Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
File:                     cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa (raw, json)
Hash identifier:          7xaRXTJ2nBga7zbcNcK+iczH9rF1uzNGjUXOlTxRipg=
Subject key identifier:   9B:B3:2D:15:58:99:C4:85:9C:CC:F1:26:EE:AA:0D:8D:A0:57:17:AC
Certificate issuer:       /CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
Certificate serial:       010D0C9F43285849350EA28CD92DE9A754FCC260
Authority key identifier: 50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     62759
IP address blocks:        74.119.124.0/22 maxlen: 22
                          162.245.176.0/21 maxlen: 21
                          163.123.240.0/22 maxlen: 22
                          199.255.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a2:8c:d9:2d:e9:a7:54:fc:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=a1851208-750e-435f-ae22-4f50c6c16db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:1d:88:6f:06:ba:cf:7d:96:8d:ef:34:06:
                    72:bf:25:12:06:ab:ae:56:2e:b2:21:2e:bb:8c:26:
                    66:0a:ce:f7:49:39:b9:56:90:3f:6c:10:8e:a6:46:
                    2c:fa:75:b5:a7:d5:e4:c0:78:5f:1b:78:93:83:7c:
                    13:ab:1f:82:9d:00:e5:f4:39:e1:d9:9c:ca:c2:d5:
                    d9:5e:8d:8a:f7:de:94:81:11:13:c2:91:54:ab:ac:
                    19:eb:ac:07:fe:4d:26:78:f2:13:f2:9c:fa:46:c0:
                    98:24:f5:c8:52:e8:29:88:57:92:8a:5b:f1:cd:e2:
                    3e:99:9e:de:e6:7a:5f:13:63:a4:bd:e0:18:e8:e4:
                    dc:fd:bb:58:b2:fb:0a:59:27:ee:c3:25:bd:e3:41:
                    a0:38:33:34:e0:a1:84:ab:19:4a:b4:c0:57:e5:fb:
                    c7:c6:64:c1:ec:b4:b6:5e:fe:7c:2b:5a:6b:c4:23:
                    c7:c8:5d:9e:96:56:dc:a4:89:f7:c3:b4:dc:c0:c8:
                    db:24:18:5b:44:d0:ed:63:ca:36:2a:ae:a6:f9:56:
                    bd:15:67:cd:db:9f:c1:87:f6:34:33:df:57:e4:d0:
                    5a:73:3f:15:06:97:5c:93:75:6b:8b:49:b8:df:31:
                    da:f5:9f:35:b0:94:c1:a4:8b:7a:d3:7e:c2:10:63:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B3:2D:15:58:99:C4:85:9C:CC:F1:26:EE:AA:0D:8D:A0:57:17:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl

            X509v3 Authority Key Identifier:
                keyid:50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.124.0/22
                  162.245.176.0/21
                  163.123.240.0/22
                  199.255.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:29:f5:ef:35:75:76:23:f8:37:78:77:74:44:93:ab:51:00:
         bb:92:00:b2:92:00:9f:f6:0d:0b:e0:66:91:f2:7b:77:28:1a:
         68:15:c3:40:55:71:42:48:05:44:b4:c1:25:ab:95:eb:ec:a2:
         4b:13:22:de:cc:60:56:52:eb:bb:b6:c6:d3:24:51:88:3d:bb:
         38:71:ba:98:3a:f5:51:7d:32:d7:52:c2:5f:fe:ad:00:7d:33:
         30:4e:8d:34:76:4f:c5:20:ec:dd:80:73:ca:9e:1e:4c:4a:83:
         3c:7d:b9:10:4d:c0:53:48:4d:ad:75:38:25:1e:e4:a9:5c:2b:
         6e:ee:5e:21:fe:20:f2:24:be:cb:5d:d1:2e:87:3d:a9:e9:dc:
         fe:1d:37:12:de:72:d2:a6:16:48:09:18:ea:35:0b:87:d9:b5:
         40:e6:3c:c7:4a:4d:92:0b:2d:89:05:3a:80:a5:50:44:0a:59:
         42:a2:66:f2:3a:00:81:b5:c7:c5:8e:5b:c3:52:af:d3:cd:27:
         c8:f1:8d:4e:e4:ff:03:e5:7b:e4:d0:92:19:55:e6:12:b6:f9:
         af:93:de:80:ed:10:ee:bb:65:ec:6b:1a:6c:e3:16:52:ac:d4:
         97:c3:11:87:63:82:03:53:74:15:23:5c:95:68:cf:35:3e:24:
         f5:64:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:45 2025 by rpki-client