Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa
File:                     8627eb3e-2ada-3de9-b53c-c5df600e1058.roa (raw, json)
Hash identifier:          NtydOYmo1sn/g+KTHRPCR9HhqWsp44ZNZm8aE5X64/U=
Subject key identifier:   2E:20:07:9B:3F:E5:AB:D3:3E:1B:D3:7F:64:19:96:6D:E9:FA:89:83
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584AA85BB7A15C03724611E030C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     174
IP address blocks:        72.14.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b7:a1:5c:03:72:46:11:e0:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=3f49315e-3505-4e17-bf9f-5106c9b6e459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:09:cd:ff:9d:04:4a:7d:61:35:ae:b6:51:
                    fe:9d:e3:2e:37:98:44:ab:96:a0:32:b2:7b:f7:e3:
                    0e:0e:77:51:cc:c9:60:e4:46:df:6c:43:63:31:6c:
                    fe:1d:99:ec:92:f4:32:16:c5:23:e0:ea:e3:ab:a9:
                    ec:75:35:4a:54:d7:f9:64:0e:ab:54:a8:fe:58:74:
                    ce:71:c1:59:cb:58:31:38:b5:2d:83:54:32:c6:ce:
                    15:03:f7:47:cf:a5:fe:05:2f:fb:9b:eb:fd:45:3d:
                    6d:59:03:40:b0:e0:ce:d2:a4:8a:73:85:b3:45:b5:
                    e1:9f:21:f7:94:20:87:05:88:c3:60:30:95:72:58:
                    32:3b:44:9a:c8:99:1a:75:5f:08:1c:27:a7:ce:76:
                    bd:86:a0:b2:94:a3:9a:ea:b9:42:47:96:cc:27:86:
                    aa:ed:5f:67:da:d1:40:cd:ae:23:20:74:45:b9:55:
                    84:9c:ad:df:bb:70:8c:e1:1a:d9:50:35:0e:73:ea:
                    5d:72:8e:6c:16:a0:c0:ae:9d:e5:ce:ef:0a:8d:d8:
                    d3:60:53:6c:81:8a:02:fb:79:d8:af:6e:57:33:4a:
                    44:6f:a6:58:e3:47:77:6d:06:3b:19:68:87:a2:20:
                    83:c5:30:fc:ce:a6:af:30:34:39:cd:7d:e3:b2:ce:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:20:07:9B:3F:E5:AB:D3:3E:1B:D3:7F:64:19:96:6D:E9:FA:89:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:44:c1:0b:b4:28:0c:80:e7:1f:b3:da:99:18:b8:81:48:39:
         fd:5d:49:b9:b6:97:52:06:5f:97:7a:08:69:e8:98:44:ea:48:
         ed:80:51:5e:6a:18:78:31:ba:f7:98:f5:a6:f0:1c:b3:07:c1:
         0b:31:90:b6:19:49:69:8a:39:d5:03:05:ba:c1:ad:64:44:0e:
         61:ae:ae:27:63:cd:b8:08:ed:6c:02:71:56:df:fb:94:5a:37:
         be:f2:cb:aa:44:22:4e:16:42:5d:2e:2a:22:9a:a6:79:2c:17:
         55:4b:34:3e:d1:3a:e6:c0:d3:26:c2:09:90:91:de:42:48:21:
         72:92:5e:23:67:40:f8:fb:54:80:d6:d6:c9:a5:f3:a4:da:fa:
         d0:aa:24:7f:d2:11:f3:74:4f:9b:84:43:1c:f5:77:ca:2b:b5:
         d0:ad:59:67:3b:25:2d:56:cb:5a:61:07:0c:82:0d:0a:da:92:
         23:b7:12:d4:0d:ac:34:56:5d:c2:69:5c:c9:8d:cd:49:51:2a:
         44:76:62:fd:78:b2:05:51:7d:1d:34:c4:ec:58:3b:70:06:ca:
         31:30:f8:a4:d9:14:5d:0f:e1:75:e6:3d:b3:53:c3:f2:8f:cb:
         40:df:8a:23:73:91:a8:6e:08:59:d8:a8:b0:e9:37:b2:9a:a6:
         fd:1e:27:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 06:48:24 2025 by rpki-client