Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa
File:                     a1b5ebce-fc37-3f3f-af93-219b7b805362.roa (raw, json)
Hash identifier:          zyMysq57KG82uwohUTS+cURZWkijFlusOXVi5jClAgg=
Subject key identifier:   E5:E2:EB:DC:2F:8A:3C:8E:A7:AF:83:AF:F1:7B:A3:30:C8:25:1A:98
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285849D95DF6F24828B71337777500
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa
Signing time:             Wed 14 May 2025 09:33:34 +0000
ROA not before:           Wed 14 May 2025 09:33:34 +0000
ROA not after:            Tue 12 Aug 2025 09:33:34 +0000
asID:                     54994
IP address blocks:        174.35.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:5d:f6:f2:48:28:b7:13:37:77:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: May 14 09:33:34 2025 GMT
            Not After : Aug 12 09:33:34 2025 GMT
        Subject: CN=fdfa821c-0592-4e63-9431-213cbe52520b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:fc:4c:ba:93:66:d0:21:a2:a2:be:ee:d5:
                    d3:fc:5c:01:23:d7:2f:e1:a2:0e:9b:2b:e7:38:d8:
                    fa:07:94:e6:a8:90:dc:0a:ae:93:74:85:49:c3:c1:
                    61:b7:6e:c0:7f:40:57:ef:5f:b5:51:64:b1:ed:3e:
                    12:35:49:31:25:bb:4a:45:35:e5:23:fb:bf:7d:1f:
                    50:5e:73:e7:96:10:af:5c:db:95:53:49:cd:ca:be:
                    24:dd:90:ef:1b:8b:2d:e6:9d:85:4d:06:ac:72:e5:
                    81:81:3e:84:4d:b1:27:b2:86:8c:d1:42:ac:e2:6b:
                    e4:78:17:0c:09:2e:cf:3d:c5:11:23:c1:49:54:2b:
                    01:3e:19:e2:0f:0e:5d:0e:e9:1d:70:96:83:e0:81:
                    5c:d9:8b:9d:cd:b6:b1:6f:d0:99:53:08:f5:11:23:
                    ac:de:e3:98:18:cb:7f:5d:23:4d:92:8e:9c:ca:f3:
                    44:f7:8a:d7:cb:bd:99:e8:db:1c:ac:16:40:5c:15:
                    63:8b:ff:1e:22:3d:d2:ec:ba:5b:8f:ff:47:6a:3f:
                    7e:9a:ed:99:1f:d2:7d:a2:c1:fb:14:55:42:20:ed:
                    ea:6f:ae:dd:f6:8f:3f:6c:d0:5e:4d:f9:0c:c4:31:
                    c6:4a:6c:bb:e3:85:fa:46:33:32:f6:9d:c5:9b:36:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:EB:DC:2F:8A:3C:8E:A7:AF:83:AF:F1:7B:A3:30:C8:25:1A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:60:57:ec:9f:60:62:a2:d2:e3:2f:4c:9f:59:24:e9:43:9d:
         f4:e5:34:81:7d:69:25:d4:f8:61:ed:cd:02:5c:c2:2e:8b:55:
         2c:33:1a:e0:e4:ce:f1:46:7c:75:87:71:a0:02:bf:83:32:a7:
         3f:0a:05:6c:2c:fa:5d:5c:b0:fa:38:2a:88:83:f1:a5:4e:eb:
         fd:83:fb:f2:f1:65:4e:e0:ef:74:be:19:81:1c:25:f8:2a:3a:
         21:3d:46:d3:ee:db:68:63:da:4c:95:6f:b1:21:a5:94:6c:a6:
         0f:32:93:85:1f:3c:43:d0:04:9a:86:80:bd:d9:df:dd:71:d7:
         0b:a7:28:71:51:42:9d:4c:9b:61:15:44:eb:8c:ec:b9:56:cd:
         18:82:fa:c1:82:cf:37:9a:f6:0b:cd:7d:5f:98:1d:bb:c0:68:
         bd:9b:62:7e:14:a6:82:49:7c:89:d4:56:2d:1b:1c:72:34:c7:
         e9:9c:75:94:04:8e:97:0c:6d:05:59:35:0d:e8:f9:37:bd:bc:
         3e:53:19:2d:6c:91:c7:c3:62:e8:09:25:3d:1f:76:b7:ed:7f:
         67:68:96:2d:fd:97:69:56:60:7c:9b:50:62:24:f9:70:07:86:
         81:1f:06:83:72:10:47:6e:27:98:14:54:ab:1a:be:19:b0:2e:
         7d:69:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:14:28 2025 by rpki-client