Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa
File:                     a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa (raw, json)
Hash identifier:          CvFiZ+lR8e+z9KKvud3TFOLl2zyFvj8l+D3ICKu4TRE=
Subject key identifier:   A2:04:BB:BA:AC:88:B2:5A:98:A5:29:4C:A4:0B:B4:81:60:E2:B8:28
Certificate issuer:       /CN=f1221975-8406-433d-a21a-c10166c9278d
Certificate serial:       010D0C9F4328584A18954A8FB8AC706E035E9FC0
Authority key identifier: CD:04:35:20:77:30:62:9F:DA:0E:AB:91:B9:89:89:C3:5F:D4:2B:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     29744
IP address blocks:        74.214.208.0/20 maxlen: 24
                          162.213.16.0/22 maxlen: 24
                          199.84.255.0/24 maxlen: 24
                          199.253.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:4a:8f:b8:ac:70:6e:03:5e:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1221975-8406-433d-a21a-c10166c9278d
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=d9f0cbdf-3c4b-42e1-91c8-9418bc8ae8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:66:8a:a9:32:f8:b3:41:30:15:42:5f:5b:
                    62:af:7c:c5:39:68:4a:e8:12:71:2c:36:12:a6:ac:
                    07:8e:31:8c:3e:43:ce:6d:d3:61:68:b0:f1:1c:28:
                    41:d7:f0:bd:86:de:4a:53:8c:6e:d1:97:cd:2e:7c:
                    b8:c1:c9:b7:96:d2:a9:ad:52:45:27:3a:59:39:cc:
                    6c:5d:3e:2f:4b:cf:da:9d:16:8a:4b:52:8d:05:ce:
                    8e:d1:fe:19:d2:0f:31:2d:09:ee:9b:24:84:b1:fe:
                    23:7d:f6:38:fe:d1:b2:6a:9e:24:cf:58:8f:5e:98:
                    d0:32:86:21:47:17:60:53:09:db:59:1d:88:45:9f:
                    7a:1f:fc:2a:67:bd:67:3a:c9:26:ec:85:72:5c:0d:
                    43:7a:81:8c:e8:40:85:22:85:10:fe:a2:57:7b:f1:
                    1e:72:d4:bf:3b:c0:3f:6e:90:3c:62:d5:84:c2:10:
                    3e:33:3a:4c:9c:9e:3b:b9:23:d2:ab:ca:ad:75:d6:
                    2e:ce:ec:6f:3f:54:cd:89:85:85:a6:dd:72:85:16:
                    b6:4a:7b:5c:db:f5:3e:08:e8:6c:9f:7e:25:e3:86:
                    f9:9f:58:cf:db:f3:f3:fe:28:39:10:5f:4b:af:8b:
                    ef:d9:4b:96:ca:2f:f6:bd:50:82:ea:7f:b0:38:d2:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:BB:BA:AC:88:B2:5A:98:A5:29:4C:A4:0B:B4:81:60:E2:B8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.crl

            X509v3 Authority Key Identifier:
                keyid:CD:04:35:20:77:30:62:9F:DA:0E:AB:91:B9:89:89:C3:5F:D4:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.208.0/20
                  162.213.16.0/22
                  199.84.255.0/24
                  199.253.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:fd:12:61:1b:ee:6b:e2:45:6d:0b:3f:cb:1f:ca:9a:8b:
         63:60:0f:ca:5c:09:52:f3:e0:8a:e3:42:22:4a:cd:f5:2a:b3:
         04:0a:09:3f:e5:03:e3:d9:8d:1e:8d:7a:4a:4c:3e:43:48:d2:
         67:39:0b:08:0d:d1:7b:17:de:e1:33:97:18:31:5c:94:26:8e:
         7d:c6:19:c7:90:9f:fa:fb:dd:34:90:c1:5a:40:17:c7:be:1e:
         ef:38:4e:d0:e5:33:37:64:51:b9:99:dc:83:3a:71:39:90:c8:
         fd:94:59:07:2f:07:a2:6f:2d:f1:bd:fd:d3:11:fa:ce:2a:a7:
         fb:28:9d:2e:ee:9a:96:17:41:89:fb:1a:f7:09:ba:96:c7:1f:
         00:57:07:ce:d9:c9:55:e4:7a:d5:22:f7:e0:46:ae:75:24:2b:
         fb:80:df:b0:90:99:72:aa:52:97:4e:63:f6:ac:3b:34:7a:a4:
         7a:51:08:23:80:a8:a4:d5:64:bb:58:5f:70:62:80:bb:61:a9:
         8f:c9:4b:39:0f:73:5f:06:3b:a3:12:87:79:3b:d4:c2:9a:49:
         92:b3:25:35:cb:be:81:31:20:1e:57:e1:fa:98:05:80:14:37:
         93:82:95:6e:b9:9b:80:49:dc:c5:40:0a:63:a3:a8:96:4d:77:
         14:61:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:20:26 2025 by rpki-client