Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/72573332-8ecf-3df1-bff2-26796f3ec00b.roa
File:                     72573332-8ecf-3df1-bff2-26796f3ec00b.roa (raw, json)
Hash identifier:          P7XmTpn/244WHxyx0iI427i4NBmk7OetE98NRSJf3YA=
Subject key identifier:   F6:70:ED:16:1C:D5:3E:AE:97:CC:BB:C2:30:E1:48:FB:43:82:95:F3
Certificate issuer:       /CN=7e3be480-7f34-440b-9382-84a56fb763cc
Certificate serial:       010D0C9F43285849E2252476EB50C71373BF9FC0
Authority key identifier: FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/72573332-8ecf-3df1-bff2-26796f3ec00b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     398699
IP address blocks:        74.117.120.0/24 maxlen: 24
                          74.117.121.0/24 maxlen: 24
                          104.156.40.0/24 maxlen: 24
                          104.156.41.0/24 maxlen: 24
                          170.76.240.0/24 maxlen: 24
                          216.9.168.0/24 maxlen: 24
                          216.9.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:24:76:eb:50:c7:13:73:bf:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3be480-7f34-440b-9382-84a56fb763cc
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=92f538e3-de95-481f-9a97-95c16598719d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:4a:c8:59:e8:c7:42:3e:46:8c:37:52:1d:
                    0c:74:d3:14:e8:0e:04:44:10:b7:67:01:bd:f0:e7:
                    fe:a6:bb:49:db:4f:28:e3:11:59:2e:b2:8a:f1:d8:
                    c1:f6:b0:ca:3c:4d:6f:1a:cf:9b:8b:39:21:db:15:
                    a5:0f:9a:44:5b:8c:bb:0c:0b:d1:7e:e8:df:17:f5:
                    cd:e5:81:c7:be:60:7b:82:0b:4c:5c:5b:28:c3:f9:
                    40:b4:08:d8:5b:bf:94:80:ab:77:4c:53:eb:7b:6b:
                    5f:6d:2e:74:0c:1f:d6:e1:33:25:c5:1b:27:dc:de:
                    fb:be:e0:02:dd:d9:e4:09:32:1b:b2:3f:f4:de:16:
                    e0:48:c6:1e:5c:1d:fb:94:21:44:0e:cd:5c:69:d1:
                    4d:73:c9:4b:85:8f:04:cf:17:a5:0e:1f:31:5e:a0:
                    f6:98:d6:79:54:64:00:63:5f:06:41:f8:dc:43:7d:
                    44:17:f9:1b:7c:b6:e6:d2:ef:23:4a:9d:1a:ef:5d:
                    08:44:0a:e2:2d:37:b1:a3:c2:84:9e:cc:69:7c:de:
                    d7:e1:10:ee:51:cd:4f:21:28:43:2d:55:7a:5c:3b:
                    76:86:7d:ed:8e:40:ba:cc:29:02:5a:5a:3e:d4:70:
                    a6:89:30:ab:7d:30:5f:a8:b0:09:b1:4d:a5:a6:5e:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:ED:16:1C:D5:3E:AE:97:CC:BB:C2:30:E1:48:FB:43:82:95:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/72573332-8ecf-3df1-bff2-26796f3ec00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.120.0/23
                  104.156.40.0/23
                  170.76.240.0/24
                  216.9.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cc:2e:21:61:7a:1a:3d:70:c7:65:82:11:42:14:69:1b:20:
         cf:79:36:a5:d6:68:08:41:ee:6c:43:d4:1b:c3:a0:28:67:82:
         81:91:d8:d0:c0:64:fe:71:8a:03:08:76:1d:e5:93:8d:66:08:
         fa:c7:03:37:28:65:00:82:95:25:1f:3f:e6:aa:99:8d:60:a9:
         2f:ec:6c:59:e7:38:f2:f9:3e:05:db:37:c7:87:37:4d:b2:ac:
         d5:86:1a:1b:f7:06:6b:74:91:08:74:72:84:8a:a3:73:12:6f:
         20:8c:b0:c1:d8:f4:80:8d:95:8a:3a:04:50:44:96:d0:55:86:
         5a:9b:ba:e3:0c:0d:7f:14:35:45:19:23:35:b6:f0:ca:c4:01:
         87:77:87:83:fe:7d:c7:6e:2b:1c:f3:cd:31:f5:53:0d:a4:2d:
         51:94:ee:39:bd:90:f0:ad:66:5d:c9:f4:37:30:ca:cc:82:74:
         73:28:44:7d:2f:76:37:e4:c9:99:f9:e8:ba:f5:d7:09:c0:26:
         d5:17:ed:ff:84:fc:63:ba:5e:5d:8e:a4:6e:29:76:eb:d5:91:
         f4:9f:5c:7b:e7:8e:a3:e3:e7:64:9c:22:70:df:e0:89:8b:74:
         f6:21:5e:65:30:6e:2b:43:ae:56:a6:99:22:e2:12:66:bb:b9:
         59:7d:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:57:24 2025 by rpki-client