Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
File:                     37b45a49-9b0c-3a83-b9aa-86c53327f256.roa (raw, json)
Hash identifier:          Pk+oMicY+VHIelJTOoxSlmn8sh4BOiPM/8Sv1UCr/9Q=
Subject key identifier:   67:C4:72:9B:4A:86:3A:D7:90:9B:03:A4:2C:F9:B4:0D:E1:60:3D:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A837E61E108B14E17B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.224.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a8:37:e6:1e:10:8b:14:e1:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=e6801b05-443d-46e5-90e5-214dd0968bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:0b:53:95:e4:95:aa:8b:c2:b7:48:fd:96:
                    a9:30:51:bf:b3:6e:55:fa:fd:e4:f3:20:44:11:cf:
                    de:10:c1:c5:e5:e0:7e:6a:93:6c:f7:20:a5:90:7e:
                    50:b6:34:88:4a:c2:eb:38:f3:cc:19:f1:91:a9:16:
                    08:24:70:54:84:f6:a6:1c:a9:6d:aa:8b:79:87:f0:
                    bc:e6:0b:5a:e8:bc:96:30:5d:96:81:6f:18:3a:59:
                    e7:78:27:a8:ba:3c:cc:e6:d9:90:75:8b:df:d0:ab:
                    01:9f:72:e3:a5:1b:94:a1:f1:68:32:25:22:1b:53:
                    c9:63:a3:60:20:ea:26:ba:d5:cb:c8:81:1c:ef:d5:
                    07:55:cf:d0:00:ac:3e:43:98:4c:86:a3:f9:15:e2:
                    af:47:9b:6d:3c:7a:d1:21:c7:b6:ea:6d:d4:82:da:
                    db:c1:69:39:36:c0:3e:3f:6d:b5:8c:f1:25:ed:3d:
                    3b:d5:36:dd:8f:14:27:f4:cd:c0:f6:50:46:0e:f4:
                    d5:97:cd:38:5d:1d:2e:6c:4f:3f:d9:dc:cd:4c:f4:
                    ce:73:17:6a:77:ca:d0:38:f3:72:db:69:86:0c:a7:
                    eb:1f:ac:47:a0:e0:37:41:5d:a2:c5:8b:c9:db:20:
                    c2:b0:b2:54:bb:bd:d3:30:53:a0:26:60:1d:da:f6:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:72:9B:4A:86:3A:D7:90:9B:03:A4:2C:F9:B4:0D:E1:60:3D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:fd:c8:6d:a2:ea:d3:9d:37:a3:d8:65:0c:8a:36:24:98:
         50:7d:06:31:bb:22:3d:40:f4:f2:f7:dd:99:a0:0f:9d:d2:75:
         bd:7d:cd:a3:30:b7:bb:0e:cf:ba:2f:37:95:e0:2a:1c:6c:2d:
         3d:df:18:fb:14:71:4c:a8:01:eb:7f:c5:10:f9:88:08:d9:07:
         46:a4:d6:57:af:5f:d2:84:f5:bf:c7:5b:be:46:2c:cf:99:ce:
         09:24:de:fa:a5:b4:43:b4:85:a2:3a:cf:32:7a:d7:04:a5:22:
         53:da:6c:69:a9:be:25:5e:10:84:10:4c:7b:56:d5:4a:d2:1c:
         28:9b:a7:c6:88:8a:05:38:81:d7:e2:65:d3:77:8c:a1:c8:52:
         9b:61:c3:a0:1a:07:13:2a:d9:ee:b4:22:06:9f:5e:b2:c8:d8:
         2f:81:f3:5e:6d:55:83:b8:68:b8:4f:6e:78:cf:1a:24:be:ca:
         cb:b7:7b:41:53:93:a3:d5:2c:80:a3:90:12:71:31:99:f9:95:
         73:84:d6:5b:4a:df:0a:8c:38:e5:2d:1b:70:ee:77:b9:b7:39:
         0a:1b:9d:e7:26:fa:d1:5e:bf:18:15:1b:01:6b:b7:c4:b4:8d:
         aa:06:c0:76:e9:88:89:43:0c:f0:0c:81:14:3d:b5:bf:58:97:
         e0:b9:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:25 2025 by rpki-client