Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa
File:                     6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa (raw, json)
Hash identifier:          Jgg5WdX8wolqfPa7PGsiFzl0sQswpeZ+sk1/RISX2xw=
Subject key identifier:   E9:05:90:EF:C9:42:5B:4A:B3:0E:86:9D:51:75:9B:0D:74:96:A0:7B
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C4537B9D2BE764B748632900
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa
Signing time:             Tue 04 Feb 2025 03:53:32 +0000
ROA not before:           Tue 04 Feb 2025 03:53:32 +0000
ROA not after:            Mon 05 May 2025 02:53:32 +0000
asID:                     14813
IP address blocks:        72.22.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:53:7b:9d:2b:e7:64:b7:48:63:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 03:53:32 2025 GMT
            Not After : May  5 02:53:32 2025 GMT
        Subject: CN=b11d5160-f734-4215-8ef0-fad881ee2bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:5f:f2:e2:9d:9b:48:8a:cf:8b:1a:18:bf:
                    52:10:2b:96:18:8b:c8:74:61:a1:a6:9f:f3:ea:52:
                    a5:4b:d1:a0:61:1c:4d:9f:f7:28:56:62:30:8f:17:
                    d8:be:a1:01:28:29:2a:72:f1:69:a6:48:84:92:dd:
                    f9:6e:33:a9:71:5d:60:88:fd:4f:85:64:7e:36:43:
                    2c:1c:ec:fb:85:4c:24:ca:c0:46:dd:94:56:75:70:
                    8b:95:7c:df:ff:df:cf:9c:7f:ca:95:a8:35:64:ec:
                    22:48:63:a0:8b:33:c6:37:4d:f0:01:eb:3e:19:47:
                    82:e2:a5:5f:34:fc:a4:36:8e:a4:81:58:d0:73:3e:
                    0a:83:e1:6e:81:a4:d8:d5:50:57:bd:45:3c:ca:c3:
                    47:a5:2a:e7:fc:66:ab:5c:41:87:2b:fc:c9:7c:7e:
                    b1:51:24:3b:a8:f8:da:9c:28:4a:c7:ef:2d:30:fe:
                    bd:f8:32:08:a8:88:22:87:fb:7d:8b:b8:07:19:d6:
                    b2:89:a8:df:ee:92:80:d9:7a:a1:54:15:7a:c2:97:
                    49:00:6e:21:52:ae:86:21:5f:8e:33:b9:1c:3d:8c:
                    e5:92:8e:27:3c:bb:94:58:ef:e2:ed:e9:a9:84:0b:
                    25:43:ad:7c:ad:02:bf:fc:42:82:a1:c5:39:9a:f8:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:05:90:EF:C9:42:5B:4A:B3:0E:86:9D:51:75:9B:0D:74:96:A0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e6:f8:36:12:e2:b5:b8:91:16:0b:5a:90:69:ce:45:be:91:
         e9:64:b5:bf:6d:4a:f9:f2:5c:8e:9e:42:1b:1d:e3:61:de:89:
         56:48:d7:df:ff:ab:50:7b:ec:8e:1b:ba:0a:27:78:4e:25:79:
         34:dc:80:8e:1c:25:f9:ee:eb:cf:87:29:fb:8d:f0:f3:6d:26:
         ae:10:8c:8b:71:3c:5d:36:d2:80:17:9e:75:76:50:3a:99:3a:
         df:fc:08:5c:a1:ca:8b:10:7c:c9:71:5c:75:72:78:3b:ba:ff:
         28:52:9c:c1:b3:d7:ef:59:9d:d8:9d:e6:c7:bb:fc:fc:87:40:
         a8:1b:e0:e3:34:b1:56:ed:a9:ad:df:80:85:2a:fd:70:b0:fb:
         30:ab:7a:9b:62:ea:d4:88:ae:17:c8:0b:6b:1e:55:88:fa:14:
         4b:1c:3f:a9:15:33:b2:00:91:68:e3:f0:c2:de:89:d3:81:f9:
         79:1e:aa:39:3b:b4:97:0a:bc:72:88:9c:3a:bb:c0:2e:46:d7:
         c5:96:6a:b4:66:5b:80:fd:5b:3c:84:4a:b3:87:23:c5:1f:0d:
         4a:fb:15:ae:e4:0e:00:b0:c1:2a:6f:5e:23:fb:6a:a1:7f:09:
         7e:a5:37:44:0a:8e:24:78:f8:ed:ff:1a:96:d8:b9:b5:0e:da:
         dd:68:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:07 2025 by rpki-client