Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb03d613-eb75-3fc3-88b8-de158ab3af70.roa
File:                     bb03d613-eb75-3fc3-88b8-de158ab3af70.roa (raw, json)
Hash identifier:          o+5okHGlQI7ySi5tIanK2ZvNvNA4UW4gnUXKNd0XesQ=
Subject key identifier:   25:D6:4F:A0:4D:68:10:35:44:9F:65:4A:E6:48:F7:B9:AD:67:B1:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB4EFC89D27BE79E2AB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb03d613-eb75-3fc3-88b8-de158ab3af70.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     36103
IP address blocks:        74.82.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b4:ef:c8:9d:27:be:79:e2:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=c672f51b-cc14-48e1-aff1-8ed723b7e3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:c2:2b:45:59:82:45:f2:9b:6f:48:d7:cd:
                    d7:6e:06:6a:d3:ba:0f:33:0b:a5:98:88:95:21:63:
                    b9:d5:bb:21:8e:ea:22:14:c6:6c:2d:4c:a3:7c:04:
                    05:65:62:1f:03:58:de:03:9e:54:46:2e:40:b3:66:
                    a7:22:14:01:3c:f4:21:80:d6:45:24:aa:49:e7:73:
                    cc:f2:9c:a1:11:4e:f7:4d:20:15:06:59:cd:ff:94:
                    e3:ea:be:b1:ca:cb:4b:53:5a:6d:d9:68:65:5f:71:
                    1a:6c:ed:cf:e9:b5:84:7f:0b:3f:71:c3:a6:45:35:
                    c7:92:2f:3b:37:53:1b:cf:80:1b:32:08:79:d1:98:
                    fc:b5:c3:36:6f:b6:3a:09:2d:18:ed:70:86:07:71:
                    63:03:6a:a7:52:f4:e1:5f:d8:e8:28:4d:5e:d9:56:
                    1e:e2:a3:61:62:27:4e:1c:f6:e5:5d:74:fe:50:d0:
                    e4:c8:44:ca:77:76:77:a4:d3:b4:3c:b3:7d:75:20:
                    41:d2:92:b6:d6:6c:f9:c1:8e:59:8d:8e:c6:7c:c6:
                    05:65:57:de:ab:76:18:bc:11:1f:c2:3b:37:ea:72:
                    2d:06:46:2d:da:0f:d8:eb:42:e3:eb:dd:44:67:db:
                    6c:3d:46:98:b8:81:4f:70:ab:e1:80:62:dd:11:34:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:4F:A0:4D:68:10:35:44:9F:65:4A:E6:48:F7:B9:AD:67:B1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb03d613-eb75-3fc3-88b8-de158ab3af70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:14:00:d5:e9:79:a0:31:95:ff:9b:58:19:fc:7e:bc:45:
         44:8e:cc:af:92:b6:e5:33:0e:a6:ac:6f:4f:fe:f5:d2:b9:3c:
         41:33:34:c2:a6:42:ef:ab:2a:c4:53:49:4c:4a:0f:68:71:e2:
         73:63:64:41:5a:f7:db:3c:ca:71:9c:0d:a4:66:25:38:32:02:
         6e:d8:00:ab:b1:37:82:42:24:59:e5:5a:64:32:a9:da:cf:6b:
         c8:23:d4:3c:63:f4:13:95:23:ce:81:38:da:19:8e:33:70:7c:
         1d:ad:b5:d1:07:3b:95:0b:24:e0:fd:34:62:28:33:9f:56:c2:
         c7:ea:e5:88:88:21:5c:66:29:f8:8b:0f:9d:15:68:be:b3:f9:
         e2:c1:39:4f:16:c4:57:82:5a:e7:fd:45:7b:25:40:6f:33:15:
         e6:8f:80:a5:9d:26:07:38:bd:ce:8e:5a:36:41:51:e9:1f:e8:
         73:19:55:95:c4:5d:ac:03:b4:07:db:56:2f:da:3f:5e:5d:80:
         07:09:4a:a8:97:e8:33:b9:0c:ef:9f:dd:73:c9:cb:60:4c:5c:
         3f:51:65:5f:c7:0a:9c:57:1f:31:d1:42:d9:bb:6f:7f:7a:a6:
         d1:8c:8a:b3:b4:68:8a:e4:8a:ab:15:2b:a9:f9:b2:f2:ea:32:
         f7:86:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:45 2025 by rpki-client