Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/969beb29-7304-3eee-b547-bf4150b210b3.roa
File:                     969beb29-7304-3eee-b547-bf4150b210b3.roa (raw, json)
Hash identifier:          WA2AMRd4gxx44wcTuL28TKfioTYVUE2gT2HbVOyMUXk=
Subject key identifier:   AB:96:95:15:2C:7D:E3:A3:97:70:4C:D4:FE:E6:97:2C:32:EC:25:53
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858495C246A6B54B55875D82B5440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/969beb29-7304-3eee-b547-bf4150b210b3.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     397223
IP address blocks:        204.74.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:6a:6b:54:b5:58:75:d8:2b:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=48394156-ddf1-4891-873b-3c5e6a4860f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:2d:c7:61:47:f7:ee:73:fc:14:42:50:0a:
                    87:51:6d:86:f1:d9:ba:5b:f8:0c:c6:01:4e:db:c1:
                    12:dc:d1:5e:8c:b9:6b:12:44:7f:27:03:3c:7d:0b:
                    7e:a3:bd:4b:37:6b:eb:cb:5e:4b:66:4a:8c:8c:02:
                    28:ab:48:ca:09:18:c0:70:6b:12:b2:be:ce:bf:d3:
                    c8:2e:f3:11:e7:0a:4e:33:c1:70:20:d6:21:86:50:
                    2f:b7:da:2a:8f:21:bb:a5:e9:40:53:96:dd:77:1c:
                    5a:83:84:38:a6:b1:85:51:58:c2:09:2b:58:a5:d7:
                    dd:31:d6:4c:ba:16:ca:f7:f6:40:d6:a9:8d:2d:27:
                    9e:53:68:32:bb:f0:1b:09:5b:d7:b5:9d:cc:a4:8c:
                    8d:35:7f:9b:d8:a6:0e:52:0e:09:0c:eb:77:3d:2f:
                    db:da:14:dc:95:af:32:2a:ba:2d:cc:56:28:54:a0:
                    e5:2e:f7:e8:0f:94:72:61:af:fa:99:c8:49:a9:08:
                    3b:f3:d3:c1:cf:fa:d9:3d:88:76:e3:f0:e7:cc:2e:
                    53:fc:50:ba:9c:45:da:4b:b5:c2:67:76:37:af:2c:
                    49:b0:d0:5d:df:11:a5:99:be:8d:b6:2e:7c:03:5f:
                    11:aa:23:67:77:17:b2:44:a3:9b:e7:90:f0:b3:87:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:95:15:2C:7D:E3:A3:97:70:4C:D4:FE:E6:97:2C:32:EC:25:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/969beb29-7304-3eee-b547-bf4150b210b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:76:36:d0:9b:3d:62:d8:6a:18:b7:f7:18:4f:00:2e:5f:
         b9:e1:2d:84:f5:8d:25:c8:eb:c1:1a:10:78:e0:cd:ee:c7:10:
         b1:08:95:0f:41:e9:ea:0f:86:fb:38:ab:fc:cd:41:72:82:e2:
         83:e6:d8:33:c9:0e:d7:8c:f9:9f:f0:c2:6e:a6:d6:75:c6:f8:
         86:a8:c3:39:5c:de:7f:6f:75:a2:74:ae:ff:ba:70:39:b2:15:
         40:86:cd:54:f0:1a:2c:46:ab:30:87:ed:93:ad:4d:44:9b:5d:
         36:e6:7a:9f:8e:7a:64:34:d2:70:06:51:5e:ba:3e:7b:aa:3d:
         bd:0e:55:bd:d5:4f:49:78:2a:a0:d6:da:30:e7:21:9d:8e:50:
         ae:91:3a:41:4d:53:66:a1:c0:cc:10:3e:c7:62:2e:71:f7:92:
         e8:83:7f:ee:58:eb:2e:cb:d7:a3:39:fe:32:51:24:7f:03:e0:
         34:cc:76:a7:df:63:11:a0:7b:85:e4:4a:c0:0c:e1:dd:12:3b:
         7a:f0:cc:73:56:3c:ec:89:1e:a3:ac:9c:2b:e5:7e:16:7c:75:
         8e:4b:61:48:e7:40:0d:78:18:a0:cd:f3:59:73:d7:62:01:ce:
         d3:df:a2:58:d5:80:39:97:53:93:d5:25:7b:a9:06:d5:37:dc:
         21:fc:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:22 2025 by rpki-client