Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
File:                     3bca850c-a082-395e-b6b3-a870cbd395cb.roa (raw, json)
Hash identifier:          0XSTKM6tTR4f4js9NTQIyn48vehlvTX058pDBwE4yWA=
Subject key identifier:   42:50:FA:6D:21:7D:C4:27:C0:8F:74:D3:3F:5E:F4:F8:96:DA:57:85
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285848EC967F1D17CD697F640EA9C0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     42
IP address blocks:        67.22.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:7f:1d:17:cd:69:7f:64:0e:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=8868dd27-8e7a-40a1-b5db-8141728e4b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:c7:74:94:7e:44:e7:3f:64:a5:4a:bf:62:
                    90:f4:34:b6:a9:22:ad:38:98:68:50:22:33:58:d7:
                    ee:67:86:0d:01:4a:26:f2:c2:88:31:da:29:21:94:
                    53:7e:c0:b6:c5:aa:c5:98:08:f6:dc:49:fd:92:a0:
                    e2:8b:87:b4:d8:8e:1b:3b:20:c1:0d:26:85:ef:5b:
                    c7:53:89:e1:6f:a9:89:be:fd:c9:50:ae:63:5f:b7:
                    09:28:b8:18:71:49:31:ba:f0:3b:64:de:b0:14:ba:
                    8b:45:5f:b1:30:e3:e3:33:9b:0f:19:5c:d0:24:85:
                    d9:a0:aa:fa:22:3d:35:0c:da:cb:35:b8:73:81:3c:
                    bd:e7:e9:88:4b:16:16:72:8f:a4:c1:97:91:c0:be:
                    a4:58:70:d2:1c:a4:ef:52:1a:2c:97:fa:41:70:fb:
                    20:71:54:87:b4:a7:6d:93:27:9a:05:06:4c:7e:7e:
                    ba:fe:1f:27:0d:ec:eb:e2:e9:fa:66:da:df:29:33:
                    b7:f2:e6:48:a1:b7:0a:a5:c4:10:ac:66:c6:c9:81:
                    f3:b5:ff:c3:48:00:9b:a8:37:06:49:b8:11:a4:ce:
                    76:e0:3a:63:cb:a0:02:c6:41:c7:6d:5d:a3:a1:1e:
                    c6:b7:a2:21:75:a0:73:4f:03:3c:62:83:80:39:55:
                    de:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:50:FA:6D:21:7D:C4:27:C0:8F:74:D3:3F:5E:F4:F8:96:DA:57:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:10:6f:c7:e7:fd:c5:c0:e4:d8:d3:39:8a:28:64:0e:6c:
         50:10:59:b3:36:45:40:1c:74:e9:ca:3c:e0:51:21:cc:1b:5c:
         53:b0:9b:6e:9d:b9:ab:8d:cc:76:f4:f6:44:2a:8f:cf:29:84:
         e4:c1:8c:d0:45:f9:0f:79:e4:41:95:f9:dd:22:88:6b:c5:a2:
         f0:ce:d6:42:c2:a2:60:76:c7:e8:f2:fa:b1:c7:ee:31:34:3b:
         7b:52:3f:84:3e:0e:5d:ef:09:9a:e1:bb:8d:fa:40:d4:3a:8f:
         3a:e5:e8:5e:93:34:38:33:6b:a8:bb:62:0d:a4:14:fa:4f:ff:
         31:81:37:96:c1:94:f3:38:80:c4:d2:e8:3d:86:40:62:1e:f9:
         df:07:56:c8:34:47:18:c9:a9:97:80:5f:0e:c9:3d:09:8a:a1:
         eb:89:b0:cc:bb:79:5f:0d:97:be:d2:65:ca:f5:bc:05:77:2d:
         8d:ef:90:58:d8:d8:a7:2f:9e:39:d0:fe:2a:b3:60:22:79:23:
         85:53:20:6a:c6:3f:19:0e:ef:7e:a7:d0:96:d6:09:46:44:6f:
         d6:7c:1b:2b:45:f0:02:ee:37:4c:6a:e1:d3:cc:59:78:92:35:
         44:50:3e:e0:ce:97:e1:d0:30:32:bc:e0:4c:d8:11:6c:cb:ad:
         9b:46:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:02:49 2025 by rpki-client