Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa
File:                     bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa (raw, json)
Hash identifier:          +vw7C/bkEYjlVOlAH8/+YCltYqF548HYMRAjgSGilC8=
Subject key identifier:   F9:4A:5B:B2:E8:3C:F0:CD:61:43:BF:E8:71:CA:98:6F:AC:52:01:CF
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F43285849B41498C9A505959436B952C0
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     11620
IP address blocks:        74.116.200.0/22 maxlen: 24
                          74.116.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:98:c9:a5:05:95:94:36:b9:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=4284aa9a-fc0b-4ce9-9763-e506303228e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:c2:15:10:e9:a7:95:c8:bd:8d:dc:0d:9d:
                    2c:a8:3d:be:83:ba:9d:8d:d0:0a:53:e5:88:56:13:
                    5a:73:d4:e9:18:4d:70:9a:76:e3:c7:fc:e4:91:30:
                    2d:77:59:99:43:d1:bf:72:11:2b:18:97:23:00:27:
                    6d:91:65:c4:22:7c:94:4e:8b:48:3c:6b:48:bb:00:
                    5f:41:e1:75:86:1e:99:10:7b:96:35:6a:ce:81:82:
                    e7:1d:92:d2:79:5c:d3:4c:70:84:c9:cc:df:aa:20:
                    2d:57:5e:e0:d3:b4:1e:06:9c:00:dd:1c:bf:f6:78:
                    bc:09:7d:be:17:49:bb:9f:43:b2:ac:23:dd:70:60:
                    2f:b1:9f:69:c0:ff:48:40:f7:d5:95:79:60:d9:62:
                    7f:d1:8b:ea:34:25:df:01:09:02:35:ac:ee:1b:a2:
                    ab:37:1b:0d:96:b6:6c:13:84:fe:59:f4:38:a0:d8:
                    de:66:86:2f:17:d8:96:ea:d4:ba:7f:5b:2f:4f:e3:
                    90:e9:33:c3:4e:ca:bc:ab:6e:58:11:d1:f8:91:03:
                    b1:f3:28:33:4e:56:33:70:d0:32:ea:35:f5:ab:f6:
                    77:c6:eb:07:7f:3b:9b:cb:95:1d:1c:54:62:90:48:
                    11:b4:82:6d:9c:b3:35:79:34:b1:b3:cb:67:32:b7:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:5B:B2:E8:3C:F0:CD:61:43:BF:E8:71:CA:98:6F:AC:52:01:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0f:e5:09:cc:9b:fc:c2:23:6c:b2:d0:b5:c6:e9:3e:90:0e:
         b7:89:75:04:eb:7c:d2:9a:2d:5f:30:06:b4:aa:cf:36:79:e9:
         0c:31:70:99:b3:0f:aa:34:e9:18:57:d5:ea:03:a1:65:e6:cc:
         2e:25:4c:b4:93:a4:b2:61:f5:b9:fe:ec:d7:8e:14:a4:3f:89:
         4f:c1:10:d3:02:82:28:ce:9f:f4:e3:f0:74:b5:b1:c4:00:24:
         07:ad:94:30:39:a4:51:07:5f:7c:3d:21:e2:99:f7:2a:39:39:
         b9:d6:d6:58:2a:a7:76:8d:d2:50:ab:30:13:16:dc:f6:80:f3:
         af:bd:05:8e:7e:a3:26:b5:ff:f5:66:37:e0:72:f4:55:37:fc:
         3a:6d:8a:6d:2b:79:d1:df:92:13:a9:98:35:81:bd:ae:70:e7:
         f5:e4:9c:ab:23:a6:5e:53:25:a1:1f:7a:d9:dc:21:ed:f5:d0:
         3e:ad:75:e9:12:d8:ff:9b:e7:70:11:19:07:76:9b:d6:f2:45:
         8d:41:99:6a:dd:73:12:25:d6:6c:68:a8:08:ab:e8:4f:d9:19:
         20:f9:0b:52:77:fa:90:29:33:d7:34:dc:46:ff:5a:d8:d3:c5:
         fd:cd:4a:a3:08:e5:57:18:f8:bd:d1:e1:43:80:46:fa:68:07:
         58:a9:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:09 2025 by rpki-client