Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e982be65-3513-3c46-9156-46c858138f03.roa
File:                     e982be65-3513-3c46-9156-46c858138f03.roa (raw, json)
Hash identifier:          HX2W4niRM9RtYSeVnzihjRHEoy607D28E+Ib1XITmfE=
Subject key identifier:   AB:1D:93:E1:23:2B:C0:F3:CD:7E:FA:89:56:8F:CB:12:5E:BF:D7:D6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F4AD8E3372CC3D61B3D8F000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e982be65-3513-3c46-9156-46c858138f03.roa
Signing time:             Fri 21 Feb 2025 11:33:49 +0000
ROA not before:           Fri 21 Feb 2025 11:33:49 +0000
ROA not after:            Thu 22 May 2025 10:33:49 +0000
asID:                     30036
IP address blocks:        74.84.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:ad:8e:33:72:cc:3d:61:b3:d8:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 21 11:33:49 2025 GMT
            Not After : May 22 10:33:49 2025 GMT
        Subject: CN=93375577-8139-43d5-95b8-b9f17eaa91fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:52:10:90:5f:91:c6:79:93:da:0e:87:ab:
                    02:45:aa:71:b8:3b:ee:98:9a:9e:8f:87:f6:e5:b3:
                    0b:73:e0:19:8c:cf:12:f0:33:8f:cf:84:ac:23:01:
                    67:93:81:af:f4:bf:f7:b2:60:9a:39:d1:e9:d3:a2:
                    68:66:a4:0d:bf:a3:b2:39:d6:16:c4:e0:a1:19:b9:
                    7b:86:27:85:fe:60:50:e0:19:22:bb:fb:2b:de:37:
                    52:5c:8c:91:06:6c:1a:e5:b4:e2:17:b0:83:7d:23:
                    ce:32:24:72:c9:7d:b8:f5:53:43:c2:4c:e9:06:34:
                    29:8b:47:43:12:1a:4c:9b:c4:36:87:33:cb:8d:12:
                    75:cf:c4:f2:a6:ac:c4:0c:32:fe:2a:30:14:d4:ed:
                    2b:9b:d8:12:fc:19:f0:0f:d4:cd:82:d6:3f:77:2f:
                    ca:28:22:54:93:cf:4e:96:9f:5d:81:b5:2a:95:39:
                    3a:20:d2:54:11:42:e7:3a:d3:9e:67:64:ae:c0:ff:
                    d7:39:30:ad:26:65:f5:fe:21:08:79:46:03:23:d2:
                    9f:9e:ba:18:dd:2c:00:f2:4d:6c:9d:e2:5e:9e:8d:
                    92:5c:fd:22:c9:27:e7:66:77:c1:29:27:c1:64:92:
                    51:e5:09:40:79:7b:6a:63:c6:87:29:89:62:d8:85:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1D:93:E1:23:2B:C0:F3:CD:7E:FA:89:56:8F:CB:12:5E:BF:D7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e982be65-3513-3c46-9156-46c858138f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:50:7f:0f:26:e2:19:23:5b:4b:20:df:a5:ab:aa:9b:d9:c0:
         5c:c6:87:ba:8a:34:64:e3:41:0f:4c:7b:92:37:e5:ed:15:65:
         40:60:e0:af:97:8a:ed:69:bc:ca:b4:71:af:c7:9d:09:52:08:
         25:c2:c4:74:b6:cb:08:13:41:be:88:ea:50:a3:22:99:53:67:
         8f:ae:fd:d6:d7:6a:bd:c3:a6:13:70:e5:46:ce:07:68:ac:03:
         7c:9f:de:dd:fb:3a:01:2e:9e:29:5f:f9:bd:e8:0e:d9:cf:81:
         94:32:3b:42:9e:8c:fa:2d:32:f0:b1:d5:b5:8f:dd:b0:2a:66:
         7c:fc:8a:f0:b1:d1:d3:42:57:62:03:53:51:5f:2a:f7:f3:00:
         d0:5c:44:73:ce:86:2e:0a:37:0c:c3:dd:b4:80:7d:dc:3a:72:
         8e:c6:66:00:21:f9:21:de:72:ac:1f:78:c7:72:1d:6e:15:ac:
         7e:e9:72:99:e9:34:9f:e5:2f:ca:3a:a3:d3:72:13:31:36:54:
         67:5f:63:3e:ee:21:e9:69:41:25:b1:0f:9c:be:d6:2a:7d:86:
         02:35:f4:19:b3:85:8a:44:4c:e8:99:ab:13:eb:89:ab:f6:96:
         0b:b4:73:e6:5a:bf:cd:41:11:52:1f:c0:0b:73:91:12:78:c0:
         5c:f5:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:15:42 2025 by rpki-client