Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa
File:                     39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa (raw, json)
Hash identifier:          AFD1Ms9P9m9xeQH4CXRoOuk4yu7RzKGlJt6EZaqVXqM=
Subject key identifier:   5D:DE:19:72:31:B9:1D:50:00:B0:B4:10:03:A3:54:09:B2:B2:7B:C4
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584902EC184FE0548ACD1B24BEAA
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     395425
IP address blocks:        72.42.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:18:4f:e0:54:8a:cd:1b:24:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=5da408e3-ffb0-48f6-8d91-c41fe61ed69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:f9:fc:95:0c:94:10:5f:ab:4a:05:ec:07:
                    52:65:33:eb:a5:4d:0e:e6:0f:a5:a4:a3:dc:28:7e:
                    25:6d:1e:66:70:53:f2:e0:63:9c:2b:da:6b:2d:b7:
                    79:b3:c7:09:cd:8b:d8:2d:41:2b:1d:70:88:1b:a4:
                    40:9d:fa:0b:2d:e3:9a:71:d5:71:17:9f:da:f4:92:
                    d5:1e:06:43:f5:5a:82:ea:f8:0c:c4:94:a8:dc:62:
                    d0:92:38:61:e6:bb:58:7c:f9:fa:22:ed:46:2f:15:
                    b5:19:ba:43:1c:73:7f:af:fe:01:10:b4:5a:b3:88:
                    b5:03:a1:10:3c:6e:c9:44:cc:a5:d2:70:3e:41:8f:
                    93:1c:48:ab:b6:08:02:8f:61:b7:de:ee:bd:6a:36:
                    8f:f4:a7:eb:c9:56:51:fe:e6:37:d2:88:77:91:d8:
                    19:b2:e1:06:68:39:1e:a0:77:f7:92:83:d7:e2:df:
                    51:aa:4d:23:a2:c8:d8:ed:09:04:15:ee:a0:71:1d:
                    d4:d2:ee:ea:1b:53:74:04:0a:82:5a:a2:4e:ec:ab:
                    4b:d0:1f:7d:c2:da:e4:48:c5:a3:b3:52:55:6d:86:
                    04:73:90:09:e9:5c:42:6f:ec:96:3d:1d:8e:d0:e5:
                    24:41:4b:a4:96:7a:70:a2:68:0a:2e:57:10:9b:9d:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:19:72:31:B9:1D:50:00:B0:B4:10:03:A3:54:09:B2:B2:7B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/39cb855f-f754-37d0-ab3d-415b7d12a4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:99:08:27:8c:51:c2:16:54:28:d1:da:e2:5a:4f:7a:29:
         65:f4:2c:2e:d6:3d:0e:cb:a1:8c:26:7e:0b:93:d3:ab:26:eb:
         f0:02:5c:19:a3:cf:e7:9e:0f:4e:d2:34:49:c1:91:26:dc:82:
         32:04:0a:5a:9d:6b:21:e6:3f:2d:c6:f2:91:b6:4a:54:13:cf:
         1f:fc:f0:c1:bc:e9:45:47:f6:81:42:5e:eb:22:de:29:e1:fe:
         64:c5:fe:89:cc:b1:31:67:a9:6c:dd:51:64:90:af:87:c1:a6:
         15:d9:48:11:7d:49:00:f9:82:a4:e1:ae:08:b5:dd:8a:f6:7b:
         88:51:bb:25:f3:bf:4e:48:01:aa:57:7d:1b:9e:81:68:dd:2a:
         82:60:03:24:27:21:ac:95:26:92:03:ba:06:b8:fd:7b:80:f6:
         b3:00:fa:f9:74:03:d6:26:cc:55:88:2f:be:9c:90:43:03:d9:
         b2:21:76:47:e7:06:2e:cd:5a:3e:0f:30:26:da:b0:a2:8e:b2:
         ee:e1:15:5a:ba:29:2b:4e:2c:d1:6a:ff:b7:35:b5:fd:99:5f:
         04:99:54:e5:20:c0:d5:3e:bd:aa:28:65:8b:a1:3d:3f:65:6a:
         6b:8c:ee:ad:b3:b1:6a:28:27:cc:07:a6:2a:5d:71:1f:9a:61:
         12:31:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:27:01 2025 by rpki-client