Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa
File:                     5e9f9539-e9cd-3978-849c-cb39566f29fe.roa (raw, json)
Hash identifier:          91lxZWh2y6OiLr4ahnzOwgguZ784UxYONQthiBTTjcI=
Subject key identifier:   C9:2B:14:B9:4D:59:73:AB:87:17:D1:28:09:31:B0:1D:A1:70:FF:2A
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584A63F5B836829ECB94618DE7D8
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     834
IP address blocks:        72.14.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b8:36:82:9e:cb:94:61:8d:e7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=2da1389d-69ce-4268-9a93-74db9e3fd1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:54:aa:8a:93:be:35:da:24:09:02:85:cc:
                    c7:e1:28:16:14:36:4e:fa:92:fa:66:7e:08:8d:1c:
                    32:61:cc:7d:b0:bd:51:19:29:16:76:23:a0:08:63:
                    c8:6d:bb:f7:be:3a:44:fa:00:22:ad:fb:14:88:9d:
                    ae:dd:97:96:5e:98:d4:33:02:17:d6:df:ed:bc:bf:
                    19:1f:cb:e8:1c:5d:4a:58:6e:66:5a:21:8f:f5:7f:
                    d8:fb:a1:a0:82:91:cf:7a:1f:4a:de:3d:ab:5a:76:
                    a0:91:16:ce:74:73:ed:5d:1f:b2:89:20:a8:7b:76:
                    7a:76:b1:06:1f:e0:ef:0d:d0:66:bc:24:7c:51:34:
                    1a:cd:bb:4f:5a:e1:44:d8:42:2d:9b:ad:fe:0f:92:
                    7a:f3:cf:07:cf:e2:0c:61:58:59:20:9b:ed:c2:fb:
                    ae:e1:7e:9d:0d:1b:42:4d:0f:8e:9a:59:6c:d4:31:
                    bf:3d:70:ed:d4:48:26:8c:0f:6d:7e:37:82:72:37:
                    9d:21:92:0a:ac:9d:2a:93:c5:c6:92:a0:86:be:29:
                    2e:ba:36:f3:42:01:88:af:37:b1:ff:92:87:e4:10:
                    5c:77:18:8e:fb:82:76:d3:06:6b:75:29:77:f7:3a:
                    a0:de:09:ac:93:86:86:18:78:87:b9:e2:4d:bb:9b:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:14:B9:4D:59:73:AB:87:17:D1:28:09:31:B0:1D:A1:70:FF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:00:b1:e1:ef:49:c6:dd:14:b2:1a:57:62:af:86:05:6c:cc:
         78:85:7f:96:21:6b:40:74:10:b2:28:69:8a:db:cc:58:fb:70:
         9c:28:5c:25:76:ea:77:de:d5:38:63:a7:39:b5:a3:85:54:9c:
         51:ff:5b:9d:ee:d9:7b:8b:14:c1:c4:08:2a:ea:cd:32:df:17:
         a0:83:3b:e2:69:68:03:b9:49:29:68:4f:a9:3f:70:d7:70:74:
         4f:5e:8c:39:ed:d1:9a:6d:87:e3:44:2f:08:27:fe:5f:9e:23:
         5d:af:59:eb:98:64:5d:48:3e:df:b8:67:9c:51:6a:a7:b1:fd:
         cd:42:82:14:be:95:03:bd:73:4d:dc:2b:21:3e:ac:b6:44:fb:
         ec:53:5e:af:e8:81:71:bf:19:02:d3:26:20:b5:76:ca:f2:aa:
         86:20:14:f9:18:2f:d2:e4:cf:4b:ba:2b:62:2d:bd:9c:03:8d:
         df:f4:ee:ab:f0:04:ce:dc:17:a3:4c:fe:83:8d:2f:99:6d:13:
         81:52:05:a4:be:00:a2:22:9c:98:97:04:9b:fa:d1:d5:32:7b:
         8d:2f:9d:b4:89:70:f7:cc:a6:e5:e8:d0:b2:e9:9c:1b:a7:14:
         66:f5:03:9a:53:4e:83:5f:6c:3e:5d:18:aa:d6:b8:f2:d3:7d:
         64:d2:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:40:19 2025 by rpki-client