:9a:fe:4c:46:c2:83:0a:23:47:71:
                    be:c0:7d:2b:4a:07:74:79:ab:df:74:29:9e:21:30:
                    83:48:84:ad:37:30:e4:38:2c:39:b5:34:c6:bd:04:
                    86:bc:70:70:f7:0b:83:ac:4c:82:0c:f0:19:88:6e:
                    ab:35:35:c5:20:f1:cf:7e:2a:fa:d4:86:fe:95:39:
                    9d:dd:9e:04:44:db:44:1b:37:5e:52:7e:f7:df:04:
                    d2:49:f3:2d:6b:12:81:eb:8a:17:25:0f:76:95:b2:
                    21:f0:d0:f5:e2:bc:c0:26:09:aa:b8:9e:ae:45:57:
                    9c:64:7c:d7:c6:3f:e8:6d:36:e7:19:b0:da:10:23:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D9:01:6F:CB:C3:85:40:E0:BB:9D:AB:DE:0D:5B:B8:07:F5:BA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:54:04:3f:a1:33:3a:e9:04:32:0f:6f:b9:28:3f:1c:46:
         0d:fc:15:0a:83:1f:ef:54:3a:f9:fe:64:79:56:8c:98:fb:cd:
         97:34:de:bd:f5:a5:fb:b9:34:a1:22:dc:38:57:8e:0b:2b:aa:
         63:93:7a:13:09:1b:b9:5c:25:da:71:46:8c:c5:15:05:df:26:
         61:05:e5:92:6b:91:01:41:df:f0:ba:19:a3:ee:b0:0e:32:4a:
         be:e0:ce:a3:99:41:92:5d:bd:67:c0:3e:7e:a2:20:4d:de:57:
         50:5d:99:a9:88:6f:83:85:e4:7e:50:cc:8b:aa:d1:31:3e:57:
         7d:1d:5d:dd:f9:88:f2:da:63:4a:ea:a2:d9:5d:b0:57:6e:5e:
         78:7c:37:6a:cd:6a:30:43:7b:7e:fd:17:30:58:a6:39:04:b2:
         ab:ba:9f:44:d9:39:a0:3b:d0:75:45:07:5c:fe:10:3e:d8:49:
         fd:ec:35:47:d9:d8:1e:1d:ff:1b:28:75:18:6f:8b:86:b4:c9:
         89:dc:01:ea:0b:2e:e6:6d:da:ce:d5:f8:23:a8:ef:da:78:c8:
         9e:bb:5a:eb:77:51:92:31:ab:43:e0:b9:a0:a1:fd:55:f9:4d:
         bc:6f:b1:d0:60:25:cb:96:a4:c6:22:67:03:cd:bd:e9:21:a0:
         63:ee:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:51:38 2025 by rpki-client