Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af424e5a-fe55-37bc-b4a0-701afe584b15.roa
File:                     af424e5a-fe55-37bc-b4a0-701afe584b15.roa (raw, json)
Hash identifier:          L9AZDlJoAr+5l2/28KMU7RYOtcmjZiTiAs7S6iOZJNA=
Subject key identifier:   37:E4:56:10:D8:AF:19:48:F3:E5:DD:8F:0F:D4:85:3E:43:6F:D2:BC
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849E22517E731A1C49311C5A500
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af424e5a-fe55-37bc-b4a0-701afe584b15.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     715
IP address blocks:        64.78.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:17:e7:31:a1:c4:93:11:c5:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=8f10a5b5-fa5e-4f1b-9dec-c26d46941802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:59:2e:49:96:b7:90:4e:4d:8d:c5:84:70:
                    1a:0a:9a:2d:5b:39:ec:65:83:4e:d9:6f:a9:05:01:
                    c4:ea:b2:5c:11:ef:cf:a6:f4:b3:82:64:6b:f7:e5:
                    52:03:a0:0c:ce:c9:9d:b1:c8:10:4e:91:67:f9:ab:
                    f7:4a:96:e1:cc:bf:75:98:ea:db:46:b7:9d:9c:8f:
                    21:b0:f2:f5:3f:84:d6:33:4e:fa:fc:28:8b:b4:bd:
                    2c:51:19:db:d2:14:84:96:fc:75:9f:72:2e:15:a3:
                    4e:f1:68:24:01:f2:f8:8d:bb:98:64:a8:0f:6f:41:
                    97:12:d9:5a:bf:ad:b6:d5:2d:c1:b3:8c:dc:43:c2:
                    5a:8d:46:99:51:0a:53:97:23:fb:7e:1e:09:85:3a:
                    88:93:69:28:46:7a:4e:78:29:40:3d:d8:b6:53:bf:
                    e3:9e:01:59:59:4a:45:2b:46:f7:16:23:4c:b7:cf:
                    cc:49:3d:2c:cf:1c:9b:2b:3a:11:07:3a:e0:6c:7e:
                    a0:43:20:31:50:15:c4:c5:0f:09:e3:b9:85:14:6a:
                    b3:99:fa:cf:90:da:9e:5e:7e:ad:2b:e6:67:00:1b:
                    a1:96:74:33:d9:88:67:d8:ac:0e:4f:a4:5f:86:b0:
                    19:89:22:19:18:ad:eb:5f:d0:b8:17:53:e3:f8:0a:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:56:10:D8:AF:19:48:F3:E5:DD:8F:0F:D4:85:3E:43:6F:D2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af424e5a-fe55-37bc-b4a0-701afe584b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.78.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:24:31:65:92:29:8e:97:41:b1:2a:c5:4d:16:1d:35:03:ab:
         22:90:32:da:30:5f:ee:9f:00:f0:81:ce:5c:d6:61:ab:03:61:
         d5:2a:52:58:99:70:22:6c:a3:13:67:18:ce:8f:93:bf:de:bf:
         93:42:8d:85:ae:dd:fe:9d:a4:3c:29:0a:38:82:a7:2c:ea:fc:
         e0:76:e2:3b:05:f7:5c:a0:38:74:75:89:65:b2:25:62:9c:5d:
         a5:99:0d:e3:df:d9:a8:2f:74:1f:d8:6c:96:dc:63:fc:49:28:
         0d:8d:f7:4d:89:9a:7c:9d:ec:a8:72:48:2b:96:50:03:90:ed:
         4e:6f:c6:b0:5b:d9:22:64:ba:b4:f8:82:7b:85:b7:ab:4b:29:
         f4:5a:16:6f:96:a4:35:2a:07:04:b6:cb:94:5d:df:a8:d7:77:
         b4:47:4d:81:45:e9:9a:ef:6d:a2:9e:1c:1a:d4:c4:46:f8:91:
         7b:fd:ab:53:f3:bd:f4:85:f0:83:71:4a:51:60:c9:e4:b4:4f:
         9f:9f:5b:ee:36:9a:0a:42:a1:0c:6d:84:3d:03:2a:f3:5d:e4:
         d2:38:48:9b:59:cd:e4:33:81:47:53:81:33:b7:56:1c:fa:1c:
         21:63:89:43:3d:e7:b5:ac:4b:7d:b5:be:73:ee:08:6e:0f:50:
         14:8b:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:55:06 2025 by rpki-client