Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/8e15705b-e2b3-32f7-91e8-7e5bae5a7281.roa
File:                     8e15705b-e2b3-32f7-91e8-7e5bae5a7281.roa (raw, json)
Hash identifier:          HxXz6XN+bZMxff+0LaPwaU6l6IZtNDQEqAPv1Ywx1Hg=
Subject key identifier:   97:BE:76:95:62:4F:B0:53:FD:57:C8:C6:DA:0E:34:D8:CA:2D:DB:52
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584A955D1AD902CFAA80101E7CE0
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/8e15705b-e2b3-32f7-91e8-7e5bae5a7281.roa
Signing time:             Sun 20 Jul 2025 17:43:48 +0000
ROA not before:           Sun 20 Jul 2025 17:43:48 +0000
ROA not after:            Sat 18 Oct 2025 17:43:48 +0000
asID:                     23470
IP address blocks:        74.118.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:95:5d:1a:d9:02:cf:aa:80:10:1e:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jul 20 17:43:48 2025 GMT
            Not After : Oct 18 17:43:48 2025 GMT
        Subject: CN=4fc0d0e9-8192-4222-afd2-f7879d360188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:68:ba:ee:37:a5:32:73:0a:ca:61:8e:20:
                    ed:a3:a0:48:21:cd:a9:40:1e:09:87:15:d6:1a:db:
                    64:09:3f:21:3a:d5:c1:bd:da:8c:bb:66:8e:88:48:
                    20:d0:3e:f8:88:b2:f6:27:d0:f0:ed:f3:7a:f8:67:
                    d9:b8:a4:09:f7:ee:f4:28:3f:e0:7f:c7:c3:ea:20:
                    92:84:2d:f8:bf:41:c4:7b:27:fa:7b:88:18:ac:d7:
                    cf:c6:19:e0:67:38:7d:f6:53:40:8c:53:5d:3a:98:
                    96:99:cf:79:62:ef:ae:9c:15:b6:d4:84:9f:5a:30:
                    fa:31:33:dd:0c:bc:b0:3d:a2:c3:1a:40:31:49:ba:
                    a3:f7:ed:ee:d4:76:a3:35:66:f8:0f:ee:70:7b:a5:
                    db:c7:49:b4:d5:a6:ef:45:64:13:e9:39:89:5a:6f:
                    15:03:bc:a1:02:5e:e8:3d:89:ff:54:9f:fa:86:95:
                    e9:e7:7a:51:d9:16:04:00:8c:1a:33:89:60:81:2b:
                    11:f7:60:55:eb:f0:cf:b6:2a:5f:1e:40:2a:dd:17:
                    76:41:1d:cf:be:f1:74:00:29:f5:54:99:bd:aa:47:
                    31:27:ce:dd:96:2d:98:bc:03:d2:f7:9d:dd:98:f5:
                    c4:d9:46:cf:d9:bc:4c:46:f9:01:e7:8d:38:5b:b9:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:76:95:62:4F:B0:53:FD:57:C8:C6:DA:0E:34:D8:CA:2D:DB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/8e15705b-e2b3-32f7-91e8-7e5bae5a7281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:ad:33:c6:3d:1a:68:19:58:ed:05:c7:7b:4e:f3:77:25:
         cb:75:c7:71:d1:dd:77:28:52:c3:5b:e1:1b:6f:4e:88:98:6c:
         49:b5:fa:f1:ff:92:fb:d3:a5:b1:39:d1:eb:52:60:17:9c:1b:
         00:63:a0:55:3c:a4:86:e9:a2:9b:1c:bd:14:de:b2:16:27:e1:
         a1:76:e1:2e:8d:3a:64:a6:2c:68:6c:8a:33:6a:70:a2:8c:0b:
         a6:28:84:c0:42:98:e3:f9:e3:b9:87:dc:4a:a6:7e:7c:4c:05:
         5f:19:19:64:4e:e4:6c:56:1c:3e:e0:46:36:e8:bd:86:45:d9:
         08:ca:50:46:21:d7:77:1c:57:b3:f5:17:6c:86:f5:9f:a3:7c:
         d8:2b:59:b4:f9:39:fc:ea:67:f5:ca:b3:3c:7b:84:8d:40:bb:
         74:cd:2f:a7:d2:be:f0:8e:21:97:05:82:87:7a:07:d8:17:41:
         9a:bb:02:66:45:5b:39:8f:9e:3d:24:42:a5:b6:e7:2a:20:d0:
         5b:4e:f3:76:bb:3f:b9:23:72:43:fc:9e:a4:4c:00:7a:e4:c3:
         91:c3:7a:de:65:ee:4a:2d:bc:12:2b:34:95:fa:03:63:90:ce:
         b8:7c:73:3d:c7:96:59:7e:21:49:3e:6c:84:93:89:69:e9:6f:
         e3:4f:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:01 2025 by rpki-client