Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a1d3d8d5-36c2-3f00-ab27-6aed3da52eae.roa
File:                     a1d3d8d5-36c2-3f00-ab27-6aed3da52eae.roa (raw, json)
Hash identifier:          u0TqtSmG6IF9fCx+74jE/8tUPY/zliaCFdTkjMmCO6c=
Subject key identifier:   D3:72:3C:62:85:98:E9:BC:66:B3:0B:EB:6D:12:89:DC:25:E6:90:BE
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584957F3F8A30EBFAFCE0661ED20
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a1d3d8d5-36c2-3f00-ab27-6aed3da52eae.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        74.112.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f8:a3:0e:bf:af:ce:06:61:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=493df44a-825e-4d0d-8518-82169a6e9c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:95:12:11:57:e3:e2:6f:3e:4e:8b:ca:62:
                    0d:12:46:c2:06:9e:16:8f:f6:da:e4:13:73:47:15:
                    4a:b1:b2:66:1f:55:d8:ff:b3:55:84:6d:c4:75:5b:
                    08:b6:1f:d2:1b:c6:b0:fd:d0:c0:9f:c6:21:6a:56:
                    9a:5c:07:0b:0f:43:5f:28:6d:9c:17:91:3c:0b:0f:
                    14:2f:b6:cf:4f:59:d3:bf:40:e9:89:ba:ef:d8:86:
                    65:ee:50:a2:c3:13:8a:d4:1d:5f:62:6b:c1:b4:3d:
                    85:e9:44:c7:4e:47:8b:a4:91:a6:8f:7b:7a:a3:89:
                    c0:c0:63:10:1b:83:d9:26:d2:2d:3f:fb:eb:54:87:
                    ab:14:12:0f:96:b6:60:2c:ca:f3:2d:3c:8f:ef:2e:
                    65:86:9d:2d:e4:76:a5:05:cb:b9:dc:e1:9f:d4:16:
                    37:4a:d1:31:f8:66:da:af:ba:f7:81:e7:d2:1f:14:
                    c8:c5:8e:c0:c3:01:05:72:eb:78:19:3d:ca:93:1a:
                    5b:f7:57:e1:9a:bd:30:3f:ad:73:7d:9a:62:a4:d8:
                    22:e2:9c:77:75:ab:d5:54:15:ad:b6:82:37:72:a2:
                    f3:0f:b4:83:89:99:5c:c0:66:b4:4f:75:b1:87:9e:
                    7e:cc:3f:e7:e1:b0:ff:d2:cf:b8:41:48:09:8d:6f:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:3C:62:85:98:E9:BC:66:B3:0B:EB:6D:12:89:DC:25:E6:90:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a1d3d8d5-36c2-3f00-ab27-6aed3da52eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:65:8b:81:92:48:65:90:22:ba:24:57:e1:85:00:bc:5f:
         ae:55:e3:2c:32:86:26:20:0a:13:bb:c9:ad:e4:64:0f:a1:aa:
         ae:0c:98:53:db:4d:0d:17:6c:ce:82:bc:3e:0e:99:c5:3f:46:
         15:14:6f:df:cb:5a:03:3b:96:c4:94:f1:82:75:56:c2:21:65:
         6e:b3:11:87:61:d8:bd:2e:5a:40:d3:fb:54:0c:21:57:9a:3e:
         3c:57:8b:87:15:cb:de:e0:0c:7e:e3:a5:4d:6b:03:e2:83:63:
         a4:c9:eb:eb:4c:aa:28:c5:32:30:13:0f:11:6b:75:ba:bd:0e:
         02:0b:4f:27:7d:4f:a3:aa:01:7e:61:ca:ce:36:65:4b:14:2d:
         d0:fb:b8:e2:73:5c:9b:7a:e9:cc:3f:c1:2d:2f:fc:3c:49:5d:
         7a:08:10:86:b2:30:e5:fc:10:20:12:09:b1:25:19:e6:9d:7a:
         44:54:95:c1:79:45:00:a5:a4:2e:d9:b6:62:b5:2f:e4:38:2e:
         08:c6:13:a4:d6:10:1c:16:42:82:98:ac:c3:fa:23:99:7d:37:
         aa:a0:97:f8:d9:9b:8f:8c:12:98:dc:17:13:ab:9b:6b:b1:11:
         91:ed:eb:92:80:c9:8f:1a:03:9f:e7:6c:64:35:45:f0:21:67:
         b5:1d:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:39 2025 by rpki-client