Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/7510c882-ece7-3dc9-a7a3-6f67a914589d.roa
File:                     7510c882-ece7-3dc9-a7a3-6f67a914589d.roa (raw, json)
Hash identifier:          Sz1FgRKmjeJCZsV0x7WXpmULEC9ZWOMKfLdY5pdzEoI=
Subject key identifier:   4E:0F:6E:1D:EE:35:B6:D0:59:56:72:1C:6E:A4:B8:38:18:FB:15:04
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F43285849F9DFDE333E2FBC86FD891700
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/7510c882-ece7-3dc9-a7a3-6f67a914589d.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        174.137.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:de:33:3e:2f:bc:86:fd:89:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5ca1434d-f480-4c8a-b67b-6aea635c14bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:e1:fd:1e:ff:8a:87:a5:44:eb:1e:2f:07:
                    fc:eb:72:1e:7a:f0:63:96:74:e6:8a:af:33:5f:96:
                    1f:3c:86:cc:a3:bd:3a:2a:7d:7d:9e:f0:92:1a:3c:
                    c2:97:5c:b2:27:e9:0b:3d:9f:06:7b:aa:d7:f1:8e:
                    5f:94:fc:f8:08:16:70:91:5e:32:94:0e:8e:3c:e0:
                    45:cf:9f:af:68:f2:66:64:a2:44:a4:35:e1:74:de:
                    47:4d:85:3b:89:94:39:75:99:c9:a1:c7:46:4f:00:
                    f0:12:e5:59:e3:8a:47:a5:e5:a6:1e:75:81:4c:76:
                    de:dc:fa:1a:52:55:b6:b6:60:d7:7e:fb:98:ce:6d:
                    11:af:42:f9:14:fc:db:6e:db:b6:78:8c:23:d2:3f:
                    41:e1:08:2e:4b:10:b6:c0:28:45:ff:de:9e:1c:88:
                    16:fa:e5:f2:94:cc:1a:21:2b:5d:60:49:7e:6f:d2:
                    14:e9:0f:a7:8a:5d:04:bc:04:62:c3:4d:d0:ee:f9:
                    b3:8a:c7:23:ad:c7:49:98:46:6b:43:29:19:ed:d6:
                    66:52:50:a1:8e:10:63:30:bf:7c:79:0b:08:06:a8:
                    79:62:26:64:be:42:3a:02:8e:07:7c:45:cc:1b:77:
                    38:15:e4:2d:54:5e:20:f4:99:5d:5c:e4:08:d9:a5:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:6E:1D:EE:35:B6:D0:59:56:72:1C:6E:A4:B8:38:18:FB:15:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/7510c882-ece7-3dc9-a7a3-6f67a914589d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d0:00:c0:b9:fe:51:9d:f5:df:d2:9e:93:36:a2:96:ce:14:
         6a:d2:c5:05:ab:9e:fd:5a:92:d5:23:e3:3f:24:b3:46:8e:4d:
         49:50:26:03:20:27:4b:13:10:fa:9e:22:6c:cd:43:91:64:a2:
         9d:ef:eb:b8:18:b6:35:b7:65:3b:47:41:c2:82:01:fe:dd:f1:
         48:45:8a:61:d7:d8:77:bc:84:b0:03:05:c6:94:d5:3c:31:44:
         4a:64:f4:dc:9b:41:26:35:23:9a:78:ad:f8:e7:b2:28:d8:84:
         80:cd:01:bb:12:ca:a0:5b:f6:59:ae:c5:bb:c8:04:bf:51:ab:
         19:49:1f:40:35:c1:c9:fe:dd:f0:cc:65:bf:c7:17:3c:b5:7f:
         45:53:44:21:8e:fd:81:f8:c4:4d:a4:40:a2:bb:be:80:4f:c0:
         11:90:7a:d0:87:6e:12:1a:57:8e:53:3b:e4:5e:be:03:d8:6c:
         fa:cc:d8:81:4a:ae:7a:c7:b4:71:37:cb:1b:9a:71:52:40:e5:
         dd:af:ce:14:88:1e:18:e9:4c:11:29:41:84:bb:28:7d:f6:64:
         2f:26:1d:65:65:f4:b6:53:0a:13:75:b2:5c:2c:e6:89:98:bf:
         6e:68:73:28:4a:64:82:10:53:b0:97:9a:6d:3d:3e:c5:6f:2b:
         5f:9c:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:06:40 2025 by rpki-client