Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa
File:                     4453567d-94a3-375d-9415-c8c1fdd02afd.roa (raw, json)
Hash identifier:          OT5IjL3vaD0ebTcUbiMa/CCoa9pyuAf4HfKDhj8gm40=
Subject key identifier:   C1:96:A4:B3:B2:53:2E:95:86:FF:47:77:1A:38:C7:EF:8D:4F:9A:E2
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584A655B3C3EB0A4C6DC3EBAFF00
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     401416
IP address blocks:        74.123.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:3c:3e:b0:a4:c6:dc:3e:ba:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=11818537-ed84-4789-9eb4-97241fdf8e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:68:c8:70:3a:5b:26:04:03:e3:b6:41:c8:
                    61:20:31:5b:a7:9b:36:13:5c:6d:32:50:33:b3:d4:
                    36:b8:f4:87:7e:7f:c0:99:83:05:bf:54:8d:48:a3:
                    49:ff:09:9f:8d:10:90:26:b1:5c:9b:e8:3f:72:7d:
                    27:fd:b6:17:30:b5:cf:89:ad:a4:42:84:b8:04:ee:
                    e1:3d:65:4f:63:31:16:94:ad:89:b8:d4:21:65:3d:
                    d0:d1:68:0c:9b:4e:42:9e:30:df:ae:da:fa:14:80:
                    5d:ab:f3:b4:3e:50:d6:d9:f7:67:88:d9:17:aa:e3:
                    c9:ef:c8:c6:d1:21:a5:d7:b9:e0:42:65:51:49:c2:
                    a2:27:20:6d:94:99:3d:3e:0b:38:69:5a:6e:ec:94:
                    cc:08:19:68:3d:ea:3d:d5:24:3f:a8:4d:9a:a6:69:
                    eb:98:cf:08:67:c1:28:c7:9b:58:a8:30:7d:58:92:
                    68:3c:fb:12:cd:68:62:77:e3:d7:cd:c0:6a:bb:84:
                    ad:8d:2e:47:29:40:aa:4a:6a:08:d1:c1:e4:4e:0c:
                    c6:55:c2:32:75:3c:6e:02:6b:70:21:fd:16:59:7a:
                    13:cc:2a:be:c2:dc:3a:70:ec:50:91:2c:01:65:62:
                    e6:0f:03:48:52:c4:92:07:48:23:7c:93:2b:ab:f5:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:A4:B3:B2:53:2E:95:86:FF:47:77:1A:38:C7:EF:8D:4F:9A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:53:f3:74:0e:8b:b1:10:0d:22:53:e5:ef:30:97:71:e6:7e:
         5e:18:c2:6a:b4:56:cd:6c:c8:6b:86:99:df:27:4b:c0:d2:d7:
         4e:a8:2d:1b:32:3c:68:84:37:8a:98:34:6f:45:b3:4c:8c:b3:
         b0:90:ed:3d:68:df:08:1a:a8:aa:0b:f9:1c:ef:1c:77:6d:e5:
         c9:73:c9:cf:26:42:ec:3c:a2:7d:a2:59:e1:6c:12:4a:f5:69:
         09:89:16:b0:47:0e:ee:08:dd:21:cc:e9:83:f3:c9:1e:9b:53:
         e7:40:40:e6:f2:12:07:2c:b9:74:54:6e:5f:15:10:9d:54:02:
         37:6c:2f:59:00:c1:12:63:27:9d:df:62:cb:e0:e2:11:70:6b:
         d5:bc:19:5c:6b:e6:1d:e4:7d:29:5a:48:f4:18:87:e4:bd:1b:
         6e:b4:9e:cc:98:3c:98:b3:dc:de:57:d3:30:87:ba:10:a9:62:
         97:3b:15:6d:3f:ab:2e:00:ea:9b:12:8e:6e:0d:13:21:2a:27:
         07:9e:59:c0:f5:96:5a:bf:6a:25:90:26:66:ae:44:70:20:76:
         a5:ae:dc:5b:95:31:be:49:9a:89:34:7c:d7:9f:0b:96:3b:b1:
         9e:6c:0e:52:16:5e:b0:85:aa:72:f8:68:f1:9e:aa:c7:2b:79:
         6f:af:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:44 2025 by rpki-client