Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
File:                     7e14fe3f-046b-3698-b378-0410e8c01b3a.roa (raw, json)
Hash identifier:          gZnyLcvSj4e62QQaYXY53OKFA4pHClQqL7fWwcxT/Os=
Subject key identifier:   B7:7B:5B:9B:9E:8D:6E:43:DE:1B:E7:44:A8:44:50:EA:BE:0C:5F:83
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285849A089CE90108F0C2A37E03DC0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     20057
IP address blocks:        74.80.151.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:ce:90:10:8f:0c:2a:37:e0:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=78f347e0-21a2-470b-9c2b-15202cb8f1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:33:79:d9:9e:55:a2:64:9b:14:e4:c9:e8:
                    2b:92:38:cb:72:82:33:dd:5f:76:2f:14:c5:e8:b7:
                    ac:a9:70:88:bd:43:76:0b:1d:e1:d8:cd:76:e8:8c:
                    4b:c3:c3:61:1d:45:e8:ae:49:69:45:c6:3c:d9:57:
                    39:76:a0:af:19:d7:10:7e:04:55:6d:1a:79:3b:87:
                    01:f7:0c:71:fa:ad:1e:d2:6a:51:99:cc:cc:22:7a:
                    31:fe:43:ac:89:23:65:38:e5:b3:75:73:e3:df:f6:
                    5e:fa:62:1e:70:f7:3e:23:96:46:e8:10:b3:59:fc:
                    59:21:e0:c4:f4:59:a1:a5:c5:97:65:67:30:1d:38:
                    04:e2:0a:13:9f:2a:2c:58:98:a2:e0:96:1d:09:e8:
                    29:7f:2e:b0:0b:73:53:fb:a6:d7:ed:ad:72:25:70:
                    a9:0c:9a:65:64:76:32:54:ea:32:9e:bf:95:11:46:
                    a2:4e:86:38:b7:1c:4d:fa:18:11:3a:73:12:46:e3:
                    2e:2f:e9:56:e6:90:70:2c:94:fb:96:83:c3:13:3b:
                    05:46:43:c1:46:77:1e:29:d0:f5:b7:6b:b9:d4:34:
                    51:91:81:41:86:3a:e4:4e:5c:bf:df:6a:49:fc:85:
                    dc:e9:9e:bf:31:1e:23:d9:72:d5:2c:2d:08:ac:df:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7B:5B:9B:9E:8D:6E:43:DE:1B:E7:44:A8:44:50:EA:BE:0C:5F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.151.0/24
                  74.80.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8b:9a:77:1d:c5:d2:6d:e0:c1:f4:21:69:e6:13:92:8d:a3:
         8a:91:82:12:6e:42:9b:31:c6:58:ac:82:cd:94:04:73:25:a6:
         63:2c:bb:3e:08:c6:2c:c8:16:1d:d5:9f:84:57:8b:c0:37:0f:
         f4:4d:5e:cf:0f:e7:7d:59:e7:c3:a6:3c:61:9f:6d:a4:08:29:
         7c:04:f7:05:11:79:09:f5:9f:23:70:29:63:1e:f1:6f:86:5e:
         24:0e:88:98:70:be:87:90:19:9e:fe:e2:fa:2d:3e:7a:96:d7:
         4e:56:22:a7:d8:28:9b:f3:6c:fa:57:ec:f1:af:16:13:ce:31:
         86:ee:6e:3b:9a:2e:5b:42:7d:df:d0:ca:91:f4:c6:38:4f:08:
         ca:cf:9a:3f:7d:cb:ad:c7:e8:02:9d:84:28:7a:3b:e7:fd:ab:
         cd:12:0b:81:00:cf:d8:47:e5:3d:c0:dd:13:0f:58:0c:95:9e:
         c6:34:7e:61:9f:9c:a8:d4:90:38:ab:75:3c:ea:6e:2d:f9:90:
         01:af:2c:fb:05:4a:ad:d5:c3:8e:bd:a8:31:cc:2f:3a:88:a7:
         c3:70:e6:69:98:50:6b:66:d0:0f:f7:e9:1a:42:54:d0:f2:87:
         2c:27:bd:3b:d0:a9:87:f3:19:e7:68:f7:de:85:4a:26:87:7f:
         ab:03:08:f8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmgic6QEI8MKjfgPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
NzhmMzQ3ZTAtMjFhMi00NzBiLTljMmItMTUyMDJjYjhmMWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1gzedmeVaJkmxTkyegrkjjLcoIz3V92LxTF
6LesqXCIvUN2Cx3h2M126IxLw8NhHUXorklpRcY82Vc5dqCvGdcQfgRVbRp5O4cB
9wxx+q0e0mpRmczMInox/kOsiSNlOOWzdXPj3/Ze+mIecPc+I5ZG6BCzWfxZIeDE
9FmhpcWXZWcwHTgE4goTnyosWJii4JYdCegpfy6wC3NT+6bX7a1yJXCpDJplZHYy
VOoynr+VEUaiToY4txxN+hgROnMSRuMuL+lW5pBwLJT7loPDEzsFRkPBRnceKdD1
t2u51DRRkYFBhjrkTly/32pJ/IXc6Z6/MR4j2XLVLC0IrN8QUQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLd7W5uejW5D3hvnRKhEUOq+DF+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvN2UxNGZlM2YtMDQ2Yi0z
Njk4LWIzNzgtMDQxMGU4YzAxYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASlCXAwQA
SlC7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFmLmncdxdJt4MH0IWnmE5KNo4qRghJuQpsxxlisgs2UBHMl
pmMsuz4IxizIFh3Vn4RXi8A3D/RNXs8P531Z58OmPGGfbaQIKXwE9wUReQn1nyNw
KWMe8W+GXiQOiJhwvoeQGZ7+4votPnqW105WIqfYKJvzbPpX7PGvFhPOMYbubjua
LltCfd/QypH0xjhPCMrPmj99y63H6AKdhCh6O+f9q80SC4EAz9hH5T3A3RMPWAyV
nsY0fmGfnKjUkDirdTzqbi35kAGvLPsFSq3Vw469qDHMLzqIp8Nw5mmYUGtm0A/3
6RpCVNDyhywnvTvQqYfzGedo996FSiaHf6sDCPg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:22 2025 by rpki-client