Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa
File:                     276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa (raw, json)
Hash identifier:          OvOdveJLIQhpy7UCBz3N5wcKCPpkEjQUD5Tq4GnK8uo=
Subject key identifier:   87:2D:2B:5E:15:1C:C8:71:B5:7E:79:0D:A4:E5:6A:30:EA:0E:35:D0
Certificate issuer:       /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial:       010D0C9F4328584A1B600C5699BDDFD37474F900
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     4213
IP address blocks:        74.222.145.0/24 maxlen: 24
                          74.222.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:0c:56:99:bd:df:d3:74:74:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=b53ce895-fca7-4d96-9290-1d7d61b69068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:37:67:3c:05:e9:95:bd:c9:0f:9f:c2:39:
                    82:ec:14:a3:69:b1:30:44:75:d5:d8:c5:21:f4:c4:
                    a8:31:ba:08:76:17:c6:e4:b0:0e:d0:2b:36:2b:9a:
                    e2:e9:b6:4a:ea:83:b2:17:06:f8:cf:59:d4:f1:98:
                    0d:63:a4:bf:4c:48:fe:80:5b:05:99:69:f5:60:69:
                    00:64:6d:64:15:cf:8a:34:72:13:a0:f8:e6:03:38:
                    f5:49:5e:ae:07:da:e1:79:73:76:61:f7:76:2d:e6:
                    0e:6b:d1:f2:36:01:c8:d9:7d:5d:26:db:eb:b5:48:
                    7b:18:4d:ef:6b:89:b3:0f:8c:55:b9:4a:45:ac:2a:
                    95:02:4e:7f:37:64:b2:1d:97:5f:6b:31:a5:8f:98:
                    66:87:7e:ca:ce:b2:d8:59:a9:52:76:23:4f:d0:05:
                    ad:62:5b:11:54:55:54:00:0f:76:ca:5f:35:b5:4e:
                    63:06:18:e6:7d:77:ef:9f:1b:1f:06:9c:a2:cf:23:
                    82:fd:68:e9:09:48:d4:99:cc:21:96:32:59:fe:9e:
                    cf:08:1a:af:b3:c8:27:34:f5:04:94:83:3d:a3:78:
                    95:2b:5e:6d:8b:23:53:ae:c0:7a:91:63:ef:72:36:
                    40:fd:74:2a:7b:71:33:32:72:07:79:de:16:02:2e:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2D:2B:5E:15:1C:C8:71:B5:7E:79:0D:A4:E5:6A:30:EA:0E:35:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl

            X509v3 Authority Key Identifier:
                keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.222.145.0-74.222.146.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:59:04:32:43:49:38:c7:2f:c4:b4:4c:16:46:10:82:fd:
         83:0c:94:2a:85:80:bc:06:3a:5c:ec:d9:24:58:47:72:87:43:
         d0:db:58:02:99:88:03:f3:83:b0:05:67:77:3c:ea:b7:f3:f2:
         6f:f2:78:00:23:1e:6f:26:d8:fc:ee:e2:12:ce:6d:24:ab:b8:
         b2:2f:6c:33:59:28:73:a7:32:17:46:b4:b8:b1:53:c8:51:58:
         68:79:a1:33:9b:0c:85:a9:73:cf:01:db:ba:1c:22:1f:a5:ae:
         0f:e7:7a:e3:c4:16:fd:11:6e:c3:82:a6:8c:e3:73:66:bc:2a:
         60:9f:c4:df:19:62:35:a1:ea:30:1e:db:1a:39:64:6c:c3:78:
         57:44:9e:02:8f:6c:4f:85:47:2b:4b:86:75:0e:54:c5:b2:93:
         2a:8d:2b:94:a7:13:75:7a:9f:6b:cf:eb:65:87:b1:14:a7:1a:
         30:68:37:d6:3c:f4:9b:85:73:a6:39:6b:da:63:f7:7f:1c:8d:
         e5:89:2c:2a:9e:35:b2:f0:a1:c1:5e:0a:85:96:f7:7c:bf:cb:
         f3:55:91:cb:26:02:77:cf:79:29:39:fe:87:bb:52:91:8a:a1:
         aa:f4:8b:51:fb:93:fe:79:f2:c9:2c:ee:3c:6e:d4:df:f9:cd:
         89:7f:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:16 2025 by rpki-client