Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/c81a15d1-802e-31dd-876c-fcbe3dff0828.roa
File:                     c81a15d1-802e-31dd-876c-fcbe3dff0828.roa (raw, json)
Hash identifier:          LXs6AQ7Z9PleMjlYc/gsHCJUbRD+goBJbmTdy0vx6MA=
Subject key identifier:   CE:6D:6F:8B:01:BD:81:00:F6:F6:48:9A:02:D2:8E:B3:2A:A1:58:28
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584961B98C259A425081C3992500
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/c81a15d1-802e-31dd-876c-fcbe3dff0828.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        74.112.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:8c:25:9a:42:50:81:c3:99:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=d8cb5917-074f-4e56-b357-edc03bc2f304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:1c:14:ff:41:04:05:79:29:0a:19:02:a6:
                    ae:b2:68:47:7c:be:fa:8c:56:d3:f1:90:4d:4b:1e:
                    c3:f0:6c:6a:03:e3:56:2e:61:a1:09:13:a8:d3:ff:
                    84:b7:ff:3b:37:19:33:d2:c7:9d:2b:56:df:e2:27:
                    40:79:8f:0c:7e:8c:89:66:88:1d:44:f0:50:79:4f:
                    cd:b5:1b:d8:3e:a0:4e:04:a2:89:6e:c1:c5:c1:8e:
                    78:02:1b:97:20:e8:17:ca:9a:6b:51:2f:dc:23:08:
                    d4:e7:66:f0:50:8e:e2:eb:71:b2:ad:c4:6f:6c:44:
                    28:2d:ff:f9:3a:ab:01:7f:2d:ce:9c:d2:6f:a1:75:
                    bb:0c:e4:f3:f2:5b:90:f5:c1:02:f6:7a:81:c6:e2:
                    f6:ce:39:b0:63:58:24:f2:cf:72:d7:2c:f5:6b:c2:
                    09:40:61:34:d4:4f:00:6e:67:00:42:34:76:38:88:
                    7a:b1:dc:5b:91:aa:22:69:7a:46:be:c4:28:7e:e9:
                    f7:00:70:49:d2:0d:8c:d7:93:6f:8d:de:ff:e6:a0:
                    ee:2b:f4:e9:c8:f3:21:f9:89:15:7a:a6:2d:24:bf:
                    d8:a8:ae:a8:6f:d1:6b:52:84:f0:d0:c0:4b:1c:75:
                    eb:d0:6c:ac:0c:fd:42:d4:23:f9:d6:25:0a:76:1a:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6D:6F:8B:01:BD:81:00:F6:F6:48:9A:02:D2:8E:B3:2A:A1:58:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/c81a15d1-802e-31dd-876c-fcbe3dff0828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:79:80:68:e1:ef:33:00:b1:b7:15:70:2e:40:5f:0f:38:ae:
         ec:73:e4:8d:2f:d6:27:5b:d7:31:20:72:12:80:c2:8b:bb:28:
         3b:44:5f:9e:00:7d:e5:2b:20:aa:32:4d:dd:e6:82:94:d3:aa:
         16:c6:81:17:6f:ec:20:53:17:51:7c:44:dd:92:7f:9c:a1:07:
         2b:f7:4b:09:79:7f:54:7d:57:3d:f1:b0:a9:5b:fb:16:01:21:
         f0:40:31:22:07:7d:5a:56:35:e0:c8:7a:6d:d9:23:d9:20:84:
         d7:fa:8c:34:11:19:a4:52:fe:28:16:34:d5:29:9b:6c:bb:4c:
         e3:b4:75:3c:78:5f:a8:ae:10:62:d0:a9:74:2c:0b:2f:97:d7:
         34:b4:af:af:10:0e:63:91:2d:bf:f2:39:90:8e:a4:71:4a:47:
         2f:b3:99:67:50:4e:fb:62:49:3d:4a:2c:24:e3:29:b7:58:8e:
         9d:a0:55:78:6f:3c:a0:4d:7a:99:68:56:3a:cd:52:e5:ef:93:
         22:f6:0e:4d:61:40:64:29:7c:3f:6a:4c:cf:75:ce:dc:c5:c6:
         e4:8e:88:e0:6f:25:4a:42:eb:eb:ed:cc:4e:64:3a:11:f0:bc:
         8a:57:1d:62:df:e1:96:3b:34:c7:60:f4:53:38:d2:8a:12:73:
         1e:d9:fe:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYwlmkJQgcOZJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ4NjVjNmEtNTRjOC00ZjU4LWFjODAtOWY5YmRkMzY4
ZWUzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZDhjYjU5MTctMDc0Zi00ZTU2LWIzNTctZWRjMDNiYzJmMzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2IcFP9BBAV5KQoZAqausmhHfL76jFbT8ZBN
Sx7D8GxqA+NWLmGhCROo0/+Et/87Nxkz0sedK1bf4idAeY8MfoyJZogdRPBQeU/N
tRvYPqBOBKKJbsHFwY54AhuXIOgXypprUS/cIwjU52bwUI7i63GyrcRvbEQoLf/5
OqsBfy3OnNJvoXW7DOTz8luQ9cEC9nqBxuL2zjmwY1gk8s9y1yz1a8IJQGE01E8A
bmcAQjR2OIh6sdxbkaoiaXpGvsQofun3AHBJ0g2M15Nvjd7/5qDuK/TpyPMh+YkV
eqYtJL/YqK6ob9FrUoTw0MBLHHXr0GysDP1C1CP51iUKdhoGWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5tb4sBvYEA9vZImgLSjrMqoVgoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2
NWM2YS01NGM4LTRmNTgtYWM4MC05ZjliZGQzNjhlZTMvYzgxYTE1ZDEtODAyZS0z
MWRkLTg3NmMtZmNiZTNkZmYwODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmQ4NjVjNmEtNTRjOC00ZjU4LWFj
ODAtOWY5YmRkMzY4ZWUzL2ZkODY1YzZhLTU0YzgtNGY1OC1hYzgwLTlmOWJkZDM2
OGVlMy5jcmwwHwYDVR0jBBgwFoAUnF7bhNrXtUYQZQi78yRa+HEfzo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2NWM2YS01NGM4LTRmNTgtYWM4MC05Zjli
ZGQzNjhlZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnC7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZ5gGjh7zMAsbcVcC5AXw84ruxz5I0v1idb1zEgchKAwou7KDtEX54A
feUrIKoyTd3mgpTTqhbGgRdv7CBTF1F8RN2Sf5yhByv3Swl5f1R9Vz3xsKlb+xYB
IfBAMSIHfVpWNeDIem3ZI9kghNf6jDQRGaRS/igWNNUpm2y7TOO0dTx4X6iuEGLQ
qXQsCy+X1zS0r68QDmORLb/yOZCOpHFKRy+zmWdQTvtiST1KLCTjKbdYjp2gVXhv
PKBNeploVjrNUuXvkyL2Dk1hQGQpfD9qTM91ztzFxuSOiOBvJUpC6+vtzE5kOhHw
vIpXHWLf4ZY7NMdg9FM40ooScx7Z/jg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:52 2025 by rpki-client