Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad407e5b-0792-33e2-acf6-9725309dd5d4.roa
File:                     ad407e5b-0792-33e2-acf6-9725309dd5d4.roa (raw, json)
Hash identifier:          1UoHqrfNKkh37h2u3xsCObksIWpRMcLXqqfMJlzhzHI=
Subject key identifier:   B2:B4:64:EA:F8:5A:09:8B:AF:05:2A:14:91:C4:F2:D0:DF:C0:FC:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8538621426DFB09311C380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad407e5b-0792-33e2-acf6-9725309dd5d4.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        74.107.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:38:62:14:26:df:b0:93:11:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=1b1649af-34d9-436b-9eec-5e79f1798ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:53:d6:9c:24:62:84:05:94:f4:1b:7a:dc:
                    d2:0c:ca:e5:c1:db:bb:72:b6:06:7e:0c:54:9e:f5:
                    cf:5b:4e:de:cc:49:60:b6:e9:dd:96:72:d6:13:6f:
                    05:f7:e1:ea:14:0c:ff:5f:a5:86:e6:96:da:54:7d:
                    c4:e7:67:50:b2:29:7e:4b:29:21:eb:3e:41:1b:8a:
                    cb:50:07:4c:a2:ec:74:76:32:74:ef:51:06:e3:67:
                    56:5a:5e:a8:bc:3c:e3:2a:2a:52:d5:16:7a:4a:7f:
                    d2:d8:e8:48:dd:a9:a6:f0:ed:a8:13:dc:e6:52:7b:
                    5e:f9:ba:c8:95:f7:20:01:b4:da:42:13:e8:d9:e3:
                    3f:80:20:0b:34:9b:3b:78:5a:7f:0e:b5:69:81:bb:
                    83:ff:0b:51:b9:94:7f:d9:74:7a:5e:b2:1f:b7:e4:
                    4a:58:5d:1d:da:48:f7:58:a9:79:61:a8:75:8a:83:
                    80:2c:0b:66:49:08:fc:71:6e:8f:2a:b3:f8:f9:7a:
                    70:ee:e6:9f:48:9a:9b:80:88:cb:05:da:75:8b:c9:
                    79:6c:02:7a:34:a9:70:61:9b:a6:e7:1e:43:b5:42:
                    83:57:3d:a0:52:44:5b:3b:c0:4b:c2:05:c4:22:ea:
                    31:0e:b4:c1:cc:c8:df:7d:4b:07:2b:d0:14:8d:a2:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B4:64:EA:F8:5A:09:8B:AF:05:2A:14:91:C4:F2:D0:DF:C0:FC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad407e5b-0792-33e2-acf6-9725309dd5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.107.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:0b:33:49:23:1b:b7:08:9c:03:a4:d9:c7:56:3b:df:e6:
         a3:be:22:f4:e0:b9:13:b6:01:a7:2e:f2:51:4d:d6:c5:77:76:
         44:67:12:82:00:f4:f8:e0:18:ef:f0:3c:2a:34:60:d0:67:8d:
         6e:9b:03:d4:f6:c8:ac:e7:cf:33:15:71:f1:4e:d1:e6:bc:da:
         b0:19:04:ba:85:a0:70:80:85:89:92:28:8d:de:17:b4:77:95:
         c0:3e:12:45:c0:02:ff:ae:7e:77:b6:46:b6:9a:14:87:d0:53:
         ae:e1:d1:ee:82:fd:57:f5:17:70:d3:1c:e0:06:ad:5f:93:74:
         a3:3f:d0:69:38:4b:9c:11:91:08:72:84:43:2e:00:d5:bc:a0:
         3a:a1:54:a2:a0:d4:8c:39:9c:d0:f8:9d:91:c7:74:c4:84:96:
         47:9d:59:f9:4c:f7:50:22:e4:30:49:4b:05:dc:e2:86:bb:d9:
         ea:57:40:b8:31:87:46:d9:66:78:7b:1f:2b:28:32:34:ab:08:
         2c:85:a6:02:bb:42:d6:69:13:f2:ee:42:73:97:2f:70:ba:b5:
         ce:52:ca:58:82:fa:74:cd:39:83:18:76:af:89:ea:c7:2d:b8:
         06:eb:c7:a9:ef:71:e9:3a:78:b8:b4:07:9f:e7:1b:80:e7:c2:
         fc:c8:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:05:12 2025 by rpki-client