Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa
File:                     93929419-5010-3d66-bae5-2cde7ec1457c.roa (raw, json)
Hash identifier:          V33gFa7DDPYv1eqsif9vqx7Zxim3s1KePRlJd61gH54=
Subject key identifier:   C8:B1:6C:0D:46:6C:8D:70:FB:07:2A:9D:FF:01:2D:37:6F:C2:F5:7C
Certificate issuer:       /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
Certificate serial:       010D0C9F432858491246A74DC7D9C553518DB300
Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     53769
IP address blocks:        74.116.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a7:4d:c7:d9:c5:53:51:8d:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=b455de86-56c6-4ff1-b8c2-75f1b437cf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:a0:07:ed:a1:b9:8a:b7:21:80:43:b8:ef:
                    21:b2:15:97:01:54:ca:74:72:dd:3c:1f:e4:be:c4:
                    ee:7b:d6:1d:75:80:4d:03:fe:1d:60:0b:66:f2:ad:
                    c9:61:53:e1:ab:e3:f0:a4:9a:32:d6:0a:cb:ac:8e:
                    f7:44:9f:ea:10:8d:a6:9d:aa:e8:2d:06:fe:f3:5c:
                    c0:23:72:05:9c:6e:ca:f6:57:0a:2b:88:f4:88:43:
                    30:c5:29:b9:b1:a0:9a:02:25:af:db:31:58:be:db:
                    ff:98:e5:9d:f9:f7:d5:d4:12:17:ce:9c:dc:75:77:
                    1f:dc:77:89:ce:20:06:9b:a3:cf:8d:2a:e7:72:14:
                    a4:45:7b:b5:b7:22:88:dc:ef:7a:00:9a:72:cb:a9:
                    bf:45:20:83:35:6f:33:06:83:c0:45:c3:41:76:67:
                    24:d5:e4:b2:a7:b5:41:0a:3c:6e:cf:49:dd:c6:97:
                    83:f5:d6:d1:fc:ea:bc:71:91:19:46:d2:93:8d:bc:
                    94:b4:8d:45:5c:54:73:0e:e5:59:f8:e8:ca:ce:f9:
                    82:99:6b:8e:5f:67:46:45:d7:77:81:1c:48:83:52:
                    22:70:71:ea:5f:d2:51:80:4c:06:a7:45:33:64:82:
                    b5:72:a4:a3:f5:57:80:fa:cf:6c:ea:f0:8d:02:c4:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:6C:0D:46:6C:8D:70:FB:07:2A:9D:FF:01:2D:37:6F:C2:F5:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2a:91:68:eb:71:8a:3a:31:03:1c:54:e4:6b:86:8d:fa:d1:
         77:dd:2a:a7:ba:a4:15:fc:7b:0e:60:4f:7f:5e:a8:69:a3:ce:
         59:83:50:e3:7b:e2:d2:9e:e2:51:d3:8d:90:98:58:66:dd:b3:
         01:20:82:db:87:10:c5:00:d3:33:64:fd:1a:1d:f5:5f:ad:ef:
         a4:80:dc:86:d7:78:61:97:7e:be:9e:49:aa:ca:dc:fe:f3:59:
         c8:b2:61:08:7e:17:6d:47:46:5f:f6:80:8d:5f:ca:7a:22:03:
         ff:cf:a4:44:0f:a4:3c:11:d0:3e:10:7e:42:e7:a6:4d:43:c1:
         55:61:e7:af:ff:6d:e4:a0:18:c0:22:56:ce:c0:45:86:d2:a6:
         85:03:81:22:4e:60:1f:6d:df:ee:e2:b7:03:5f:7e:2f:15:43:
         02:47:b4:45:96:ad:4f:85:8e:c6:53:19:59:44:9e:40:e6:21:
         bf:35:75:25:8b:e8:f8:cb:07:e4:b6:b3:86:1a:2f:8d:c9:10:
         91:9b:59:b0:f8:2d:a8:23:25:3e:ba:e2:28:a3:1a:4a:60:84:
         e4:cd:80:95:d2:ad:21:3a:4b:b1:66:bd:19:36:b9:ba:1e:2e:
         6e:dd:93:46:c3:83:47:bd:05:e5:b1:91:e6:b3:5c:a3:98:e7:
         a7:dd:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:53 2025 by rpki-client