Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f1a73c44-5e2f-3d55-be64-76583a4fc258.roa
File:                     f1a73c44-5e2f-3d55-be64-76583a4fc258.roa (raw, json)
Hash identifier:          0jYo8XnpLT/9s8J2kJRb76kcbkSvKMl3EKZbV3fx+Dw=
Subject key identifier:   DA:17:6A:1E:F0:58:D8:93:C4:A7:49:7D:6A:46:80:A0:76:85:D8:B2
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584AF521469A41EBF5D32AC8B700
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f1a73c44-5e2f-3d55-be64-76583a4fc258.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     33392
IP address blocks:        74.116.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:46:9a:41:eb:f5:d3:2a:c8:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=abb9573a-44d3-4436-9db8-d650bc4c67f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:60:6c:3e:1d:e7:2d:f6:37:34:9d:b4:ec:
                    65:67:c1:45:7e:ad:dd:87:7d:4a:38:dd:49:b4:8a:
                    80:dd:04:59:69:9a:f9:d1:8e:74:c0:c9:8c:9f:3d:
                    0a:e0:f3:3c:96:e9:46:98:4b:dd:01:91:ef:b4:8d:
                    48:86:3f:00:05:49:97:5c:21:0c:9b:5e:20:8c:a7:
                    10:46:e3:bf:5d:2a:47:71:fa:bc:23:b0:c7:8a:5c:
                    62:d0:32:ab:62:06:c7:90:58:5e:0d:fc:4f:5f:58:
                    8e:21:67:ee:69:eb:a9:5f:16:f0:f1:65:77:73:a5:
                    02:a6:04:9a:07:78:ee:f1:46:3d:11:e8:c7:f8:18:
                    7d:54:a6:54:37:36:b9:72:97:32:f2:6a:62:45:47:
                    1c:7c:9a:31:4e:3f:93:8b:27:70:f0:01:8d:44:bc:
                    5c:bb:a3:73:a1:21:77:df:95:5c:99:18:01:d9:7a:
                    83:21:32:08:1f:87:30:8f:84:3f:ff:9d:13:6a:55:
                    14:24:80:6a:c5:68:4d:0d:98:3f:21:6d:41:a1:a1:
                    5f:85:03:a4:57:c1:2b:0e:54:15:b8:a5:0f:42:da:
                    5e:35:20:f6:fd:f1:53:90:fc:76:23:2a:5f:01:51:
                    67:4b:8f:ac:ac:cd:cf:c3:28:ca:57:c4:89:b9:f4:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:6A:1E:F0:58:D8:93:C4:A7:49:7D:6A:46:80:A0:76:85:D8:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f1a73c44-5e2f-3d55-be64-76583a4fc258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6a:a3:db:9f:41:3c:7d:dd:9d:c0:c7:3b:7a:62:9b:c7:3b:
         24:24:48:80:79:e1:c7:7b:02:11:35:b7:32:e4:aa:2c:97:bc:
         bd:a2:3d:c6:5f:c5:62:96:b7:a0:6d:38:88:91:63:03:95:1c:
         db:16:6d:5f:c1:40:0b:74:ff:39:11:42:e6:42:71:b2:9f:2a:
         9e:b2:44:ba:33:6b:5f:c9:b4:0e:2a:71:4e:7f:34:0d:8e:f8:
         20:f7:ba:a9:c5:45:4b:ea:3e:95:91:d6:21:61:70:01:07:45:
         d4:d1:7e:c9:b7:1a:d2:3e:4b:c5:22:7d:35:56:af:90:95:6d:
         9f:50:5b:fa:5a:66:04:09:9e:e8:95:df:82:d6:05:49:0f:60:
         95:8b:4d:76:d8:65:57:24:e3:20:4c:c0:0d:e3:19:9c:13:ec:
         7a:5a:36:e2:81:cb:9f:c3:58:14:ea:bb:70:ae:5b:10:aa:8c:
         73:f4:30:61:32:75:0e:51:56:a6:87:39:3e:c6:3c:68:1c:f0:
         3a:ef:3a:72:ad:4f:10:6c:14:c3:5d:df:94:08:5e:db:1d:89:
         d7:9b:ea:90:b1:92:54:61:b5:84:cc:0a:5e:97:cf:63:b4:e9:
         7c:b1:d6:50:8d:87:c8:89:5f:d2:13:24:4f:51:84:92:fc:a4:
         a7:86:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:43:54 2025 by rpki-client