Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
File:                     43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa (raw, json)
Hash identifier:          32Jj6GSEs+H0Z7WSF853j+fMzKZhmIeMEcojx8YZ8kU=
Subject key identifier:   13:FA:59:A7:4D:3A:91:33:E3:46:86:60:43:56:73:EF:52:42:99:4A
Certificate issuer:       /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial:       010D0C9F4328584AB650DB4C5C1CD34019E37B00
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        74.123.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:db:4c:5c:1c:d3:40:19:e3:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=96bc47c9-6690-4351-a0ae-cebe26e3dfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:47:b2:91:1b:b9:54:fe:9a:f6:5a:d5:4e:
                    03:b4:87:58:08:15:e1:8f:f4:50:4b:12:7c:4b:8b:
                    27:1d:1b:d7:01:a7:46:73:1a:f7:f4:1b:c4:54:2d:
                    22:7e:0f:6a:c4:cc:cb:2b:3a:d0:0d:20:31:fd:42:
                    26:b4:3c:11:db:aa:8d:14:ba:0d:13:ab:91:20:90:
                    f8:04:a4:fb:26:01:93:a2:45:53:ed:a8:e9:03:e8:
                    00:9b:e0:4b:2d:5c:d0:54:4e:83:76:35:9c:c7:5b:
                    8a:a2:07:30:0c:30:9b:bd:0f:2e:82:57:a6:95:8b:
                    a2:12:f1:ae:d4:d7:cf:cc:eb:d6:e4:53:98:69:81:
                    a8:b2:f0:a8:83:05:a9:d3:40:72:4b:94:89:6d:95:
                    a9:07:a8:e2:3c:f1:fd:73:d5:47:fc:38:96:c2:56:
                    bf:e9:73:c2:b0:31:69:45:fc:84:58:4f:17:f6:a3:
                    45:54:8d:6c:09:dc:e7:e2:7d:18:23:e2:d4:fe:a4:
                    2c:34:2b:5e:10:24:52:c8:45:4e:4b:d6:a7:20:fc:
                    99:21:45:a5:30:b9:4f:d2:b0:dd:59:73:bf:ed:39:
                    0a:2a:0f:a0:55:50:32:fe:14:31:70:9f:43:1a:38:
                    f1:18:e5:af:ea:b5:59:39:58:bd:d8:47:e9:70:84:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:59:A7:4D:3A:91:33:E3:46:86:60:43:56:73:EF:52:42:99:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:94:81:e6:cc:c6:45:6e:1a:9e:9f:c5:28:07:49:12:3d:ba:
         94:0b:9f:a6:bf:b3:17:36:64:d5:e8:ff:08:fc:d0:9b:51:2e:
         76:e6:ab:10:e9:67:94:a7:a0:29:4c:04:2f:e6:60:ee:43:05:
         25:4b:79:38:c0:d7:d0:31:c6:05:67:56:ee:63:08:24:6b:11:
         38:de:05:9c:6c:55:bd:a8:73:59:14:fa:78:3c:19:49:bf:b9:
         6a:75:e5:77:6d:ea:88:01:c4:19:91:48:b7:b8:51:b1:88:7d:
         69:40:0e:46:58:67:84:54:1e:11:3d:44:78:91:16:0e:16:78:
         9f:cd:92:5c:79:77:0a:16:eb:78:88:03:57:fc:80:c4:d8:0b:
         07:00:39:6e:43:0b:83:4f:a7:f2:b0:c8:0e:f3:ff:4e:47:52:
         8a:a0:80:14:e1:ab:4e:af:fc:23:9b:31:a4:73:a4:1f:4b:ab:
         d5:1d:a8:61:bc:87:6a:c5:b6:00:95:06:e8:e1:18:1f:a9:99:
         a6:06:86:36:33:a2:b8:0b:0a:9f:34:56:c3:54:0c:91:0c:a4:
         be:ca:05:8a:65:8e:98:bf:57:49:41:f8:cc:01:f4:5a:c4:55:
         c1:ce:f0:d1:11:1b:7f:15:6f:e1:b5:de:bc:8c:c0:0b:98:7b:
         b6:63:b8:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNtMXBzTQBnjewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRkZmIyYzItNmIwZS00ZjJjLTk1NmQtNDk3ZGYwODgx
MDE1MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
OTZiYzQ3YzktNjY5MC00MzUxLWEwYWUtY2ViZTI2ZTNkZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1NHspEbuVT+mvZa1U4DtIdYCBXhj/RQSxJ8
S4snHRvXAadGcxr39BvEVC0ifg9qxMzLKzrQDSAx/UImtDwR26qNFLoNE6uRIJD4
BKT7JgGTokVT7ajpA+gAm+BLLVzQVE6DdjWcx1uKogcwDDCbvQ8uglemlYuiEvGu
1NfPzOvW5FOYaYGosvCogwWp00ByS5SJbZWpB6jiPPH9c9VH/DiWwla/6XPCsDFp
RfyEWE8X9qNFVI1sCdzn4n0YI+LU/qQsNCteECRSyEVOS9anIPyZIUWlMLlP0rDd
WXO/7TkKKg+gVVAy/hQxcJ9DGjjxGOWv6rVZOVi92EfpcIQzpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBP6WadNOpEz40aGYENWc+9SQplKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NGRm
YjJjMi02YjBlLTRmMmMtOTU2ZC00OTdkZjA4ODEwMTUvNDNlN2I1M2YtZDVhOS0z
ZDI5LWFiNzMtYWQwZDZhMzc3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDRkZmIyYzItNmIwZS00ZjJjLTk1
NmQtNDk3ZGYwODgxMDE1LzQ0ZGZiMmMyLTZiMGUtNGYyYy05NTZkLTQ5N2RmMDg4
MTAxNS5jcmwwHwYDVR0jBBgwFoAUrKjCp3aNxrzYtX8M8Pq6iUOo2DUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NGRmYjJjMi02YjBlLTRmMmMtOTU2ZC00OTdk
ZjA4ODEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnuRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeUgebMxkVuGp6fxSgHSRI9upQLn6a/sxc2ZNXo/wj80JtRLnbmqxDp
Z5SnoClMBC/mYO5DBSVLeTjA19AxxgVnVu5jCCRrETjeBZxsVb2oc1kU+ng8GUm/
uWp15Xdt6ogBxBmRSLe4UbGIfWlADkZYZ4RUHhE9RHiRFg4WeJ/Nklx5dwoW63iI
A1f8gMTYCwcAOW5DC4NPp/KwyA7z/05HUoqggBThq06v/CObMaRzpB9Lq9UdqGG8
h2rFtgCVBujhGB+pmaYGhjYzorgLCp80VsNUDJEMpL7KBYpljpi/V0lB+MwB9FrE
VcHO8NERG38Vb+G13ryMwAuYe7ZjuJs=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:18 2025 by rpki-client