Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/df97dc9b-77d2-3e49-8e23-e69065d9d216.roa
File:                     df97dc9b-77d2-3e49-8e23-e69065d9d216.roa (raw, json)
Hash identifier:          YGH6rCdhppBkNuV1N2U1a1RbcKzvtwyRsPZF1hATke4=
Subject key identifier:   C7:06:F5:9C:79:12:57:9C:1E:0C:53:4B:EE:63:CE:FE:0B:94:D5:C4
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF7C11282DE0DE627AC77E9
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/df97dc9b-77d2-3e49-8e23-e69065d9d216.roa
Signing time:             Fri 11 Apr 2025 15:49:04 +0000
ROA not before:           Fri 11 Apr 2025 15:49:04 +0000
ROA not after:            Thu 10 Jul 2025 15:49:04 +0000
asID:                     64200
IP address blocks:        72.1.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f7:c1:12:82:de:0d:e6:27:ac:77:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:49:04 2025 GMT
            Not After : Jul 10 15:49:04 2025 GMT
        Subject: CN=fc6bb48d-5762-42c8-9a47-284e8e66f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:8b:1d:cd:12:2b:bf:4f:fa:ce:c9:59:a9:
                    ff:8e:17:be:98:f0:09:76:8e:92:ee:db:3c:c3:35:
                    7e:0f:17:89:d7:49:c6:24:a6:e6:24:03:d3:87:ed:
                    cd:f3:8b:d3:89:95:d0:61:ea:f0:a8:24:2e:c0:83:
                    99:78:c2:70:5d:97:dc:89:74:d0:19:38:c1:da:b4:
                    2b:19:41:e4:9a:d6:bf:38:c7:31:04:d5:d3:a0:f3:
                    4b:be:ae:61:61:a4:f9:79:ed:26:ce:fa:e3:54:2c:
                    90:e3:da:2f:32:37:c7:04:b0:1f:88:04:0e:d5:75:
                    fe:3a:c0:65:fe:98:a9:97:db:cf:5e:d9:7d:a0:2b:
                    e4:0e:6e:b9:e0:42:8d:96:70:4f:cc:4d:98:b5:93:
                    f8:e6:40:8a:38:74:54:70:4e:2a:91:54:97:b1:74:
                    e3:0d:b0:42:b9:aa:01:1a:16:65:11:0c:3f:09:95:
                    8d:86:fd:71:c9:7c:a5:7d:b4:8b:72:86:7b:a3:e1:
                    15:47:66:9c:eb:0b:9e:05:8b:2d:87:21:06:5d:5f:
                    6e:e6:84:d8:97:d2:b1:1e:e5:97:32:9c:43:1a:d9:
                    ba:20:aa:e0:97:9d:22:fd:a5:ba:1f:a6:0d:57:f4:
                    3b:f7:b8:e5:75:e1:65:b6:24:ef:d1:4a:64:6a:94:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:F5:9C:79:12:57:9C:1E:0C:53:4B:EE:63:CE:FE:0B:94:D5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/df97dc9b-77d2-3e49-8e23-e69065d9d216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:de:5a:e4:dc:e4:6d:72:c7:68:e8:18:e5:20:d3:b9:ea:
         e5:49:1c:a4:da:ab:b9:47:a2:c5:50:62:54:c8:ff:d1:cb:6b:
         3b:56:5a:93:7b:2e:1b:e2:8a:50:5c:ad:d0:69:5e:0f:ba:64:
         f9:44:3d:14:aa:9a:71:51:67:26:85:10:29:fa:79:06:ec:0f:
         17:c7:64:7c:51:86:b0:9a:50:12:7f:64:7a:89:09:0b:d1:b1:
         32:6b:71:db:3d:d0:c4:91:ab:ba:5c:81:b5:ec:8b:07:6d:59:
         ed:80:17:8e:45:eb:15:3a:1d:42:1e:85:d9:7e:a1:c1:9b:a1:
         a7:04:15:b5:06:a1:02:02:e4:04:c9:6a:b3:5c:f2:94:50:e9:
         fd:79:f5:84:f5:f4:c1:a8:ff:ee:2f:8f:33:f6:bf:91:32:59:
         28:49:71:b8:af:5a:38:9d:cf:43:6b:02:68:11:df:f2:d8:5a:
         97:84:30:f5:b3:dc:35:64:55:24:b7:8e:a2:46:54:3d:be:47:
         03:b9:69:a5:68:a7:87:94:5e:5c:c8:f0:31:0d:a7:6c:fe:8e:
         a3:92:9f:63:34:50:a1:9f:30:f2:a6:17:20:cd:08:09:66:a3:
         b1:9a:b6:de:cd:da:53:33:51:fd:4d:3b:3c:77:27:9e:42:cf:
         6f:6e:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:37:21 2025 by rpki-client