Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
File:                     d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa (raw, json)
Hash identifier:          4Gv8qnDHpKKOK635ZU6R3N0n3bKYAg6BIQoh1fCQcsc=
Subject key identifier:   16:AE:E1:00:61:8D:9B:49:1E:9D:50:F1:A7:26:C9:30:4C:60:24:09
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584A268AB1B6F36E65512A90BA80
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        74.120.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b1:b6:f3:6e:65:51:2a:90:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=9001e090-a79d-463a-a79d-355b76e430ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:ff:ee:c2:91:a4:3c:47:ef:65:ce:2c:01:
                    86:3a:59:2d:63:85:e3:b6:76:51:47:3a:02:03:25:
                    a5:0b:fc:ba:3f:76:56:98:86:06:f9:02:8e:8f:ac:
                    84:86:9c:ff:ba:60:7b:57:41:6f:7e:45:55:ad:f5:
                    11:61:8a:36:82:4f:54:a3:37:2d:02:31:51:41:66:
                    8e:ba:10:70:73:1c:fb:09:82:08:b4:70:21:30:fc:
                    ce:ef:0c:9a:08:54:c3:a6:cc:d0:b3:0c:95:51:8b:
                    43:bd:29:70:7c:7c:58:20:69:d9:ae:7a:d6:d6:16:
                    20:98:08:8e:28:89:34:24:82:20:8f:2c:67:06:cd:
                    26:f9:b3:12:d9:36:8b:59:15:16:03:78:fb:79:e7:
                    d6:93:3b:70:c5:a8:78:b6:59:a8:05:47:ee:ba:d7:
                    45:10:e1:76:d2:a4:d8:73:60:b0:bf:b1:d8:b8:20:
                    af:4e:20:57:ac:86:78:b3:84:12:ee:e5:f2:39:a2:
                    5f:e9:ea:93:d9:59:38:35:33:4e:a8:d3:f0:1b:6a:
                    55:db:b9:2b:e0:f3:48:50:e2:27:73:4a:c9:ec:76:
                    dd:af:d7:fa:a8:e1:1e:2c:f8:2f:00:55:df:ad:32:
                    a6:73:2a:20:4f:45:be:4b:26:14:49:56:e9:64:aa:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AE:E1:00:61:8D:9B:49:1E:9D:50:F1:A7:26:C9:30:4C:60:24:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:d0:62:c9:e7:6b:b7:14:a4:c9:d8:1c:c1:40:cb:17:05:
         66:23:5e:06:9d:3a:13:91:5b:dd:ae:9f:7d:fa:15:63:a2:10:
         89:12:4c:f5:d2:30:8f:49:0c:79:4a:f7:89:3f:c7:a5:86:7f:
         33:ba:d2:77:1a:90:79:af:92:2c:ea:d5:00:dd:38:b5:96:9b:
         8a:84:40:58:ce:51:4e:d8:f4:ea:e9:53:6f:1d:c0:78:38:a4:
         ec:56:c8:94:2b:c2:86:b4:33:1a:54:5e:25:cb:a3:f4:db:fd:
         5e:56:b4:62:dd:2e:33:1c:48:8c:44:14:f2:fb:35:da:bd:ee:
         78:8d:a1:5a:26:fa:c6:d2:11:48:f6:37:b9:00:36:a5:15:b8:
         e7:26:fe:31:73:4d:01:8b:b1:b9:73:4e:48:a6:b8:eb:24:23:
         48:64:85:27:e8:4e:b1:ba:55:ae:70:4b:29:9b:37:46:4c:44:
         ca:f5:eb:ff:b0:04:3b:dd:3e:29:82:55:da:bc:da:a3:38:b6:
         4a:e3:3d:fb:86:4e:1d:08:93:11:34:c5:70:b6:42:9b:a5:8e:
         96:08:8c:f6:44:8c:77:53:12:6b:4f:33:42:62:37:6b:23:cd:
         00:4f:77:54:39:bb:50:59:09:fb:69:29:aa:87:d8:1e:02:09:
         89:c3:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:03:58 2025 by rpki-client