Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa
File:                     1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa (raw, json)
Hash identifier:          B8hHEwlsNBtMIll8AgrbWYjccDUUl+KBxhC4YF1maAA=
Subject key identifier:   D7:04:50:DC:B5:F6:85:18:5B:B8:24:B8:74:E9:C1:85:5E:0B:A3:58
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA852AB0D5C1FFCE684E4180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        74.110.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:2a:b0:d5:c1:ff:ce:68:4e:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=f4097a88-e0c4-47cb-9147-27b8c449335e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:e7:ca:5c:da:fc:66:46:c0:9a:32:97:94:
                    57:70:55:db:0b:82:eb:87:e5:3f:42:56:80:03:60:
                    c1:55:e4:20:76:79:2f:5f:76:71:02:26:99:58:e5:
                    52:c8:08:e2:a5:eb:18:16:03:8b:98:33:b9:bb:fc:
                    39:59:7b:20:6d:5b:ef:1f:23:90:b8:9f:f5:c0:da:
                    f6:68:a0:b7:42:7b:02:02:43:d8:46:67:0f:c1:4e:
                    3c:ff:c0:22:87:02:a5:db:d1:e4:3c:7e:f5:ff:8d:
                    58:ee:76:db:84:43:80:73:97:8f:67:3a:a4:d1:fb:
                    7a:48:dd:d8:d4:00:ac:7b:fd:5c:39:0a:48:55:9f:
                    56:b4:69:49:09:b8:d2:ec:99:bc:48:95:6b:00:28:
                    45:ab:75:b0:fe:8d:9f:8b:9d:0f:e6:a8:30:d6:1c:
                    35:a9:7b:c1:61:7f:bb:56:4f:4b:3f:43:6f:8c:86:
                    95:c3:cd:38:06:48:25:10:0a:ee:42:cb:c4:1a:e3:
                    ef:65:3d:c7:ae:17:14:81:8f:b1:49:0a:32:68:1b:
                    e3:76:05:b0:8f:92:af:ce:86:22:7a:d5:c8:89:c4:
                    01:f9:e6:52:31:25:b2:9a:78:9e:a9:92:6c:09:7e:
                    de:d0:a8:90:cf:9e:c8:e7:97:ce:cc:2d:69:ba:df:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:04:50:DC:B5:F6:85:18:5B:B8:24:B8:74:E9:C1:85:5E:0B:A3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cab28b0-ffb2-3f71-ab79-18ecc285accc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.110.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:ef:fc:5d:12:4d:b7:eb:9b:ad:40:04:6b:aa:ce:5e:35:
         12:fe:20:a4:66:4f:d7:b1:84:e8:ea:40:cd:b2:1a:ad:bd:70:
         41:1f:ec:44:a6:a8:b1:ae:00:f9:5a:88:e3:65:8c:e9:7a:c5:
         2b:50:ef:c3:3a:f7:2f:57:ec:c5:bb:af:ea:e0:44:99:34:13:
         13:7f:0c:95:19:e7:29:b4:03:49:da:e9:82:5c:58:cd:18:7d:
         cf:fe:c3:46:cf:80:ac:5c:98:c0:57:d7:b2:0a:f7:9e:30:9d:
         22:77:22:9a:72:ab:c3:6d:81:a3:af:38:2e:cd:50:f7:4f:02:
         47:10:77:85:e9:18:6e:aa:c5:e3:d0:ef:6e:d9:07:ca:40:44:
         5b:81:13:5a:39:59:99:37:a1:ed:5e:46:83:b5:ef:30:a4:cf:
         db:0b:6c:69:f5:61:ba:55:81:31:6d:bd:3f:00:01:bb:2c:89:
         cc:83:e2:4a:32:38:52:1b:af:c5:5c:dd:2e:79:9f:e0:79:dd:
         9c:07:50:99:46:1d:23:a0:f1:08:42:d1:74:12:58:9c:f4:53:
         1e:e1:6e:f4:dc:29:11:3b:43:37:69:8a:55:e5:48:f5:b4:aa:
         f9:e8:11:70:a3:c2:0b:a0:fd:d3:77:99:1b:32:c6:c7:a5:35:
         db:63:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:08:25 2025 by rpki-client