Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
File:                     376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa (raw, json)
Hash identifier:          /yVuv8/i6/oocSvJhaZ41va6BxiTRs8grDtwsxvBQ04=
Subject key identifier:   9B:2F:68:FA:44:25:FE:C9:01:49:37:ED:C5:00:02:72:75:21:F4:27
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F4328584A5E60622533638E12AB593500
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     46474
IP address blocks:        74.205.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:62:25:33:63:8e:12:ab:59:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=0f7f2f61-2ff7-40a8-842c-8990f5820b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:d6:de:86:43:74:39:65:a1:69:69:96:39:
                    81:10:1d:80:65:8f:d5:48:97:ae:bf:7a:05:de:1c:
                    7b:de:a5:9b:b1:20:17:f0:56:97:31:af:37:00:2b:
                    2c:4c:5d:7c:2d:1b:30:0c:f4:9b:b8:43:35:1f:7e:
                    9d:db:a8:d4:9b:4e:3a:6f:4a:3c:83:60:aa:21:15:
                    18:ef:32:eb:3e:e6:05:d6:d2:50:3e:fc:f3:4d:fd:
                    0c:d3:0a:4c:5f:7e:02:36:9c:09:e7:55:ce:38:57:
                    7d:92:bb:a4:e7:a6:04:42:6b:fc:54:fc:e2:16:f5:
                    10:a8:26:39:b1:75:d5:f8:c6:36:f4:fa:e5:48:f3:
                    1d:1d:fa:3a:4b:0b:ba:1c:bf:b7:7e:ff:c1:3f:08:
                    63:49:6c:d8:52:32:74:ee:c9:48:d4:84:fc:0c:ed:
                    e8:02:fe:23:4e:11:cf:47:87:c3:2a:ae:a8:1d:c5:
                    35:fd:5f:bb:cd:f7:ed:59:91:33:ac:00:31:93:95:
                    aa:28:52:8b:53:07:06:ab:d4:cd:ec:a0:05:bd:6a:
                    56:75:50:46:43:4b:aa:55:08:e3:c8:87:86:bd:55:
                    66:a3:8c:38:70:69:ff:6b:2b:6b:2e:26:d4:8a:a1:
                    0a:b2:d1:70:19:09:60:30:70:8f:ba:6b:0c:34:c8:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:68:FA:44:25:FE:C9:01:49:37:ED:C5:00:02:72:75:21:F4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:f9:82:d1:2a:6d:71:5f:69:34:d3:83:98:60:9f:ee:3a:
         0d:5b:b5:8f:0f:de:8e:2d:cc:72:0b:96:af:6d:c6:4f:ef:86:
         b3:7c:31:57:ba:38:50:93:53:ed:86:6d:42:e4:a9:5e:1e:0d:
         0a:91:29:10:5f:09:89:c9:1d:e6:d3:81:40:61:0c:77:21:3c:
         3b:ba:01:f2:ae:94:d9:06:5e:99:19:22:ae:85:6c:93:23:49:
         1d:d1:be:d3:36:52:a3:d4:ad:1b:41:d3:19:45:1c:ab:aa:12:
         43:f1:f5:57:19:5d:ae:c3:50:6b:74:47:24:9b:3c:14:53:06:
         07:35:42:b1:fe:19:2e:7e:3b:e0:25:cc:49:5b:cf:8b:93:49:
         f4:12:54:f4:36:2e:eb:be:e1:3f:df:38:ba:74:dc:fc:f1:81:
         f5:c1:0b:0a:20:52:13:02:04:64:0c:44:0e:c1:7a:17:d8:95:
         e2:58:13:23:c6:f4:f7:3d:56:ad:f6:6d:99:8e:e6:6c:12:44:
         1d:93:eb:f8:f2:58:47:1b:17:cc:44:27:dd:66:29:22:3a:3b:
         aa:3c:3c:b1:92:bc:32:90:62:64:7b:46:7f:31:81:b8:4b:31:
         a5:8b:1c:96:24:6a:c6:a9:0e:fd:3b:aa:a4:7f:4f:3b:92:20:
         b8:90:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:58:37 2025 by rpki-client