Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa
File:                     b804937a-f843-3745-b3d8-d70631744a5f.roa (raw, json)
Hash identifier:          LfC0abf36KCq4TM87HgUswwp/XUwK5jatGVQ2Z0BMQc=
Subject key identifier:   81:F1:0E:DD:42:8A:B6:E0:96:4E:9A:15:6E:5C:78:C2:91:B5:C2:C4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848A99620B96197C35689BCB000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     25668
IP address blocks:        64.114.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:20:b9:61:97:c3:56:89:bc:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=c1eec74d-a651-4b15-bc36-702a462267e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:75:aa:dc:a2:e1:e5:69:46:6c:f9:c8:13:
                    b9:e9:07:f3:06:4e:30:52:39:44:d9:77:98:23:a7:
                    21:56:52:8d:2e:df:4c:43:7b:19:c7:b3:3b:8f:36:
                    b9:69:2f:43:c7:14:74:53:a2:35:ba:d5:b1:4c:b0:
                    0c:c9:d9:78:36:02:4b:1c:85:95:0b:4e:38:de:65:
                    41:aa:ab:06:18:b3:df:72:90:46:f8:4c:a3:99:d0:
                    6f:fd:b5:04:31:42:6e:7a:88:79:8c:0a:fd:7d:1b:
                    fe:82:bc:74:1e:2b:4b:10:c9:8a:70:5d:06:a7:3d:
                    64:28:88:e0:53:4f:23:75:74:d1:34:54:06:14:4c:
                    27:5c:2f:c2:d6:00:6b:d9:3a:e7:aa:52:39:94:d1:
                    fd:13:75:0c:65:ba:db:2d:c4:e1:78:6e:86:b2:4e:
                    e7:2b:83:22:a9:f3:da:3b:f6:ee:4e:47:d5:43:2a:
                    e1:dd:ac:13:15:39:d8:03:b8:6d:d9:45:da:66:9b:
                    5a:4b:27:83:b5:84:29:be:f9:a2:74:1c:ee:f0:3c:
                    ed:52:dc:2f:67:32:6e:df:40:06:83:6b:ec:f2:5a:
                    19:1d:16:44:77:c6:bc:a1:45:39:79:ae:9d:b9:9d:
                    85:9d:0b:35:6d:f0:5c:41:0a:71:0b:2e:44:32:ce:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F1:0E:DD:42:8A:B6:E0:96:4E:9A:15:6E:5C:78:C2:91:B5:C2:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:d3:8e:c3:34:cb:20:d6:85:47:57:7f:e5:99:19:ae:08:
         e4:53:16:c0:50:f4:e6:08:56:2d:5e:fd:c7:00:e0:a5:85:5e:
         87:91:9b:27:57:33:ea:d4:5a:e8:65:66:8d:25:24:5a:25:92:
         3b:77:72:f9:b8:27:c6:5a:da:63:86:c8:31:8b:cc:c4:e3:16:
         47:bf:90:45:fb:f8:4e:5b:e0:08:8b:61:aa:d0:05:af:a4:3e:
         cc:1f:f0:3f:85:09:5e:a3:bc:78:2f:e2:cc:d5:18:3d:35:9d:
         f4:a3:2f:ed:12:9b:f2:22:fb:65:4d:aa:ec:74:98:2e:3a:87:
         86:8d:1c:33:26:3e:d3:41:a2:47:11:52:30:39:28:7c:cc:0a:
         87:e2:54:45:d7:90:94:94:3b:9f:b8:5a:e8:e3:71:d5:2e:87:
         65:0c:be:0f:bd:22:2d:71:c2:d3:cc:e9:9f:02:cb:78:df:bf:
         88:5e:12:d5:21:e1:5f:9e:23:03:d9:a9:30:a4:7b:1f:1e:9c:
         32:46:ce:e2:7b:6f:d8:ea:ed:6b:4a:8b:19:19:c1:61:d0:3c:
         2d:e6:ef:56:5e:ad:06:3b:39:d9:4f:3e:24:63:fa:9e:85:fc:
         f8:86:3d:45:a3:9b:d4:d7:9a:73:4c:fb:b2:6a:36:e4:5c:80:
         93:e9:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:07 2025 by rpki-client