Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc092d2c-5edf-3ba1-8bf1-c5c4a8afdef1.roa
File:                     fc092d2c-5edf-3ba1-8bf1-c5c4a8afdef1.roa (raw, json)
Hash identifier:          hJoqrS81P0r5vU0Yv08YhmfrneNpYpkZJF1lf4nd2XY=
Subject key identifier:   76:BE:9F:3A:E4:4D:7C:DD:B9:56:10:84:5A:22:E1:D3:76:B4:A7:39
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213436E90F18C3161EA0E940
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc092d2c-5edf-3ba1-8bf1-c5c4a8afdef1.roa
Signing time:             Sun 09 Mar 2025 10:20:42 +0000
ROA not before:           Sun 09 Mar 2025 10:20:42 +0000
ROA not after:            Sat 07 Jun 2025 10:20:42 +0000
asID:                     577
IP address blocks:        174.94.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:36:e9:0f:18:c3:16:1e:a0:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:42 2025 GMT
            Not After : Jun  7 10:20:42 2025 GMT
        Subject: CN=1edb1967-2d00-495d-ae99-f2e071fc74e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:6b:f9:d5:ae:c4:fb:1e:0d:08:11:26:7d:
                    10:88:67:0e:b1:3f:82:b3:cb:63:44:58:d1:31:81:
                    82:47:20:e1:65:ca:56:a3:5c:e4:e7:72:6a:4d:78:
                    6b:74:8f:a3:6d:14:bc:18:31:89:d6:3a:49:81:c6:
                    87:cc:0f:ca:a5:3e:28:d7:45:5c:f9:a8:18:90:37:
                    98:f3:ca:3a:6a:fd:82:4c:e9:a9:25:ff:b6:13:ce:
                    92:5c:4c:09:a8:05:d4:06:cc:3c:ee:57:98:5c:08:
                    8b:f4:fa:18:98:85:df:b8:24:35:f5:93:c5:5b:78:
                    fc:cc:d2:88:f1:db:52:3e:04:7e:bb:71:f0:b8:71:
                    8c:aa:f1:74:65:ab:93:95:ab:70:c4:21:dc:4d:16:
                    b0:16:3f:a4:05:70:6e:2b:08:2c:78:f8:72:32:20:
                    bd:9a:96:e1:d0:b8:cc:8b:74:ef:06:81:de:96:1d:
                    87:a7:ac:41:9b:00:82:da:da:48:60:09:06:5d:48:
                    7c:04:ef:cf:90:bb:ef:59:5c:15:f9:5c:db:69:a9:
                    cb:95:ff:0a:30:6f:68:a8:33:8a:f9:84:df:62:71:
                    4d:af:a1:7f:fd:d1:fc:45:bc:63:38:06:92:58:5e:
                    fb:7a:93:36:3a:be:d2:bf:65:f2:d3:12:34:e8:28:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BE:9F:3A:E4:4D:7C:DD:B9:56:10:84:5A:22:E1:D3:76:B4:A7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc092d2c-5edf-3ba1-8bf1-c5c4a8afdef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:60:d7:7e:96:ba:b4:13:ee:aa:54:d3:c8:55:2c:ba:64:
         6d:36:71:12:41:54:89:1c:d8:d5:b6:c1:1f:83:79:f3:56:37:
         80:e5:a1:33:de:a6:51:7f:10:92:d4:40:90:78:43:84:fb:03:
         80:24:a7:de:3e:0d:ea:d9:9d:7a:c5:43:3d:49:c6:56:32:ee:
         3d:c8:f8:4f:04:4c:c9:2d:b7:a8:b6:d3:e0:48:79:ec:0e:c9:
         80:cf:3d:2c:15:08:06:ec:6e:f0:c6:0b:5f:1c:b6:cb:97:0f:
         32:65:03:ac:0d:7e:45:95:15:97:df:18:2c:91:29:f7:5f:87:
         bd:6f:2d:90:6e:1b:4d:1c:1b:2e:6b:55:27:57:f2:73:88:f0:
         a7:5e:bb:11:5a:eb:f9:cc:a3:82:ea:d1:0b:9c:bf:19:a3:07:
         48:ab:7b:d9:6b:45:f1:90:49:d4:98:fd:3e:75:6c:13:fa:34:
         37:db:07:db:6e:33:ea:54:ad:b0:e2:f6:9e:08:b9:e0:52:4a:
         d5:9a:0f:c1:bb:5f:3a:31:bd:5e:af:1a:24:70:bd:8f:7d:36:
         5a:08:87:80:7e:70:eb:ca:e8:98:0a:c8:d5:03:89:2d:cf:83:
         2f:81:98:e2:41:c6:30:c0:69:05:b0:06:b8:09:cb:41:c1:63:
         b9:76:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:27 2025 by rpki-client