Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa
File:                     6d7bc450-e52f-3fd5-996b-04b20aceb511.roa (raw, json)
Hash identifier:          7B5qewGnDW1i1YOlwI99wvgW9Y0r/D+Xf1+Raxe6vCM=
Subject key identifier:   24:BB:87:50:50:39:37:FC:BC:A1:A8:22:18:E3:B4:B2:F1:D1:96:A0
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F43285849D594E802CC002D05460F09C0
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        74.117.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e8:02:cc:00:2d:05:46:0f:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=a9a61ab0-c369-4c66-a14f-6dd9e4b229bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:68:92:91:96:7e:03:25:24:75:3e:ba:54:8d:
                    c2:c9:75:42:33:e8:76:1b:ba:b4:e2:fb:9f:63:67:
                    93:af:97:55:d3:de:25:63:9e:76:7b:31:7b:0f:f9:
                    a4:12:22:eb:ad:05:c1:92:33:a9:32:82:f2:c3:b2:
                    ed:b6:55:5d:3e:50:c5:76:84:ba:f4:1e:c8:ad:b9:
                    b7:2b:2d:0b:1d:e3:50:4c:91:dc:08:ca:f9:5b:5a:
                    32:ae:f8:48:53:c2:1b:1d:49:60:ea:c5:b8:3b:c8:
                    ef:a4:ed:22:3c:1a:6e:08:85:24:8f:94:ec:47:88:
                    81:89:ca:15:8b:93:c7:84:c0:27:99:b3:1a:ef:ff:
                    c9:42:d1:c9:05:97:48:be:63:de:77:b4:85:08:78:
                    9e:08:5b:96:66:9e:03:48:d7:42:a6:15:b1:82:3a:
                    9b:62:bc:ec:a4:4b:45:fe:79:fc:e7:63:27:94:36:
                    43:52:25:6a:a1:94:73:e1:98:7a:b5:71:f7:20:09:
                    30:d4:d0:0f:ac:ad:ce:8a:e8:75:aa:eb:72:e8:bd:
                    e6:0d:5d:30:eb:d1:ae:77:80:b9:e2:d6:d7:d6:d0:
                    20:1d:c9:53:4f:2d:c5:43:4f:3e:bf:8f:0a:79:93:
                    d1:4f:06:6a:da:e7:54:3c:e4:38:9b:f9:bb:b8:b1:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:87:50:50:39:37:FC:BC:A1:A8:22:18:E3:B4:B2:F1:D1:96:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:81:63:1c:7e:bc:40:49:c8:64:cf:1c:10:a2:17:53:c0:fb:
         08:f8:c9:6f:3b:93:f2:f0:96:d0:e0:ae:ff:78:ea:62:f3:fe:
         85:e0:24:19:89:15:3b:74:0c:15:d6:07:ab:e4:c1:84:79:bf:
         04:45:09:e8:63:61:d4:62:1e:c9:ac:45:62:6c:fd:e9:df:37:
         52:d5:8e:02:71:32:43:a1:27:66:c8:2b:fb:cb:3c:54:73:ac:
         7a:e2:f7:ba:cd:33:2d:31:c4:30:de:47:34:92:f4:7e:80:ca:
         3d:9b:92:5f:52:6b:db:c5:22:56:40:67:db:71:e9:2b:1f:2b:
         90:16:e2:ec:70:3e:49:e5:ae:24:a3:38:08:e6:e1:39:ba:d2:
         92:7e:af:f9:fb:3c:f5:5c:50:82:04:54:d4:ff:c0:65:e9:44:
         d0:fb:8b:f0:03:2b:9d:ce:45:c3:51:4e:32:68:0e:4b:72:cd:
         73:aa:82:3d:da:11:8e:bd:c3:6c:51:a2:3f:5d:2b:7c:f0:b4:
         bb:40:cd:f0:9d:00:f2:48:7b:a8:c8:14:8a:c7:86:73:ea:ce:
         44:92:24:7e:8b:a9:57:8d:55:0c:7d:d4:fb:aa:f9:2d:16:99:
         cc:fd:45:5e:90:e4:0b:27:8d:57:20:7c:92:b6:60:21:1a:4e:
         0f:af:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:29 2025 by rpki-client