Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
File:                     65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa (raw, json)
Hash identifier:          /gbAZQBUyK6tFycp09bRabOwqfuXH0qKvuxKh2CYD/Q=
Subject key identifier:   66:4B:94:CD:69:04:84:E6:8F:3F:2B:6F:0E:36:BC:60:09:F4:E0:86
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584AC8765504B9B65C9E3C07DBA0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     212335
IP address blocks:        72.14.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:55:04:b9:b6:5c:9e:3c:07:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=faf88c4a-5dff-40b1-a20f-92d1ab46f9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:39:61:24:b7:73:05:af:bd:6d:36:5f:ff:
                    74:8d:2a:bf:bf:11:8c:28:1b:19:37:63:1d:6b:e5:
                    e0:41:eb:9c:cd:ed:09:ce:c1:7a:58:fe:3b:89:a5:
                    c2:27:ee:67:e8:a0:7b:c4:42:e3:c2:ab:10:34:bb:
                    29:f3:e8:91:bf:fc:c5:4b:f6:33:1f:9c:c5:d7:37:
                    f2:fb:43:f5:a9:da:b3:be:fc:95:0b:4e:89:5d:70:
                    00:94:99:37:59:4c:3b:ef:54:16:e9:71:40:0c:4e:
                    30:9f:b0:f0:46:79:c4:f2:d2:fd:60:67:0e:1e:6b:
                    28:d5:c4:a4:c1:e9:bf:89:a3:80:8d:eb:18:32:e2:
                    e8:6f:b5:40:2b:eb:4b:99:62:68:4d:ec:f8:4c:f1:
                    1c:b3:50:3a:79:b3:39:cb:43:38:b0:38:6b:bb:db:
                    09:67:a4:31:62:21:97:ff:30:ce:1b:aa:35:20:4e:
                    22:75:88:70:46:e2:e8:fc:eb:6c:5e:17:55:9c:d1:
                    59:eb:58:23:1b:e7:86:08:ad:c4:18:2f:3c:c9:ea:
                    f8:6a:21:58:07:e7:ee:39:c4:02:12:a2:bb:79:dd:
                    ba:4f:1a:ea:d7:53:cd:ce:21:9b:3a:49:bf:ea:3b:
                    7a:28:ef:f4:6a:90:22:92:86:33:8b:ea:9d:f2:2a:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:94:CD:69:04:84:E6:8F:3F:2B:6F:0E:36:BC:60:09:F4:E0:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:85:76:b9:3c:4f:78:30:17:ee:a6:f4:80:ae:82:e5:f7:
         6c:ef:f1:ff:b6:d9:c5:1d:e5:61:b4:d3:28:54:55:d9:33:ad:
         94:b1:86:22:6a:95:a5:94:aa:b7:b3:93:50:7f:17:da:aa:34:
         47:a8:07:fb:00:6d:59:19:e6:45:22:84:ac:c2:1d:ef:67:61:
         fa:65:1d:30:16:43:35:da:d5:8e:44:51:a3:4a:dd:b1:16:52:
         40:8d:54:8a:42:2b:c7:f2:3a:60:17:25:ef:83:04:9f:48:f7:
         66:13:ec:a4:5c:99:8e:18:e1:84:07:81:50:bb:58:22:2e:c8:
         3d:47:6b:42:8a:bf:71:d9:ac:6c:af:38:14:be:ea:fc:1c:60:
         0e:e2:e3:40:c8:ba:a6:85:09:04:da:b5:0e:f2:16:b1:b0:c0:
         7f:91:f9:03:de:87:9c:c4:b6:cd:30:90:03:67:16:e4:4b:86:
         a8:4a:3a:37:88:7a:bb:64:38:c9:73:d2:b9:83:6b:48:4e:64:
         f6:b3:66:7a:e3:1f:cb:a7:c7:e9:1a:f0:e4:9e:09:ac:ee:5e:
         d5:71:cd:6b:75:1d:2b:6d:77:76:75:76:0e:32:65:d1:f6:bb:
         6e:53:26:ae:83:9e:c7:31:84:75:3c:ba:6a:de:a0:0e:fb:ae:
         3b:37:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:51:25 2025 by rpki-client