Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da773a54-7fa1-37df-af7d-e0e019beccf2.roa
File:                     da773a54-7fa1-37df-af7d-e0e019beccf2.roa (raw, json)
Hash identifier:          W2j3SmLCzQ15RnrYs1Q/BFl9IKpREUIL2ns5u4gtgJI=
Subject key identifier:   95:D6:B7:DE:75:9A:6A:32:7C:34:C4:F7:8F:C0:23:02:2E:E5:F5:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB22916CDF4F4C3EA3A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da773a54-7fa1-37df-af7d-e0e019beccf2.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     394740
IP address blocks:        74.82.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b2:29:16:cd:f4:f4:c3:ea:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=8144e0ff-38dd-40da-9c41-1fbd99cdc808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:06:ff:cb:5a:ea:15:73:54:93:db:15:79:
                    42:ff:46:73:7c:d9:5f:dc:57:3a:3d:aa:6d:2a:c4:
                    9e:3d:6e:93:62:6d:68:0b:f8:f3:1c:f6:f7:a5:79:
                    0b:21:33:0b:0a:b0:60:29:f3:2a:e3:49:2a:ec:ec:
                    6a:3b:d2:4e:5c:ce:be:05:79:e0:a9:f7:c4:82:3f:
                    b7:c1:4f:41:cc:4d:4d:cb:cf:be:11:c0:4c:eb:e3:
                    00:90:56:8f:d1:a0:3a:e4:45:6a:52:3f:4d:73:38:
                    2f:7b:50:f8:d0:ec:00:8a:29:21:c2:57:c1:b5:ed:
                    5e:c7:00:97:e5:1b:96:ab:8a:24:11:74:b1:16:e5:
                    44:70:ed:d8:47:c4:0c:b6:4f:81:98:84:57:1c:fe:
                    bf:d1:97:ae:77:12:92:80:da:cf:77:27:8b:63:69:
                    e0:f6:86:9b:0a:81:29:2e:bc:e5:06:68:3c:07:f0:
                    63:c8:d2:e9:de:ed:69:31:16:27:42:82:91:b3:a0:
                    b4:ab:ee:6e:bd:1d:cb:0a:23:3f:a6:83:22:55:43:
                    2e:b8:a2:39:36:33:41:63:d5:0c:30:bc:e9:30:26:
                    f1:7b:36:75:de:78:0e:20:10:43:6e:eb:53:54:e7:
                    89:14:39:c5:ba:3f:8b:12:5a:df:56:eb:26:24:25:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D6:B7:DE:75:9A:6A:32:7C:34:C4:F7:8F:C0:23:02:2E:E5:F5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da773a54-7fa1-37df-af7d-e0e019beccf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:97:cc:c0:b0:92:20:ec:98:26:3b:3e:2f:f9:16:d8:1f:11:
         03:99:f8:78:2d:12:4b:59:db:80:6c:bb:21:2e:22:1e:61:15:
         fa:13:d1:40:36:4b:cc:a1:42:83:07:18:49:1e:49:53:63:82:
         67:3c:19:ce:a2:b7:8d:07:37:2d:94:c4:d9:ae:ad:51:81:75:
         fd:c9:4d:1e:83:29:75:12:f6:66:50:a2:e2:69:a1:2d:b9:06:
         70:ad:5d:5c:b0:30:bf:52:79:3a:9d:c2:c0:97:35:a3:e9:0d:
         9f:a3:29:c2:71:7a:78:88:1b:e7:51:bd:a5:38:c2:3c:3a:b2:
         f2:3e:06:8a:c4:cd:f7:25:d9:85:46:68:ec:17:8e:f8:89:da:
         ed:b4:ed:97:97:7e:9d:b0:b4:d3:f3:a6:72:8e:f9:3c:4d:a7:
         1c:06:7d:4a:fb:c2:3a:bf:1f:77:15:96:05:0a:ef:24:cd:93:
         64:b4:f5:df:34:62:e1:0e:c5:b5:60:e5:35:7e:92:27:6a:74:
         4a:ba:39:50:f9:89:43:29:9e:f1:bb:38:27:fa:6c:b1:59:36:
         6c:94:fd:e4:fd:38:73:d1:86:2e:95:69:5f:7b:50:7e:6b:a0:
         00:f7:12:51:ce:c0:be:db:8c:2e:1b:9f:09:72:c9:f0:a7:26:
         f9:ea:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:18 2025 by rpki-client