Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/74d16441-df67-378e-8d0a-6433ed6ebe16.roa
File:                     74d16441-df67-378e-8d0a-6433ed6ebe16.roa (raw, json)
Hash identifier:          jrCBaqvQ9Eiemwo+4X3sX/DTZidgC5OSu0KACiEAOhI=
Subject key identifier:   CF:01:08:7B:55:05:1E:4C:92:E7:FA:EA:C2:A3:1D:DE:53:79:85:D7
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858496B7ED44DF06D2E3FBAAFB840
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/74d16441-df67-378e-8d0a-6433ed6ebe16.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     4764
IP address blocks:        207.174.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d4:4d:f0:6d:2e:3f:ba:af:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=1852877c-3181-46a4-af77-819246d4c84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:8b:d7:0a:e7:24:ed:b7:d5:66:f0:1b:a7:
                    b3:c2:42:0a:4b:f9:81:fd:7d:76:e0:f2:9e:04:b0:
                    36:2e:4d:9b:99:c4:bc:c9:2f:ee:74:0a:c9:c7:65:
                    58:fa:51:cf:64:b5:8e:88:c7:07:02:f8:ea:83:e7:
                    fa:0a:c1:f0:8a:d9:5d:c5:6d:86:f8:a6:ce:f4:fb:
                    38:30:d3:3f:02:51:2c:ba:54:be:77:dd:c9:09:f6:
                    b7:09:c6:32:fe:48:48:71:67:9a:d2:68:9c:70:0d:
                    3d:2d:61:7d:b7:14:55:d1:26:78:ff:4a:b7:36:3c:
                    7b:0d:a5:c6:4d:ad:f8:f3:28:23:52:eb:da:a5:62:
                    61:a5:51:40:10:33:d1:e1:a1:42:a5:51:c4:ea:6a:
                    76:45:10:4c:6e:83:c3:72:e2:61:74:aa:52:72:6b:
                    37:de:b4:34:44:fc:83:3f:a1:9d:44:a3:92:cf:3f:
                    c1:34:3e:19:d6:a2:b4:c0:7c:bd:ab:e6:0e:06:3e:
                    5c:94:5f:57:0d:5b:d4:dd:5c:d6:f2:66:11:85:f8:
                    0a:4b:f1:63:49:0a:b5:8e:44:3e:54:bb:a0:b1:d2:
                    fd:82:28:ea:47:c0:a5:76:73:0b:fb:11:66:b4:8c:
                    6d:6f:16:74:0b:c9:c3:41:a9:37:69:fa:ae:70:93:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:08:7B:55:05:1E:4C:92:E7:FA:EA:C2:A3:1D:DE:53:79:85:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/74d16441-df67-378e-8d0a-6433ed6ebe16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b8:d7:23:4c:7e:7f:e7:01:6c:7a:f1:8c:12:cd:96:2d:aa:
         d0:62:fe:fc:0d:7b:e3:19:0c:45:66:4d:ab:3a:be:0b:dd:a8:
         c2:ba:7c:78:81:3f:dd:2b:06:4c:86:cd:53:9e:20:f9:a4:1c:
         8d:06:98:78:52:3c:0f:cb:43:5a:81:54:75:25:54:e9:17:31:
         7c:7c:d6:c0:3c:db:3b:ca:29:01:5f:3c:5f:49:f1:09:2d:2a:
         f7:8c:6d:58:47:13:34:6f:0b:b3:9e:57:e2:08:24:c4:ae:6c:
         ce:90:47:1c:4f:7c:3f:f8:69:a7:c3:24:18:43:2c:b9:87:c8:
         1e:01:ed:81:a8:71:1e:bf:cd:89:43:75:5b:72:68:80:11:dd:
         cf:22:70:53:4a:bb:d8:b4:24:72:c4:a8:77:eb:79:4a:04:fe:
         67:9c:8f:b7:3b:f0:ec:8b:a2:d9:4d:49:bc:1b:e3:46:a0:94:
         7a:c9:38:23:08:19:47:bb:8c:c9:f0:f5:28:ac:46:aa:f8:a9:
         3c:45:fb:eb:a2:5e:3d:2d:bb:d8:af:21:e2:d6:84:58:72:3b:
         05:5a:4e:a0:09:f4:af:06:21:c0:a5:a5:ba:18:cf:13:56:61:
         0f:94:57:42:ed:a3:15:a1:26:0d:8b:5a:54:87:80:f0:14:0b:
         19:bf:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:42 2025 by rpki-client