Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa
File:                     d708040c-ac45-37b8-b457-55cee02af123.roa (raw, json)
Hash identifier:          fvN4vkjqN3jqfh2mkDp+cSEhVsiItPrQrkT+a182Q1A=
Subject key identifier:   53:E7:DA:92:B5:70:14:B1:94:95:D3:CF:02:50:97:71:57:93:EB:B8
Certificate issuer:       /CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c
Certificate serial:       010D0C9F4328584AC01629618019C39FCF851540
Authority key identifier: 38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     31898
IP address blocks:        74.81.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:29:61:80:19:c3:9f:cf:85:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=adcaa1d6-17b0-4960-86c1-4201ef174e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:ee:42:17:5b:aa:e5:b9:05:f7:ad:64:a3:
                    c9:da:4d:c1:28:b6:58:5b:1e:ae:21:2f:6d:01:72:
                    34:61:93:79:21:5f:eb:f1:c2:0e:6a:ae:ea:56:88:
                    a9:39:52:4c:b2:c6:65:82:c3:5e:3a:57:e7:b0:71:
                    0d:37:d0:9a:3d:00:d8:ae:93:85:ad:35:30:73:32:
                    86:a8:83:e6:c3:49:1a:14:22:fb:43:f4:7f:3e:06:
                    79:eb:72:9b:c4:a7:9d:1c:0e:3d:a0:c1:53:5c:47:
                    29:e0:b4:d5:a7:c7:62:56:85:20:68:6f:81:68:41:
                    28:e7:f7:00:f6:60:31:ed:78:20:6e:28:2a:7e:6d:
                    a3:64:91:6a:aa:28:e7:ab:74:4a:33:8b:0f:b3:a0:
                    09:ce:6b:6e:85:71:3d:0b:ca:2d:f0:55:90:67:7c:
                    cb:12:8c:34:72:b4:82:00:b9:4a:9f:0a:8a:1f:89:
                    7b:dd:d2:a3:b2:52:f0:44:f1:b4:34:7f:2b:47:d8:
                    0b:70:1b:db:79:50:4a:58:5e:24:f8:99:c5:a7:31:
                    ff:ac:26:cf:49:b1:40:ab:41:84:c8:c3:21:ea:56:
                    8c:b3:85:fc:d5:8f:b8:ca:59:62:f1:0e:48:7f:3d:
                    42:ea:be:c6:c1:bf:58:d8:07:7a:0a:f4:bc:7d:32:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E7:DA:92:B5:70:14:B1:94:95:D3:CF:02:50:97:71:57:93:EB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl

            X509v3 Authority Key Identifier:
                keyid:38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:41:8f:f6:84:a4:a0:31:82:fa:2e:16:51:2c:e4:c3:84:4a:
         44:71:2d:ed:99:c2:20:64:c6:51:ec:38:c7:d6:90:5f:2d:25:
         58:be:ba:d1:d8:c1:29:18:97:7b:35:d2:fd:52:25:23:93:4a:
         0d:eb:b5:46:23:60:ba:b3:b8:56:b5:ac:67:20:1c:69:f1:ec:
         da:d1:e8:dd:40:c5:e1:d7:1a:bb:6f:11:75:4d:61:0a:60:58:
         59:63:ae:92:a3:73:b3:20:ad:03:5b:22:0e:7c:0a:a4:cf:39:
         94:b9:58:a6:54:38:31:12:3e:c7:b0:bf:8f:58:d5:1c:d9:18:
         77:45:5d:0d:32:fa:3b:c8:12:10:de:25:d5:ce:ba:fc:04:03:
         a2:5b:2a:8d:9d:e4:60:4e:74:32:8f:71:9f:43:b6:83:07:67:
         df:3a:ce:14:fb:a1:49:2f:8e:4b:a7:6b:6e:7d:7a:7f:b5:91:
         13:d8:6d:af:86:0f:8f:f0:5d:de:8f:46:3b:90:39:f6:50:50:
         32:b1:1d:6a:87:ae:72:35:74:91:9c:98:36:f0:c4:80:e0:4d:
         9f:9a:fd:7f:c0:21:c2:89:88:0c:97:18:90:3b:62:c3:47:63:
         e6:ea:7d:69:b4:85:db:c2:6d:d2:d6:2b:84:6b:9d:1e:de:f8:
         07:03:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:50:11 2025 by rpki-client