Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ea63cd8-c107-351b-8ced-4cdf20449c53.roa
File:                     3ea63cd8-c107-351b-8ced-4cdf20449c53.roa (raw, json)
Hash identifier:          bNPKXpKs8RF+w5hi2kSZjoBIbfkxwno9qCawKg/XGgM=
Subject key identifier:   7E:69:0E:0E:88:DC:2D:EF:1A:34:D2:80:11:69:52:62:C5:19:BC:EB
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584957F3F8654A3AA4728B50B500
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ea63cd8-c107-351b-8ced-4cdf20449c53.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        74.112.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f8:65:4a:3a:a4:72:8b:50:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=c9f7a4e4-0c49-4ab4-a069-c1cd2e7045d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:d7:45:f6:11:a6:d1:cf:ce:0b:0f:e0:24:
                    82:2c:f2:47:bd:5c:5d:53:32:70:f9:59:bf:89:2d:
                    1f:95:88:92:10:69:09:b3:2e:54:50:bc:18:93:27:
                    32:e7:66:8e:b6:36:7f:ae:78:4a:3d:6f:9b:f6:d9:
                    f3:39:19:1f:74:9b:34:35:14:5a:29:2e:a4:b7:e0:
                    21:59:f7:38:b4:fb:9b:2c:3b:06:a4:3a:8b:cf:f8:
                    77:d4:df:39:ac:d9:8e:03:86:4c:02:1f:cd:bb:60:
                    25:1c:82:60:79:44:4a:d7:eb:ef:df:4a:f1:de:0f:
                    66:a6:ae:74:b1:8c:a8:bf:74:67:f9:95:4f:59:4e:
                    f2:2a:5c:61:da:a4:a9:22:22:e0:da:1a:39:26:55:
                    ea:1b:1d:87:74:77:ad:3c:01:02:10:de:e3:88:e7:
                    b9:fc:ea:4d:5f:af:c4:96:de:a6:db:d8:09:24:2d:
                    f0:2b:31:30:6c:a6:a7:9b:73:ab:eb:03:bd:17:c4:
                    e8:58:c9:92:20:08:51:c3:2c:d3:cb:02:45:1c:e0:
                    c0:55:e3:1e:00:21:e3:75:6c:6b:ce:93:b5:31:a1:
                    c3:69:15:b0:87:41:47:ac:da:71:a8:f3:d2:f0:da:
                    b4:27:c3:36:9d:6e:99:c2:e8:fd:5b:63:cd:65:d1:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:0E:0E:88:DC:2D:EF:1A:34:D2:80:11:69:52:62:C5:19:BC:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ea63cd8-c107-351b-8ced-4cdf20449c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:a0:80:d0:9c:51:74:94:9e:33:90:b6:8f:40:fb:99:dc:
         e2:6c:31:08:bc:c2:5c:fd:d8:2e:1b:84:c9:92:45:ac:8d:dd:
         97:89:40:21:a7:78:3d:b5:15:1c:35:b2:7b:e2:b5:6d:48:c4:
         37:16:84:cb:5e:8a:11:f8:ef:b1:3d:6e:90:76:e4:28:fd:29:
         9f:86:66:8c:b3:55:f2:8c:1b:93:88:fc:98:b5:96:a4:51:26:
         3c:a3:ea:bb:96:64:5b:4e:e6:91:de:f5:0e:9c:69:e5:39:7d:
         ab:78:e1:d2:de:92:ae:10:c3:84:23:54:2b:8c:2d:e4:dc:88:
         72:b3:93:06:40:9d:86:dd:c8:13:b9:62:81:14:4c:ba:66:1f:
         43:c6:ff:0e:72:46:82:f9:04:2c:36:7b:ac:ef:c3:55:02:68:
         59:1c:44:0c:5b:83:2e:3c:c7:8d:c4:4d:95:67:ef:e8:6a:a1:
         17:cd:10:00:ba:87:af:b7:02:08:82:49:a9:35:77:e7:8e:b8:
         fe:8d:d6:9b:28:5c:a2:1f:90:21:e8:ff:fd:bc:b4:c3:46:f1:
         42:74:c7:fc:96:17:a2:4a:d4:60:ff:a1:e3:85:9c:92:59:5f:
         5e:af:04:10:19:8e:59:5a:2c:cb:54:f4:bc:38:ae:98:e9:39:
         72:ec:ea:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/hlSjqkcotQtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
YzlmN2E0ZTQtMGM0OS00YWI0LWEwNjktYzFjZDJlNzA0NWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLTXRfYRptHPzgsP4CSCLPJHvVxdUzJw+Vm/
iS0flYiSEGkJsy5UULwYkycy52aOtjZ/rnhKPW+b9tnzORkfdJs0NRRaKS6kt+Ah
Wfc4tPubLDsGpDqLz/h31N85rNmOA4ZMAh/Nu2AlHIJgeURK1+vv30rx3g9mpq50
sYyov3Rn+ZVPWU7yKlxh2qSpIiLg2ho5JlXqGx2HdHetPAECEN7jiOe5/OpNX6/E
lt6m29gJJC3wKzEwbKanm3Or6wO9F8ToWMmSIAhRwyzTywJFHODAVeMeACHjdWxr
zpO1MaHDaRWwh0FHrNpxqPPS8Nq0J8M2nW6Zwuj9W2PNZdGNJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5pDg6I3C3vGjTSgBFpUmLFGbzrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvM2VhNjNjZDgtYzEwNy0z
NTFiLThjZWQtNGNkZjIwNDQ5YzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyRoIDQnFF0lJ4zkLaPQPuZ3OJsMQi8wlz92C4bhMmSRayN3ZeJQCGn
eD21FRw1snvitW1IxDcWhMteihH477E9bpB25Cj9KZ+GZoyzVfKMG5OI/Ji1lqRR
Jjyj6ruWZFtO5pHe9Q6caeU5fat44dLekq4Qw4QjVCuMLeTciHKzkwZAnYbdyBO5
YoEUTLpmH0PG/w5yRoL5BCw2e6zvw1UCaFkcRAxbgy48x43ETZVn7+hqoRfNEAC6
h6+3AgiCSak1d+eOuP6N1psoXKIfkCHo//28tMNG8UJ0x/yWF6JK1GD/oeOFnJJZ
X16vBBAZjllaLMtU9Lw4rpjpOXLs6r4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:29 2025 by rpki-client