Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
File:                     bd706a23-0d52-3069-8efc-b247735d9c39.roa (raw, json)
Hash identifier:          r0a7V3MoUSzn1nQL9N26F9lwza2uXj5FwXg9GBg8Wcc=
Subject key identifier:   18:57:1B:86:A9:7A:3C:8A:EE:14:BC:BD:AC:37:7B:C4:AA:B9:9B:F9
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE2BCA0501375CF1F8560
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        174.137.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e2:bc:a0:50:13:75:cf:1f:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=3f9deab1-8acd-4086-b96e-4994ceadd992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:b9:ed:dc:66:af:a9:1b:eb:5e:1c:ae:3c:
                    87:76:75:e7:a2:b5:73:69:be:fc:6f:4c:63:fa:f8:
                    73:16:a1:4a:20:fc:21:c9:bb:1f:f1:50:26:c0:aa:
                    58:33:c7:47:13:e0:81:91:e6:b0:f6:6a:e1:4f:f9:
                    f2:cc:05:d1:30:d4:32:1d:43:01:ce:8f:2b:bc:27:
                    64:5e:5c:be:25:88:a2:af:b4:6b:38:e2:cd:24:13:
                    5a:af:4a:ca:e4:2f:2c:f1:39:59:3c:07:1b:08:fd:
                    18:d0:62:bc:5b:69:e9:56:03:33:70:7e:d2:2b:1f:
                    2a:1d:59:d5:15:53:a3:b9:99:7b:12:d5:86:5b:ff:
                    84:a1:e2:cf:56:01:b8:f5:03:b6:d8:53:93:fb:3f:
                    a1:b4:81:2f:5b:67:a1:7a:71:25:2c:e0:c2:dc:c3:
                    6f:ed:d2:a8:2d:b9:04:b5:ab:0a:79:80:b0:a1:8e:
                    9c:87:c1:49:87:5b:45:50:86:53:0b:3b:07:3a:fc:
                    85:c6:6a:56:49:28:dd:48:c9:78:b9:2d:36:c3:9f:
                    ca:db:03:f1:84:62:95:42:b2:50:a2:33:80:1c:36:
                    b6:67:5b:cd:a8:43:f3:58:9e:12:ed:46:d1:74:26:
                    e4:2b:71:6c:ed:6f:a7:2e:0c:cf:2a:a5:57:2c:c5:
                    61:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:1B:86:A9:7A:3C:8A:EE:14:BC:BD:AC:37:7B:C4:AA:B9:9B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:89:ab:55:53:6c:c9:b7:2d:b5:1b:34:70:f6:58:de:02:
         2b:b1:30:a0:c1:72:3f:3d:68:11:09:69:a0:62:0c:28:6d:c5:
         f1:9d:26:44:0e:14:85:4e:78:d0:01:43:5e:de:7f:ea:36:90:
         af:af:8b:6d:53:b4:b7:f0:61:a8:b6:7a:69:21:6c:58:12:c4:
         d7:7a:be:61:2b:a7:99:4e:14:dd:db:b5:d9:9b:47:f5:04:b5:
         83:74:72:f2:71:23:96:ae:76:9b:02:03:c7:f5:be:a3:4c:e8:
         32:ec:0c:6b:f5:64:68:f0:c3:64:0e:c1:7a:43:a4:1f:bd:6b:
         df:38:55:e3:82:f3:74:f7:2b:66:23:fe:7d:55:b6:8c:e6:42:
         35:42:9b:c5:6b:cc:22:a3:65:1f:b3:db:de:11:2b:85:88:e7:
         7a:52:46:2c:8d:92:15:97:3a:c6:80:c5:d3:72:6b:e8:06:a9:
         a3:6c:5e:5e:26:4c:25:c9:47:66:c6:60:25:8f:3b:de:b1:b2:
         bc:86:1f:d5:5a:5a:92:b7:d2:ab:b8:c7:da:76:c5:c9:89:7f:
         13:13:c0:e2:90:3d:bc:64:e7:dc:fe:00:8c:2c:51:81:90:14:
         e2:27:5a:15:06:b5:18:6b:8f:b7:3b:de:ca:55:d9:70:8a:a6:
         f5:78:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:08 2025 by rpki-client