Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa
File:                     93b6fced-343a-3651-b150-3e2b9feb7e27.roa (raw, json)
Hash identifier:          /X9mifMIIJ/CZ/4vL0nu7v1iP6xx5WuIF+nxhrn/pw8=
Subject key identifier:   FB:CF:38:5C:B7:20:1F:77:51:66:44:06:F6:8F:06:F0:D3:E8:1A:11
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A841245E598D074B3A27C4900
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.22.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:45:e5:98:d0:74:b3:a2:7c:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2384a1c4-4315-4153-b208-376ca89d8fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3d:db:38:83:e5:fe:e4:89:6f:f5:98:37:2c:
                    09:e5:35:f1:56:c0:2c:9e:77:9e:4f:92:ea:db:4c:
                    6e:46:c9:46:e6:45:35:23:e7:5b:6a:78:d3:9e:9e:
                    b9:47:fe:e5:0b:34:f4:b8:4b:4a:54:b5:ca:28:c0:
                    ff:9c:c1:27:8a:6d:ee:ee:a3:00:4e:5d:b5:1f:93:
                    5f:69:70:63:5d:c8:51:7c:40:f5:41:10:9e:75:23:
                    bd:29:a6:f3:e4:05:04:e6:15:11:5b:7d:44:69:2e:
                    26:9f:d4:8f:81:28:fa:61:72:a1:0c:41:50:29:74:
                    33:d8:62:ad:04:fb:e3:08:06:81:d6:23:e4:71:f5:
                    5d:29:ee:fb:b3:f0:08:a8:ea:90:06:75:c9:6f:00:
                    67:47:70:1f:8b:58:42:91:79:66:93:e8:41:19:34:
                    aa:11:54:84:55:7d:35:e3:b0:3a:55:0c:97:33:40:
                    1b:c9:08:80:67:96:d8:0d:83:b5:de:7a:b6:83:13:
                    ed:4f:98:fb:b7:d0:28:44:f0:ee:d4:77:81:d1:ba:
                    37:eb:75:84:31:29:e9:34:01:19:33:29:49:e8:c9:
                    5e:c1:99:ed:ee:a1:4a:82:8a:2b:f2:45:9d:2a:57:
                    58:b4:d3:5a:12:ee:65:7e:83:cc:50:8a:49:bb:c8:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:38:5C:B7:20:1F:77:51:66:44:06:F6:8F:06:F0:D3:E8:1A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:39:01:39:7d:fb:45:04:e5:67:68:00:30:19:d4:19:f6:41:
         be:a6:22:e0:92:09:34:87:bd:aa:a1:5a:a5:06:2f:7c:56:ee:
         e5:b4:5d:d2:fe:7e:4f:e4:30:42:38:d3:80:4f:b5:d2:84:1c:
         ad:bd:65:de:6a:9e:ba:d6:40:76:da:b0:23:ab:99:dd:47:f6:
         ee:c2:dd:7c:5e:c1:34:ee:a5:44:01:44:dd:dd:62:9a:ad:a0:
         10:95:c7:36:b5:75:97:71:cf:dc:07:93:52:62:b8:7e:eb:1d:
         09:40:d2:a9:90:d2:29:fa:3f:cc:37:63:43:31:a7:6b:df:f3:
         a8:a2:84:50:33:4f:dd:6a:e7:a9:16:40:48:51:b4:26:fd:f9:
         6a:84:fe:38:66:f3:bd:17:97:dc:be:26:34:ab:c5:4f:95:2c:
         22:77:97:5b:2d:f9:1d:42:e0:00:8d:66:31:c1:c8:af:5a:5d:
         5c:33:0c:04:ff:f2:cf:c9:4c:71:52:d4:b3:bf:20:9c:53:ff:
         07:9e:d9:35:1d:fb:cc:17:02:f5:c7:89:b0:51:64:ab:77:87:
         07:9e:21:75:c0:f7:db:d7:72:45:ac:e7:a2:2f:ac:f0:97:e2:
         f9:39:af:a1:39:e4:4d:20:ed:95:1d:c9:57:ea:5d:58:cf:8a:
         73:a0:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:54:32 2025 by rpki-client