Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa
File:                     a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa (raw, json)
Hash identifier:          MOXaaVzQc496Z0PsZwjepIhD/j+7ROcjub/+bQaGL6U=
Subject key identifier:   0F:B5:D8:08:73:E4:BC:0A:39:AE:35:7C:40:8E:48:68:65:23:65:8E
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584A89A61422B87653BD5A1E4700
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     16433
IP address blocks:        74.123.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:14:22:b8:76:53:bd:5a:1e:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=c2131b08-5a22-4e2f-a3b1-419b53db3206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:d6:c8:33:b9:e3:5e:3c:a7:11:1c:3b:7b:
                    e2:7d:6d:57:ba:47:d5:2b:82:e9:20:2b:3e:80:e1:
                    84:a6:f5:94:43:b9:e8:91:a2:c9:d9:c4:54:7e:c8:
                    f9:18:0e:6f:07:8a:04:62:c9:94:35:eb:1a:70:8a:
                    4d:6c:cc:5e:76:28:a5:fd:e2:3c:59:32:78:3f:f5:
                    09:3f:f5:c7:77:e3:3f:0b:e5:d4:c7:07:c0:42:79:
                    6f:5b:c3:ed:f2:b7:9a:91:3f:31:b4:1e:bb:72:5b:
                    c8:bd:e3:4d:63:99:c2:ba:b8:ba:73:5b:c9:a4:1b:
                    aa:b3:db:17:11:d4:2f:42:b9:80:ed:3b:23:a5:ab:
                    11:88:a6:cf:ee:65:61:ba:e9:8d:03:66:8d:c0:58:
                    b8:d8:bf:96:74:75:99:fe:2f:cf:28:e1:28:81:0c:
                    d6:16:1f:d4:5b:5b:0e:b0:10:7c:dc:84:06:23:a6:
                    b4:ed:de:70:a3:68:c5:b0:f2:01:d8:1c:37:0d:4c:
                    c3:b2:95:ac:06:a0:06:cc:b0:69:55:c2:a0:1b:f0:
                    08:35:64:30:1b:d1:93:b5:1b:5c:48:a1:9d:bb:33:
                    6e:dd:6a:6e:46:41:8a:7e:ec:da:84:eb:c7:fb:18:
                    89:ea:c2:ba:10:fa:3b:37:26:93:ec:0d:34:c5:b8:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:D8:08:73:E4:BC:0A:39:AE:35:7C:40:8E:48:68:65:23:65:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:80:01:22:aa:2d:78:b5:68:24:57:0d:22:fe:88:af:bb:b6:
         89:0d:6f:d6:af:ad:64:45:c4:4c:53:ee:db:60:14:8c:27:96:
         72:4e:e3:13:ce:8b:fa:82:33:72:ce:a5:cd:b1:97:9b:66:87:
         55:ec:e9:ec:66:56:1b:91:fb:b0:75:ac:4e:b6:0d:5b:b8:67:
         ac:d4:f5:7e:bb:67:15:62:36:92:d1:b7:72:3f:f5:4e:b6:ec:
         30:c1:0d:79:e0:87:b4:7b:c9:81:14:86:1e:5a:73:c8:92:6c:
         65:b3:fd:43:ee:08:92:48:27:22:ef:b6:2f:eb:43:4d:81:7a:
         ef:d7:6b:d4:37:54:10:a2:29:3a:28:66:4e:7d:06:30:72:3b:
         18:3f:bb:6d:03:ee:54:bb:f6:5b:52:6c:ff:4a:9f:72:7e:04:
         e0:66:b4:cf:3a:53:32:bf:c3:e8:a2:77:fb:61:50:4c:94:ac:
         e0:f1:ee:13:fb:b7:97:f5:c5:d1:8e:87:47:55:60:85:6e:75:
         9b:9b:0e:57:4c:2c:c6:20:6b:55:9f:c2:26:84:16:79:3e:d1:
         88:23:37:7d:5b:12:4c:8d:57:6e:ef:3a:3e:2d:3b:6d:01:7b:
         bb:79:38:5a:64:b5:a2:f7:da:15:cb:5b:4e:c7:22:62:0f:36:
         d5:eb:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:56 2025 by rpki-client