Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa
File:                     b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa (raw, json)
Hash identifier:          VKn/A2VdWr0t0NjKHpWaZQY/mn9VrXpTwUk01Mc/CYM=
Subject key identifier:   1C:7F:98:9B:6D:6D:4B:85:DE:CC:F3:98:B9:0F:A8:6D:18:86:C6:95
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F43285848F65BDC08C8643829CAC97480
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        72.13.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:dc:08:c8:64:38:29:ca:c9:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=0797805e-3955-4a2a-9551-9ce1b89b721d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:90:9f:9f:87:ac:af:83:3e:e3:f9:20:80:
                    7e:07:16:22:70:fd:1f:37:af:07:bb:2e:6b:9c:0c:
                    00:93:ef:7c:7d:72:b9:de:2e:ea:b7:25:a5:84:9f:
                    3a:e9:db:03:65:5d:31:b4:5d:80:ee:df:2e:30:3b:
                    f6:ca:2b:ff:41:b5:85:55:c5:f1:35:a1:92:78:2a:
                    61:fc:6b:3e:cd:7d:66:c4:62:7b:5e:d4:04:4d:5c:
                    07:fa:a9:55:62:b4:41:5f:64:3c:6d:01:e7:01:ab:
                    92:3e:35:b5:d0:21:ad:07:f1:93:40:f5:fc:b9:a4:
                    44:dd:49:da:8c:ab:ed:e1:fd:54:5e:85:6e:f7:26:
                    1c:aa:f7:bf:87:1a:30:61:7e:65:f3:19:32:02:01:
                    cc:e5:73:b8:27:d0:12:e8:94:66:4a:f7:0a:b7:68:
                    f7:f3:af:7b:46:ef:a3:81:91:06:0e:6e:7f:0f:8f:
                    6d:82:80:ff:a2:93:92:8a:92:df:d3:44:48:dc:43:
                    b6:99:3f:a3:95:73:cf:70:ab:da:49:06:e3:fe:c3:
                    f4:75:69:48:8f:ab:ae:e1:5b:10:b5:95:d8:6a:2f:
                    6d:2d:7d:fc:a4:b0:3b:69:d4:5b:d3:ee:9a:fe:f3:
                    ac:be:66:e4:92:5c:80:c9:aa:c4:3c:f4:06:47:cb:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7F:98:9B:6D:6D:4B:85:DE:CC:F3:98:B9:0F:A8:6D:18:86:C6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b4861e9d-d9e3-390c-afc2-2c3e7c9bfa26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:56:73:8f:bf:f3:87:6d:9b:50:83:ba:79:5e:fe:6c:95:
         1e:92:91:cb:c8:0f:97:78:d4:7b:30:c7:e5:bc:9d:ca:0f:98:
         1e:49:33:7c:38:e5:c8:e3:b7:91:6b:3f:b0:bc:40:21:ff:19:
         92:a9:3e:40:11:c3:6c:8d:09:eb:9e:45:d0:a5:26:c4:84:48:
         ac:60:68:10:2f:a8:74:ae:c8:96:68:f7:9c:ea:d7:0b:98:fb:
         fb:75:3a:64:2c:a1:00:c2:68:7a:d2:69:e6:13:50:d5:07:8b:
         ca:38:30:a4:50:e6:0a:cd:ed:12:ed:2e:70:d0:5d:e4:d2:96:
         70:c2:35:a2:42:bd:69:34:42:d3:bd:a7:e1:ba:27:ec:bb:94:
         bb:b2:38:d7:db:ee:18:e0:7d:45:d0:65:aa:68:ab:e0:77:56:
         ea:34:a3:0c:38:e1:03:87:c5:7d:ae:84:04:2a:24:52:9d:9b:
         19:bb:13:5d:21:35:c1:e6:71:c9:09:37:52:cc:8e:ea:30:bf:
         1c:c2:a6:b8:1c:4a:99:16:13:a9:1d:a4:66:28:e4:9d:4f:ef:
         18:7b:21:75:56:cc:39:fa:7e:3e:f7:93:94:ec:75:4b:d8:b6:
         2c:fb:37:f0:12:14:8b:f9:9e:14:93:c1:7b:66:2f:8b:10:9c:
         07:25:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:44 2025 by rpki-client