Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b74b61a4-02a2-3e01-a598-1b22edcf060d.roa
File:                     b74b61a4-02a2-3e01-a598-1b22edcf060d.roa (raw, json)
Hash identifier:          jOhWAoo27NHwSgBiPyn6mGNe1LyJ5Z8QPjX4/VGwn9I=
Subject key identifier:   09:1A:06:1E:56:7F:6F:03:7A:F9:E0:D5:D7:A2:BA:B3:1E:8B:1A:E8
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858491D71804660C4ECCCB5BE44C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b74b61a4-02a2-3e01-a598-1b22edcf060d.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     393506
IP address blocks:        72.14.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:80:46:60:c4:ec:cc:b5:be:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=eeec2035-6f3e-449a-a811-eedf7879c607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:1b:b5:18:d4:01:8a:95:22:a8:99:c9:62:
                    7d:4c:c9:2f:ce:84:a4:5c:f9:84:c8:47:1c:2e:7c:
                    9a:9a:58:4e:82:44:9f:47:55:60:28:e0:4e:d7:ff:
                    92:9e:4d:2e:66:b0:18:6d:e0:6d:60:61:93:21:d5:
                    88:60:df:a8:c2:91:16:7f:4f:2b:2b:b8:39:bf:dd:
                    e1:19:1d:a4:d0:6d:4a:dd:e7:09:c4:99:f0:63:ed:
                    10:fd:e0:f4:15:df:8e:90:29:ee:c9:b8:9b:8b:d3:
                    20:4c:58:5a:6c:8b:67:9b:72:17:95:65:fd:96:50:
                    26:c6:96:70:d8:3e:29:67:68:ee:e9:1a:d6:c2:0f:
                    82:e5:3e:64:aa:2a:12:62:9d:6f:19:5a:05:19:1a:
                    52:54:5a:b4:3e:9a:20:e5:46:cc:cf:9f:1f:7c:67:
                    ad:ca:cd:25:0d:d4:5d:de:3f:5e:d5:4c:6e:7e:6c:
                    18:4d:f8:79:cb:1b:b4:bb:98:f4:3c:e9:c5:c7:ca:
                    de:94:a2:6f:ed:eb:d6:12:5a:32:df:1e:4d:a8:82:
                    64:e2:a0:2f:6f:74:2e:d2:9a:42:13:31:d8:3e:0b:
                    5e:2e:c9:2d:73:bf:6a:c6:63:24:21:7d:d4:63:6e:
                    53:d6:53:50:dd:5f:b3:14:88:62:4f:b7:ed:b8:74:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:06:1E:56:7F:6F:03:7A:F9:E0:D5:D7:A2:BA:B3:1E:8B:1A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b74b61a4-02a2-3e01-a598-1b22edcf060d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4c:c0:38:cb:0b:52:89:5b:cc:56:17:1a:23:f8:6b:4b:80:
         7e:45:fc:8c:2f:56:d0:6d:2f:9e:80:b5:53:d5:8b:2d:42:96:
         f5:97:30:c6:19:9e:19:f2:2d:43:79:c3:be:4e:b9:50:af:f0:
         47:1d:f8:59:47:83:4d:93:ff:7d:c2:c6:b4:4d:4b:d7:20:6d:
         60:39:39:5c:94:9d:72:fa:66:24:75:8b:11:44:25:3c:65:60:
         0a:ee:42:ea:32:a6:0d:6a:09:31:a1:ac:30:c2:dd:d0:b4:60:
         b3:c8:7b:28:6f:af:3a:fd:9c:47:3e:97:80:15:08:4d:e0:a2:
         77:0e:9a:92:30:85:4e:cf:82:d4:7f:f2:26:ef:16:ed:c5:35:
         64:88:b8:19:23:e8:88:ac:0e:6d:ca:84:2c:c3:94:0d:40:bd:
         9f:af:4d:b8:a4:41:b3:1b:06:5f:55:99:02:4d:3c:36:b8:9b:
         9d:69:75:74:27:44:15:be:66:d4:bc:63:22:81:33:9f:c4:60:
         a4:8c:15:fb:3a:ce:ed:21:08:39:41:3a:f9:1e:b2:07:0d:8b:
         95:2e:c6:79:aa:6e:4f:c2:51:2a:23:2b:1c:bf:bf:72:cd:49:
         20:13:f8:4b:f0:ac:46:2e:63:b4:7f:67:fd:91:04:14:51:b6:
         6b:a9:39:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYBGYMTszLW+RMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWVlYzIwMzUtNmYzZS00NDlhLWE4MTEtZWVkZjc4NzljNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm4btRjUAYqVIqiZyWJ9TMkvzoSkXPmEyEcc
LnyamlhOgkSfR1VgKOBO1/+Snk0uZrAYbeBtYGGTIdWIYN+owpEWf08rK7g5v93h
GR2k0G1K3ecJxJnwY+0Q/eD0Fd+OkCnuybibi9MgTFhabItnm3IXlWX9llAmxpZw
2D4pZ2ju6RrWwg+C5T5kqioSYp1vGVoFGRpSVFq0Ppog5UbMz58ffGetys0lDdRd
3j9e1UxufmwYTfh5yxu0u5j0POnFx8relKJv7evWEloy3x5NqIJk4qAvb3Qu0ppC
EzHYPgteLsktc79qxmMkIX3UY25T1lNQ3V+zFIhiT7ftuHQ7HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkaBh5Wf28Devng1deiurMeixroMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYjc0YjYxYTQtMDJhMi0z
ZTAxLWE1OTgtMWIyMmVkY2YwNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVMwDjLC1KJW8xWFxoj+GtLgH5F/IwvVtBtL56AtVPViy1ClvWXMMYZ
nhnyLUN5w75OuVCv8Ecd+FlHg02T/33CxrRNS9cgbWA5OVyUnXL6ZiR1ixFEJTxl
YAruQuoypg1qCTGhrDDC3dC0YLPIeyhvrzr9nEc+l4AVCE3goncOmpIwhU7PgtR/
8ibvFu3FNWSIuBkj6IisDm3KhCzDlA1AvZ+vTbikQbMbBl9VmQJNPDa4m51pdXQn
RBW+ZtS8YyKBM5/EYKSMFfs6zu0hCDlBOvkesgcNi5Uuxnmqbk/CUSojKxy/v3LN
SSAT+EvwrEYuY7R/Z/2RBBRRtmupOWk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:31:56 2025 by rpki-client