Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/973c7f19-820d-318c-ae21-da33b5b11ab3.roa
File:                     973c7f19-820d-318c-ae21-da33b5b11ab3.roa (raw, json)
Hash identifier:          evDzEt+ku0CqC3n7sObxjv6/In+t2AzCGHz8PEfScFI=
Subject key identifier:   E1:7A:F3:53:19:52:84:7A:25:0E:BF:0C:0D:2F:EF:8E:1B:4D:0E:3C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858492CB142581879E169709CE780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/973c7f19-820d-318c-ae21-da33b5b11ab3.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     399161
IP address blocks:        204.74.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:42:58:18:79:e1:69:70:9c:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a524d91b-ab2b-4512-abc1-3ae87d81ae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:28:a6:17:f9:2c:67:ee:8a:0c:9e:ce:cd:
                    83:d8:c0:75:6d:71:02:54:d0:1d:cc:81:db:02:dc:
                    13:67:d8:3f:ea:7c:5a:93:90:54:b9:8b:f8:ae:b8:
                    c7:3b:33:97:9d:2f:70:96:44:ef:37:a1:f6:74:bd:
                    51:eb:01:d6:29:e3:94:71:f0:93:e9:7a:a9:7a:16:
                    f6:8c:dc:fe:39:ea:5f:90:6f:7c:5a:5f:a7:99:bf:
                    29:72:44:19:4b:74:bb:88:4d:91:d3:57:bc:03:6d:
                    2b:62:df:29:75:75:3d:0f:5b:80:97:fa:fa:83:5b:
                    85:75:f3:e2:95:ec:09:b4:a2:de:bd:12:73:9c:ca:
                    14:a9:2d:7f:11:3b:60:4b:66:8e:3a:83:c2:96:30:
                    ff:1d:0c:8a:8e:79:c5:d1:79:2f:f0:1b:bf:30:e7:
                    8e:57:89:3e:8e:3b:d1:8b:05:c1:0a:7f:cf:03:b0:
                    7a:32:4e:4f:b5:cd:05:b8:51:36:eb:45:47:f5:ee:
                    e2:09:c7:db:8e:ab:b3:59:3c:d4:e0:9f:44:ea:3c:
                    24:9c:f2:d5:02:f2:d6:1c:1b:bf:db:72:63:2d:20:
                    67:45:13:49:06:95:66:fe:a5:12:4d:8d:95:af:ee:
                    a5:48:aa:6d:a7:3c:cb:67:a3:69:2e:03:09:1f:99:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7A:F3:53:19:52:84:7A:25:0E:BF:0C:0D:2F:EF:8E:1B:4D:0E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/973c7f19-820d-318c-ae21-da33b5b11ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:64:43:95:c7:f9:6f:f7:1e:38:e6:9d:74:3f:ab:60:fe:f1:
         8b:a4:20:8c:6a:63:93:93:57:9d:ce:3a:78:97:dc:d9:ff:cc:
         ce:e0:e1:68:1b:5f:22:c7:4d:0f:fc:39:f0:03:28:dd:16:de:
         fb:d5:d3:90:c2:c2:03:dd:24:fe:87:fb:a5:1d:4f:d4:f1:c9:
         df:de:e9:f8:f8:6e:89:5d:1c:8d:4c:b1:fa:0f:f8:3d:fa:40:
         e2:e4:25:24:7b:d5:aa:ce:59:fc:37:93:1e:49:02:53:3f:57:
         96:12:d3:65:06:e1:39:86:f7:3a:bc:7d:90:2c:d2:46:b5:86:
         be:11:19:07:40:91:fd:0c:be:ee:d5:3c:fe:cd:26:4e:6e:44:
         cb:7e:85:94:3c:4c:f6:51:d5:3d:67:4d:0b:ad:30:ab:ca:7d:
         b4:78:b7:28:b6:fa:89:0d:af:c6:c0:a3:ca:12:1f:58:3c:92:
         f3:fc:07:69:41:88:89:fe:44:0d:db:1e:d8:5e:e1:28:de:fd:
         b3:c9:73:2c:8d:d3:34:81:8c:e2:66:6d:b5:98:96:7f:26:63:
         38:77:ff:e1:e2:cc:44:39:18:a2:e9:da:01:ee:fa:c1:5e:6f:
         f4:9e:f1:e6:89:9a:3b:37:e2:bc:c9:a2:0e:1a:9c:5f:76:c0:
         e1:30:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:42 2025 by rpki-client