Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
File:                     b2961625-afdd-3c57-ae0c-90c9e114d526.roa (raw, json)
Hash identifier:          7iGQvUSItcjbUJ8zRZiEtD20+ZKrYIRZbsOTL4iezro=
Subject key identifier:   11:F5:4D:58:94:DA:5E:54:9F:0D:A7:12:DC:B8:56:80:46:D7:6C:52
Certificate issuer:       /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial:       010D0C9F43285848EF613BEEE116FC665B273480
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        74.117.216.0/21 maxlen: 21
                          74.117.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3b:ee:e1:16:fc:66:5b:27:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f59fb18d-1f31-41f3-a695-297dd96834d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:00:91:fa:19:88:03:ef:a1:d9:67:bd:ea:
                    91:b5:ac:e4:cf:8a:83:4c:80:4d:5f:68:91:4f:23:
                    2f:6b:d3:20:d3:b5:11:4a:83:bd:29:97:2e:93:e4:
                    d7:80:c3:03:35:ab:9d:57:9e:25:b9:e9:7b:a1:99:
                    b5:c5:ab:de:74:b6:f5:9e:34:97:7a:cf:28:6b:52:
                    bb:1b:c5:29:d5:01:58:00:ac:8a:2e:bb:76:6e:29:
                    34:d9:51:54:b2:db:e7:24:28:f9:c8:f2:2a:89:47:
                    3a:83:01:1c:e9:a2:72:82:76:67:3b:7f:d7:32:5b:
                    89:d4:b7:25:6d:4e:a3:bb:22:4c:7b:fa:70:23:54:
                    30:c9:f6:86:52:41:99:0d:ef:15:57:32:88:d5:9d:
                    9b:88:22:a3:7a:44:58:66:4b:36:49:46:de:21:16:
                    7c:44:89:2b:fb:50:31:ca:a9:94:1d:b6:44:03:3e:
                    d4:72:40:93:9e:e6:25:ae:0f:09:5c:e9:25:bd:c1:
                    de:da:da:16:a4:0f:3b:c6:74:47:1f:70:f2:a4:4c:
                    8d:7b:fd:71:4c:76:d7:07:c2:28:43:59:4e:d4:58:
                    8d:c2:a8:04:74:d5:b9:e6:a9:f5:95:f7:86:ee:b6:
                    29:a2:8c:84:d8:1e:08:a9:f2:31:21:29:51:42:f2:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:4D:58:94:DA:5E:54:9F:0D:A7:12:DC:B8:56:80:46:D7:6C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl

            X509v3 Authority Key Identifier:
                keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:33:67:ae:5d:4a:f3:94:00:4f:21:3e:ba:09:19:f7:ba:b1:
         07:8b:cd:0f:b0:c5:05:26:8b:1f:d7:c7:8e:42:aa:7e:ad:0e:
         8e:43:fc:38:45:9e:3c:41:6b:a7:d8:a4:d0:20:11:89:ad:24:
         a9:fc:3d:31:1e:f7:9a:14:33:b8:b2:e9:1f:c2:b3:51:d1:c6:
         03:96:b2:d6:77:df:fb:8c:eb:3b:7d:95:3d:05:1a:a8:11:79:
         a9:e2:0a:0b:72:24:21:cb:96:2f:d0:81:d6:f5:eb:4b:5a:e5:
         85:e5:ae:99:7a:86:b1:24:bb:15:e5:81:ac:09:48:36:f7:98:
         ba:2f:98:e0:de:81:2d:4d:a7:d9:41:77:e2:18:7a:74:4b:d9:
         1f:64:50:30:e8:a2:06:76:49:ea:8f:8d:36:11:78:0d:30:bb:
         0e:53:f7:a6:ab:92:3a:38:af:96:a3:b3:9f:2b:db:52:b8:af:
         a2:cd:4e:1e:22:de:00:79:32:f9:66:a3:6d:0d:17:d7:bc:8f:
         b8:c5:b4:db:44:3f:f7:a6:34:61:5c:9b:c3:e2:d3:f5:e0:28:
         91:24:8a:ff:e9:df:3d:a9:28:24:b4:9b:b7:95:80:d9:34:ad:
         e1:18:8e:12:b7:fd:f1:61:36:81:14:8b:0d:f4:c7:2c:b8:9d:
         08:06:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:50 2025 by rpki-client