Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/74988257-1402-3cc3-b6c9-9ef2448889f1.roa
File:                     74988257-1402-3cc3-b6c9-9ef2448889f1.roa (raw, json)
Hash identifier:          61kpK9xi7gac+BeWJDYk1aags1cspJAZXoaUV+xMbzw=
Subject key identifier:   67:AF:DE:31:47:2B:66:9F:94:CA:06:E9:F4:FE:92:6B:2E:F1:B4:2A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858496B7ED30003CFDF15662773C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/74988257-1402-3cc3-b6c9-9ef2448889f1.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        169.224.132.0/23 maxlen: 24
                          169.224.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d3:00:03:cf:df:15:66:27:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=56d38221-0ff9-422c-b44d-270359e2bc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:67:ee:ff:82:09:f8:44:7d:c9:f1:b2:be:
                    a9:0f:8f:95:03:4b:02:93:b7:0d:f2:f3:18:3a:4e:
                    89:c6:cc:37:1d:e9:f8:8c:34:b5:c5:d9:8a:a2:a8:
                    04:1a:0b:66:17:e9:7b:6b:3f:86:34:69:e7:9b:88:
                    9d:0b:79:46:dc:ae:4a:8e:56:ff:96:17:02:1f:6d:
                    ad:5a:2e:ab:d8:74:8a:7a:a9:a4:9e:3d:c3:30:ef:
                    ba:e1:a9:1e:ea:08:d3:c7:7e:c7:31:90:dd:4e:d0:
                    bd:a2:ae:bf:d5:61:a7:f4:e7:7c:28:5b:72:9a:97:
                    6e:5d:52:d2:b8:c8:41:dc:8e:f0:4f:e2:93:5a:c7:
                    0d:66:d7:fc:5b:3b:10:c7:33:f9:f3:fd:06:9d:c8:
                    48:4a:cb:98:44:46:43:39:a2:94:7d:a8:a4:04:de:
                    c2:77:c1:97:1f:72:f1:c1:16:99:f1:c6:db:e4:5e:
                    68:ca:64:02:7b:4e:23:56:a2:0d:ac:71:57:a7:be:
                    3d:d4:bb:11:ef:1a:93:a0:8f:7b:0a:02:62:8f:92:
                    d7:95:63:9c:0c:05:a3:5d:68:b6:42:63:9d:49:78:
                    c7:0e:5a:20:0b:ea:ca:0c:fe:aa:1b:a0:65:b4:6b:
                    20:1d:44:d2:b3:87:05:a3:ef:9a:ff:a6:a3:df:38:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AF:DE:31:47:2B:66:9F:94:CA:06:E9:F4:FE:92:6B:2E:F1:B4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/74988257-1402-3cc3-b6c9-9ef2448889f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.132.0-169.224.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:2d:00:99:2d:8f:00:e5:c1:94:be:ca:ba:f9:b0:47:cd:
         68:00:62:51:12:48:31:4c:d6:ba:1d:4c:60:de:b5:40:01:bf:
         fd:7b:e5:ab:5d:b8:55:fe:d4:49:fc:a9:6c:99:01:a6:90:bc:
         fb:96:b4:5d:ad:09:f7:bf:58:66:4b:2d:44:ab:1b:36:b9:44:
         cd:82:1f:b5:08:78:92:f7:c3:90:b3:54:09:00:a4:55:1f:1c:
         50:d8:e0:0c:7e:ac:8d:78:2a:6b:7f:25:11:e5:fd:69:8e:4b:
         2f:e1:99:bc:8e:00:af:2e:fd:8b:7d:d0:63:0c:66:b3:be:d9:
         4c:08:b1:e7:5d:de:8b:16:94:eb:dc:33:bc:ba:92:92:8a:30:
         f5:29:56:ec:be:95:5e:ba:a6:40:cc:0e:8d:2f:43:79:36:4b:
         b2:31:aa:70:27:a3:32:e7:ee:a8:77:17:43:af:e5:82:06:f5:
         1a:72:94:de:e2:a5:35:0c:9a:db:bb:7c:85:53:e3:b9:cf:fe:
         d4:c4:0d:4f:97:90:0a:4f:af:d0:af:13:79:bd:e6:45:76:20:
         e7:8e:2d:0f:9b:7e:6e:c1:81:89:22:df:c9:67:7e:de:1d:2e:
         5b:73:e6:d0:a9:72:d0:6e:93:47:05:93:83:3b:4a:68:24:79:
         dc:da:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:59 2025 by rpki-client