Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/288b5933-9611-3f02-8e94-03164bbd60ce.roa
File:                     288b5933-9611-3f02-8e94-03164bbd60ce.roa (raw, json)
Hash identifier:          0vaiZDxrMB462Jyu64OXtzVhQkoW9S09THxhOya6Zj0=
Subject key identifier:   DE:45:E8:EB:2D:6B:A1:C1:39:16:B4:19:43:CF:0A:41:B3:9F:29:1A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848E9CBD7F3E84E19C7F66A9040
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/288b5933-9611-3f02-8e94-03164bbd60ce.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        74.221.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:d7:f3:e8:4e:19:c7:f6:6a:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=93a3f8bc-f6ae-4e42-aae3-1dd7fcad88d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:7b:81:f9:57:71:12:3b:5c:62:e0:ae:b5:
                    8c:2a:03:a8:a9:cf:59:39:2e:b4:bf:7d:da:dd:03:
                    f4:cc:ce:fd:76:07:29:c0:cd:63:35:b1:7f:11:b4:
                    d2:35:b1:e7:df:d2:12:ca:39:03:8b:c4:1b:53:57:
                    37:f8:5b:f2:d7:8e:2d:e7:5b:7b:29:1d:09:bf:06:
                    1e:92:41:23:62:e4:e3:e2:8c:82:06:17:12:59:f3:
                    07:05:91:4b:d5:74:07:a1:88:a9:e3:d5:32:e3:ca:
                    88:f7:4b:73:9e:4a:39:1d:a5:3a:4d:a0:c9:4f:b7:
                    f9:2e:81:da:b4:f1:9d:67:36:e5:41:cf:92:ff:6c:
                    53:76:87:6a:c9:ea:f0:0a:90:74:43:6c:cd:3e:90:
                    40:75:ad:ea:30:ec:43:8c:3d:eb:20:0e:52:9d:8b:
                    40:8c:81:3d:b2:e8:e2:f1:2a:9e:10:bc:12:63:a5:
                    eb:ba:d5:96:e1:1d:af:96:97:97:48:53:96:c8:f1:
                    b4:46:fb:7c:6d:78:e9:1b:cb:a7:06:11:3c:9d:dd:
                    39:0a:b3:83:1e:45:60:04:7f:a8:1a:c2:08:c2:4e:
                    3b:80:73:02:8b:d7:03:c1:c0:4a:93:87:f6:14:4b:
                    da:b2:ba:4e:bf:fd:05:c2:a5:d9:a0:16:5f:83:d6:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:45:E8:EB:2D:6B:A1:C1:39:16:B4:19:43:CF:0A:41:B3:9F:29:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/288b5933-9611-3f02-8e94-03164bbd60ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:ea:84:ca:30:bc:f5:e8:0e:7f:1f:8e:a0:eb:82:d7:64:
         b6:5d:8c:21:24:9f:71:61:63:92:c4:09:be:49:37:df:89:ef:
         0b:4d:6e:50:61:81:21:c6:d6:83:66:00:ea:9f:3a:3f:24:bd:
         54:d1:56:01:0a:2c:40:68:21:9a:f7:6f:27:de:27:e7:b1:72:
         58:06:a5:36:ef:67:43:fd:b2:31:e7:9f:dc:18:b9:48:52:f0:
         8b:9a:59:96:63:21:53:14:f9:b8:bf:f2:57:18:fc:ce:04:76:
         92:36:91:77:d5:26:d6:2e:c6:fd:2e:c8:94:77:47:b4:11:cc:
         11:9f:98:db:ed:92:90:44:ec:3e:03:66:4f:9b:55:d8:0a:8f:
         31:26:ec:5c:d3:b2:2c:b6:47:52:4b:fc:4b:fa:21:8c:4f:8f:
         d4:92:b4:95:e7:73:7c:10:56:98:1b:ef:ba:6b:59:52:61:1a:
         f8:c4:13:1d:35:7f:2d:26:45:00:20:a5:d7:49:3c:0e:9f:5c:
         84:cc:f6:7b:de:64:33:61:65:42:06:19:21:5b:16:fc:49:ac:
         c7:a1:33:83:76:84:9d:67:9f:f1:a0:63:be:1a:37:4c:f1:be:
         04:84:a0:f6:d4:9f:2f:1b:f9:58:5d:f9:11:c7:15:0e:43:3a:
         a7:91:1b:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9fz6E4Zx/ZqkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
OTNhM2Y4YmMtZjZhZS00ZTQyLWFhZTMtMWRkN2ZjYWQ4OGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZR7gflXcRI7XGLgrrWMKgOoqc9ZOS60v33a
3QP0zM79dgcpwM1jNbF/EbTSNbHn39ISyjkDi8QbU1c3+Fvy144t51t7KR0JvwYe
kkEjYuTj4oyCBhcSWfMHBZFL1XQHoYip49Uy48qI90tznko5HaU6TaDJT7f5LoHa
tPGdZzblQc+S/2xTdodqyerwCpB0Q2zNPpBAda3qMOxDjD3rIA5SnYtAjIE9suji
8SqeELwSY6XrutWW4R2vlpeXSFOWyPG0Rvt8bXjpG8unBhE8nd05CrODHkVgBH+o
GsIIwk47gHMCi9cDwcBKk4f2FEvasrpOv/0FwqXZoBZfg9blVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5F6Osta6HBORa0GUPPCkGznykaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMjg4YjU5MzMtOTYxMS0z
ZjAyLThlOTQtMDMxNjRiYmQ2MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAG6oTKMLz16A5/H46g64LXZLZdjCEkn3FhY5LECb5JN9+J7wtNblBh
gSHG1oNmAOqfOj8kvVTRVgEKLEBoIZr3byfeJ+exclgGpTbvZ0P9sjHnn9wYuUhS
8IuaWZZjIVMU+bi/8lcY/M4EdpI2kXfVJtYuxv0uyJR3R7QRzBGfmNvtkpBE7D4D
Zk+bVdgKjzEm7FzTsiy2R1JL/Ev6IYxPj9SStJXnc3wQVpgb77prWVJhGvjEEx01
fy0mRQAgpddJPA6fXITM9nveZDNhZUIGGSFbFvxJrMehM4N2hJ1nn/GgY74aN0zx
vgSEoPbUny8b+Vhd+RHHFQ5DOqeRG/Q=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:48 2025 by rpki-client