Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/9adfee51-ef16-3c8f-b5c0-0ac8a28d32f0.roa
File:                     9adfee51-ef16-3c8f-b5c0-0ac8a28d32f0.roa (raw, json)
Hash identifier:          DxcPefYpiig6gDDoKXi2gyQHAK6f+yRaFPHttdLBKQQ=
Subject key identifier:   14:6B:A6:A1:F2:ED:4E:4A:1D:D1:DA:29:C8:CF:74:9D:BA:F7:30:BC
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584965E973250D7DAF86333F1BC0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/9adfee51-ef16-3c8f-b5c0-0ac8a28d32f0.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     6181
IP address blocks:        74.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:73:25:0d:7d:af:86:33:3f:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=b5414918-e98d-49fb-83a9-4d51ddfac150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:67:1d:fb:18:54:b7:cd:f2:c1:fc:4d:c3:
                    2e:e6:31:82:7f:6a:8a:4b:72:d7:e6:5a:ba:67:79:
                    64:1d:0a:a7:5b:1b:34:bf:9d:e8:fb:8c:58:ae:dd:
                    68:4b:32:5d:43:66:16:9b:6c:19:dc:b9:ab:be:ee:
                    bb:6b:5a:63:11:1e:59:f0:53:06:78:d9:d7:b7:60:
                    33:7f:be:a9:72:b3:25:e1:ba:db:c8:b3:42:3d:b8:
                    65:58:b1:73:2e:c3:76:50:63:93:ad:68:7c:07:be:
                    61:b3:7f:13:7c:a0:74:be:08:fa:62:ba:5f:be:13:
                    60:e0:1d:cc:4a:47:df:7a:80:f2:0a:33:3f:34:77:
                    33:75:c9:8f:85:5d:fa:10:6b:cd:95:e9:3c:0b:a6:
                    4d:a3:f2:44:b5:54:aa:a3:c6:65:ba:7f:13:ba:c2:
                    79:bc:ef:54:a6:7d:79:17:98:48:08:fe:7e:ee:bc:
                    15:6f:73:c5:30:61:90:76:bf:2b:bb:67:3d:ff:c1:
                    46:61:88:ed:a8:62:e3:32:a8:34:68:93:98:ea:b5:
                    01:d6:5a:e9:0b:76:62:b3:23:00:44:27:4f:e8:25:
                    37:71:33:73:70:70:79:98:74:c7:d5:ba:84:64:2d:
                    ab:1f:47:b4:f8:69:d6:be:02:12:19:6c:11:89:eb:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6B:A6:A1:F2:ED:4E:4A:1D:D1:DA:29:C8:CF:74:9D:BA:F7:30:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/9adfee51-ef16-3c8f-b5c0-0ac8a28d32f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:3e:91:d8:56:55:9a:a5:45:bc:b8:6c:4e:16:b3:91:f0:
         53:9e:f7:ef:b5:f7:52:ae:8c:66:1c:71:60:b0:e3:a8:83:3e:
         1b:97:49:9e:a6:f2:e2:30:9e:00:35:ca:96:c4:5c:cb:76:10:
         fc:3c:b7:77:8e:f1:f8:8b:f2:36:f6:a5:4c:34:7b:9b:ee:c4:
         e0:eb:81:b8:53:05:58:39:80:fb:47:58:8b:6e:78:b6:29:f1:
         a1:f5:cb:b0:f0:69:fd:20:b1:14:ce:de:36:ce:bc:32:72:32:
         97:ca:97:20:64:4f:8a:4a:d2:e6:7e:da:ca:cc:64:10:1f:ad:
         eb:d0:90:4a:9c:a1:ed:ba:fe:a4:c4:2b:3b:16:3e:f4:e0:3a:
         0a:d7:7a:77:ec:24:18:85:25:f9:9d:30:1a:82:ca:75:3a:ef:
         1b:7d:08:84:01:53:48:98:af:b3:f0:37:d8:e6:0f:02:0f:0e:
         e6:c9:65:af:a4:30:0b:b8:9d:a0:c6:0c:86:ba:76:c2:08:70:
         9b:1e:25:88:0a:9c:8d:4e:d4:7b:2a:f6:62:a4:a8:a9:1a:16:
         3e:b8:67:1a:d6:ff:ea:ec:42:e2:c7:e8:fc:7f:28:10:a4:27:
         24:4e:89:30:e4:ce:48:7b:45:e8:66:80:a9:55:30:54:f6:9c:
         ba:0b:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:24 2025 by rpki-client