Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0cd74ba5-68dc-3df3-bc0c-e4fee6a13a35.roa
File:                     0cd74ba5-68dc-3df3-bc0c-e4fee6a13a35.roa (raw, json)
Hash identifier:          pqgYVowNsEnik5YnCPdUSHMBoFOzNsQx+8XMJMdmNsw=
Subject key identifier:   B2:D0:AD:50:BE:80:C3:5C:6E:C7:26:D5:82:D2:E0:1A:30:B8:DD:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A5E6064A935D48D9C2754B900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0cd74ba5-68dc-3df3-bc0c-e4fee6a13a35.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     12271
IP address blocks:        72.229.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:64:a9:35:d4:8d:9c:27:54:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=4e3bf842-d0d8-4aee-aec0-83f082b349af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:ef:e1:1d:69:0f:dc:c8:2e:15:65:14:4d:
                    c4:a6:58:b5:a3:24:f2:4b:cb:a4:33:5e:bb:4b:73:
                    b8:cc:51:2a:ae:f9:a5:cb:5f:b8:4e:18:5c:9d:7a:
                    3e:34:ce:fa:7d:f4:d5:41:c5:44:85:05:37:bc:c7:
                    57:d3:05:60:32:f5:d9:c2:57:a2:d2:22:b3:57:fa:
                    53:c3:39:23:e9:d7:8e:e5:c4:d1:87:ab:e0:fc:f3:
                    9f:17:bf:8a:04:22:26:9c:7e:f6:ec:7b:2b:56:0c:
                    b8:f0:30:9e:86:db:6e:1f:1c:a4:8e:89:7f:51:84:
                    c8:e5:3c:94:cb:a2:39:1e:0e:84:4b:c1:7f:ee:8f:
                    dd:65:11:56:c1:cd:d3:71:14:e2:0c:9e:61:b4:10:
                    16:be:8f:9a:f0:e5:a5:81:c4:12:3e:56:7d:81:59:
                    b0:ff:2c:39:67:3c:45:85:9c:90:ec:34:a5:0b:4b:
                    ed:f1:73:2d:f1:de:e4:79:ea:bd:29:f6:b2:a5:4f:
                    33:82:5a:42:9a:ed:89:f1:18:12:5c:26:be:e1:a9:
                    f7:14:d5:05:b4:64:dd:d4:51:2d:91:d6:d4:1b:ec:
                    17:27:66:e7:79:94:83:17:ff:73:7c:09:e0:e7:3c:
                    c1:4b:ae:c6:55:04:c7:11:5c:10:05:02:6f:1a:40:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:AD:50:BE:80:C3:5C:6E:C7:26:D5:82:D2:E0:1A:30:B8:DD:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0cd74ba5-68dc-3df3-bc0c-e4fee6a13a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:09:b0:76:2c:34:16:cb:57:80:9b:58:8e:5c:18:02:c9:
         ec:66:73:67:f9:d1:d9:11:b7:06:fc:5b:cf:29:2b:26:e7:19:
         f0:e6:93:ff:8a:ee:3b:a4:fa:4f:ff:c4:67:d1:0d:0e:ae:b7:
         2b:23:7f:89:1e:7f:7a:18:44:9e:49:57:9f:78:65:24:f0:81:
         b8:c8:1a:7e:32:a7:95:dd:e8:af:0b:e7:0e:67:a7:bb:a1:51:
         a2:44:27:d1:ab:4d:11:32:5f:74:20:04:a9:1d:42:bb:52:b5:
         a9:d1:14:6f:1e:d3:b1:f8:0c:74:42:a6:56:fb:39:6d:1e:74:
         91:a9:3a:44:be:77:4d:2d:bc:62:71:5e:49:c5:b0:6e:4f:d9:
         24:e2:af:ef:4d:e7:31:28:e9:ae:c5:92:36:c8:00:7c:4a:ca:
         95:04:ba:67:66:c0:a9:28:fc:68:f5:f5:17:23:f5:ed:77:5c:
         e1:52:85:74:12:f7:60:24:dd:3f:c4:2d:84:25:67:f3:db:46:
         9b:dd:6a:a5:14:36:2f:fc:10:51:b2:a2:00:77:3a:8c:eb:53:
         e1:6e:c8:91:6a:dc:6d:91:86:69:85:e6:e3:db:06:b6:22:ea:
         3d:d2:21:bc:34:dd:ee:ef:2b:f9:1d:82:f6:9f:b6:46:7f:c4:
         88:77:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:28 2025 by rpki-client