Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
File:                     2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa (raw, json)
Hash identifier:          WF/ksnm5lJjkkjMJc/qjDv1EYjVjL5b4sXZSIaNkUfk=
Subject key identifier:   E1:20:7D:70:48:3B:77:06:FA:60:FA:1E:C3:6E:EF:BB:67:86:E5:5D
Certificate issuer:       /CN=38a6de71-55e9-453c-8cf4-1a205aef0191
Certificate serial:       010D0C9F4328584A6AF08B9B324E0131D7729F80
Authority key identifier: 1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     40772
IP address blocks:        74.116.44.0/24 maxlen: 24
                          74.116.45.0/24 maxlen: 24
                          74.116.46.0/24 maxlen: 24
                          74.116.47.0/24 maxlen: 24
                          104.36.104.0/24 maxlen: 24
                          104.36.105.0/24 maxlen: 24
                          104.36.106.0/24 maxlen: 24
                          104.36.107.0/24 maxlen: 24
                          208.89.36.0/24 maxlen: 24
                          208.89.37.0/24 maxlen: 24
                          208.89.38.0/24 maxlen: 24
                          208.89.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8b:9b:32:4e:01:31:d7:72:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a6de71-55e9-453c-8cf4-1a205aef0191
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=f99e7c8c-cff3-4298-bd2b-9b95cfe59609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:1a:08:b3:86:4d:13:bd:62:f1:bd:12:55:
                    64:01:6a:85:b6:3a:42:68:8b:d7:7f:9a:bd:cd:57:
                    a0:e1:c7:2f:59:97:21:76:7d:03:e6:b7:16:00:33:
                    bc:45:9c:45:ee:15:87:69:a0:78:5d:8c:6b:ce:80:
                    9d:71:f8:ba:68:be:7d:5d:75:cf:b1:86:ee:60:17:
                    32:98:05:ce:db:58:4f:5f:11:e1:50:7f:2f:80:47:
                    89:2c:85:4e:68:d0:e0:2f:ef:9c:5b:d7:9d:fc:31:
                    16:f1:3b:9b:b7:33:cf:c3:b3:d0:dc:9b:62:5c:b5:
                    ff:0c:2a:1a:09:81:4b:4a:3d:21:15:b2:ce:07:f2:
                    7a:23:08:6f:f1:c3:8e:b5:8f:b7:de:91:c8:38:93:
                    9f:79:ab:4a:18:48:5b:25:df:dc:77:cd:ea:be:b8:
                    e6:02:95:07:47:a3:6c:3b:13:37:5c:83:b8:70:e0:
                    b3:56:25:df:48:d8:2c:c4:c8:2e:3a:7a:7e:52:dd:
                    f4:e7:ef:9c:08:b4:ce:e9:ad:21:3e:af:75:86:28:
                    38:33:90:62:6c:aa:0c:f2:5c:63:f3:71:5f:2f:92:
                    4e:8d:07:03:33:fa:ab:a7:2f:d9:48:97:74:f1:68:
                    e0:a3:f1:41:56:6f:88:31:8b:ac:31:ae:63:cb:31:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:20:7D:70:48:3B:77:06:FA:60:FA:1E:C3:6E:EF:BB:67:86:E5:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl

            X509v3 Authority Key Identifier:
                keyid:1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.44.0/22
                  104.36.104.0/22
                  208.89.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:1f:e8:c1:51:b6:04:94:97:83:63:15:3d:78:3a:30:76:
         e2:83:b0:e9:32:3c:9e:e4:16:80:e3:d4:8d:46:fd:5a:34:61:
         58:de:dd:68:93:a8:03:86:18:8b:35:23:26:19:c4:3e:d2:1d:
         6b:40:2c:25:7e:8c:08:12:54:2f:2d:b5:51:b5:b4:74:72:d9:
         1a:3b:0f:f0:04:84:ee:ba:c8:3d:4f:7a:9c:e0:bb:38:63:25:
         60:e4:44:17:7f:e0:30:62:91:cb:88:96:27:ad:3d:a5:6b:01:
         0d:0e:96:e0:2c:1b:49:43:e6:b0:09:8d:81:17:d9:e0:c5:f5:
         c5:7f:65:13:8c:dd:ef:75:fe:08:1a:27:9e:bb:98:dd:92:3e:
         de:f7:f5:78:91:c9:91:05:7c:73:70:03:eb:7f:c7:f7:0f:e4:
         9c:05:9c:e1:3d:44:53:bf:70:b0:fe:0c:98:9d:50:8e:3f:6f:
         47:fd:45:1b:23:fd:2e:f2:85:58:db:4e:57:59:6a:1c:7c:bb:
         3e:ec:67:3e:0f:59:7f:09:6e:05:c3:94:b2:87:25:1b:af:b9:
         60:db:f5:c2:e8:21:49:70:df:f6:8d:d6:29:57:00:50:f2:29:
         d2:6a:83:57:5f:b7:a3:fd:31:51:21:a6:c5:0e:22:cb:4d:8b:
         fb:18:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:47:02 2025 by rpki-client