Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/06256ff5-960b-3544-ab62-6af5b8e1dbbe.roa
File:                     06256ff5-960b-3544-ab62-6af5b8e1dbbe.roa (raw, json)
Hash identifier:          GDKsmcDJsO5PGaC0/ZSdNTv06St0WSaR6Dy9Yy44Uh0=
Subject key identifier:   31:36:90:E2:BB:96:61:0F:C7:15:94:9A:14:FD:B4:BA:1D:5B:EC:B9
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A96369277A07723E34EE48380
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/06256ff5-960b-3544-ab62-6af5b8e1dbbe.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     21928
IP address blocks:        74.60.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:92:77:a0:77:23:e3:4e:e4:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=0d5a8397-84d3-4089-8b28-2b4068606cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:e5:5a:b2:1c:7c:19:7d:fa:b3:57:ea:1d:
                    12:af:41:fb:e9:1a:25:c2:6d:33:93:c0:4e:a1:d4:
                    55:c0:36:5c:24:d0:f5:92:db:c4:e4:3e:f0:a2:00:
                    20:30:d0:46:c7:80:5e:a5:b9:d0:bc:34:59:cc:12:
                    f0:c7:a3:39:ea:6d:65:08:0f:e3:4e:24:44:3b:34:
                    36:ec:45:61:58:f0:5d:3a:2f:89:81:af:32:00:75:
                    db:31:f3:c5:38:84:86:c8:bf:62:17:6d:41:3f:32:
                    c8:a8:3a:1d:2a:a9:20:e3:2e:5e:b4:a0:50:ff:c7:
                    96:cc:77:58:7b:da:ab:6c:a8:70:e2:f3:fc:c6:cf:
                    48:fd:9c:e7:fc:62:95:75:6b:b7:f4:2f:0c:85:15:
                    a8:8b:c9:fa:0d:9a:f1:f4:5b:df:28:63:33:4d:1e:
                    2a:6d:1d:f8:52:76:78:9d:44:f6:42:2d:a4:f3:34:
                    fc:58:d9:c0:24:4f:67:c5:17:fa:5c:c1:f8:a8:b6:
                    f3:00:2e:32:56:e0:b9:41:54:dd:9b:7f:de:d3:51:
                    5e:4b:9b:bb:68:78:1f:01:0a:1e:0c:ca:4d:b9:a7:
                    fa:55:6f:7b:23:6c:e0:b7:e0:ea:44:2a:30:81:0a:
                    3e:bb:f4:d1:5a:3c:1d:b9:3c:0e:51:e7:7d:37:8c:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:90:E2:BB:96:61:0F:C7:15:94:9A:14:FD:B4:BA:1D:5B:EC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/06256ff5-960b-3544-ab62-6af5b8e1dbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.60.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:3f:f7:53:9a:15:c5:e1:10:ed:7a:e8:24:a4:3a:9e:39:
         db:c2:b7:37:bd:21:63:a4:b4:74:6a:56:32:4c:1c:70:88:c3:
         67:ec:12:03:ee:1a:97:60:f7:f5:28:ca:2b:d9:36:ff:0c:d1:
         d1:8a:03:2d:7d:29:5f:d1:85:29:30:97:56:39:43:01:37:2b:
         08:8d:71:9d:39:79:91:cd:04:99:68:72:e3:45:91:e3:8e:fa:
         38:96:1a:61:14:6d:ba:95:e7:15:5d:97:a2:23:72:84:d0:d2:
         3f:91:e6:44:e2:23:3c:a3:42:33:c2:e9:90:bd:32:d0:69:9e:
         de:2b:f1:fe:17:e8:5c:67:96:65:c5:27:f0:13:8c:05:08:17:
         ea:65:ba:e1:8a:c9:6e:28:76:86:14:db:92:37:08:ea:b7:8b:
         65:a8:ea:37:94:59:b7:21:50:b0:eb:eb:b8:96:3d:0b:5a:8e:
         7b:22:ad:9b:9e:95:47:28:3a:50:3e:82:bc:e6:b0:90:63:9e:
         5f:d2:3f:8a:b7:33:d5:ce:49:28:c3:fa:23:4b:4c:58:f6:4b:
         fb:88:c2:2f:2d:85:34:90:fe:e8:2e:bc:1b:91:6f:6e:c1:ce:
         bc:bc:1e:a8:9a:10:d7:e5:1b:5b:ed:a4:b2:81:a6:53:d7:de:
         cc:34:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:58 2025 by rpki-client