Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/074e60fb-5de2-381d-b54b-62d37248e211.roa
File:                     074e60fb-5de2-381d-b54b-62d37248e211.roa (raw, json)
Hash identifier:          lhgo5XYAj7nD00GjYU8lNewACkpQVu0FHifRergooJM=
Subject key identifier:   04:CB:1D:1C:F4:27:EE:8D:D4:69:C9:73:A2:53:B7:D3:77:75:74:D7
Certificate issuer:       /CN=05791d14-11f0-4527-a43c-e6b2425f6d16
Certificate serial:       010D0C9F4328584A1B5FFD269ED03D6266A44250
Authority key identifier: 53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/074e60fb-5de2-381d-b54b-62d37248e211.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     32738
IP address blocks:        174.138.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fd:26:9e:d0:3d:62:66:a4:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05791d14-11f0-4527-a43c-e6b2425f6d16
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=ad3cc92a-eeb2-4ab5-a3f5-4b0142ec63a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:fa:c2:af:81:55:74:3b:63:2a:dc:5e:d3:
                    98:5e:98:0e:94:e0:75:34:5d:ef:2a:b4:70:ba:e1:
                    02:0d:7b:42:96:de:59:df:1b:13:93:dc:25:84:4b:
                    6e:48:fc:9b:67:57:62:1b:dc:e6:b0:2e:b7:88:40:
                    53:2d:a7:9f:2f:6e:88:4d:ec:9a:4e:11:d1:50:2f:
                    f3:b1:2e:2a:21:b3:41:72:bd:f4:a6:d2:3f:c3:ea:
                    f7:35:f2:97:c1:93:b4:35:6e:7f:8c:22:63:48:29:
                    be:47:35:4c:e4:65:cb:84:69:71:19:e7:3f:94:cc:
                    b5:48:fd:79:a8:c3:f1:71:05:c7:7f:35:b4:4b:31:
                    54:a9:e7:3e:62:d9:0c:da:5e:e6:5d:c8:f0:43:cf:
                    6e:5e:3c:c6:ef:a8:f0:5d:d8:f6:d1:fb:08:89:91:
                    37:e2:80:dc:f5:56:65:42:8f:c7:70:fd:ce:2b:ee:
                    10:ef:26:ca:2a:30:2f:bb:42:11:49:3c:23:0c:20:
                    e5:c6:7d:60:56:af:55:cb:4b:9c:cd:6b:da:60:f0:
                    8f:a7:01:98:57:6b:e0:b2:62:98:c5:9a:34:0c:37:
                    b6:5a:c2:4e:58:ee:89:78:4f:08:3b:23:7f:11:7e:
                    a3:0b:0c:10:38:0f:5a:e3:1a:0d:62:9d:bd:51:4b:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CB:1D:1C:F4:27:EE:8D:D4:69:C9:73:A2:53:B7:D3:77:75:74:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/074e60fb-5de2-381d-b54b-62d37248e211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl

            X509v3 Authority Key Identifier:
                keyid:53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:8a:5e:da:03:ff:1f:37:cd:b9:ae:64:9c:9b:13:67:1d:
         6b:9a:b8:93:ff:87:1c:95:ba:3c:b5:4d:b4:24:47:75:f1:e3:
         fc:84:14:a6:e5:df:27:8e:e0:1e:af:da:02:3c:fe:10:ef:1c:
         0c:43:8a:7d:96:f4:dd:cf:96:64:30:c5:f0:17:00:06:f8:12:
         99:19:ac:2c:57:2f:bd:db:c4:ef:fe:1a:94:85:29:1c:55:c6:
         b1:ba:f4:06:44:b4:e8:8b:5b:5a:15:b6:84:e1:0b:e8:0b:21:
         26:21:b9:8c:25:1b:db:c9:44:42:28:26:c4:eb:51:8a:8e:13:
         2b:46:00:e2:28:38:d1:af:b4:af:3e:17:d3:9a:4b:87:e3:06:
         c7:66:37:fe:47:01:d2:5e:b5:3d:da:dd:e4:67:81:6b:19:8e:
         61:2d:0a:49:47:de:53:95:7c:13:78:94:e5:fd:99:a6:8d:26:
         21:98:c4:4c:2f:37:03:10:b3:5b:c0:11:a7:54:09:f6:02:51:
         16:a4:12:c5:27:f3:d8:71:1a:23:a5:4e:d7:e2:28:6e:cb:95:
         b0:17:44:62:d3:09:5c:5d:29:a4:8f:46:27:a7:0e:5e:36:39:
         56:c0:75:82:d0:88:85:1a:f3:58:ed:65:80:7d:a3:f0:5e:35:
         d2:45:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:11:33 2025 by rpki-client