Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa
File:                     f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa (raw, json)
Hash identifier:          DQ/wyuYBGbdyTbItKhd6jRKmUBUFhf4GlVR4EWtl+v0=
Subject key identifier:   25:E0:D6:10:D1:FE:8B:30:9B:24:76:A4:47:E4:05:22:D9:BE:12:BE
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584937D9328AEC5139B56065B780
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     36511
IP address blocks:        74.116.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:32:8a:ec:51:39:b5:60:65:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=53f1330c-31e6-4aa7-88a0-5ac6d4992939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:d4:6a:f5:7d:ea:b3:46:ef:9d:c4:9a:44:
                    7a:c2:5a:56:a8:13:26:7b:8c:a0:98:82:3f:c6:7d:
                    9e:02:ae:73:de:69:e0:6e:92:6c:d1:86:e0:b7:2d:
                    9b:31:73:cb:ec:7f:4d:cc:d5:6b:ac:44:7d:84:fe:
                    fd:40:5c:43:53:f8:af:56:35:11:7f:36:2c:c1:a8:
                    bc:b2:a0:d4:38:ae:50:4f:88:4c:16:d7:29:70:ae:
                    1c:c8:4d:85:a4:d9:e5:a0:37:7b:06:dc:dd:82:19:
                    20:81:91:9e:5c:c6:05:33:1c:83:6a:df:da:21:7e:
                    75:cf:a2:ea:48:00:95:b2:79:91:40:41:f6:f9:e4:
                    b7:d3:77:93:a0:e0:3a:40:56:37:5c:c8:5f:fa:41:
                    ff:e0:0d:fe:ce:63:b0:93:89:50:82:d0:78:eb:84:
                    14:74:5b:ca:1a:09:68:4a:39:e0:32:70:10:74:31:
                    0f:b7:f4:1c:ce:f1:28:be:fb:7f:e8:38:6c:71:ad:
                    e6:84:74:4e:47:e4:50:e7:98:6e:ef:d2:99:a2:39:
                    99:61:f1:d0:32:04:e8:87:55:6e:1e:a8:30:4c:98:
                    33:6c:90:d2:ca:d6:8d:76:eb:f7:42:5e:7e:a5:87:
                    e5:d3:b0:d3:93:ee:b7:89:ac:9f:37:a4:f5:82:9e:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:D6:10:D1:FE:8B:30:9B:24:76:A4:47:E4:05:22:D9:BE:12:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:74:67:f8:e7:47:7e:a2:b7:c5:a7:b7:58:1b:ca:6f:5b:
         b2:57:55:60:69:e7:31:59:2d:42:5b:48:bb:9f:82:db:b5:87:
         1f:1f:4f:80:9a:62:34:46:53:80:08:a9:26:f6:1c:0d:b1:f7:
         e5:c2:03:77:3f:1a:e5:84:c1:2a:06:77:e9:24:dd:b6:74:8c:
         b5:96:61:0e:bf:26:a9:55:b5:cf:bd:93:da:bf:5d:9a:62:27:
         bb:c5:3a:15:b7:0b:54:e2:01:81:66:90:5a:a9:fa:26:fa:08:
         76:a6:cd:41:67:a8:43:eb:eb:de:53:b1:45:93:39:e2:0c:e9:
         9c:7c:39:07:ac:7b:7a:cc:ad:54:2e:87:fb:2c:c6:54:da:d6:
         c2:38:e5:a8:24:a0:5c:d7:fe:bf:03:60:23:1d:d5:60:8d:fc:
         9a:00:dc:d5:aa:8f:be:90:f6:c3:81:77:0d:62:64:66:8e:e9:
         c3:e6:12:d6:38:25:89:bf:c1:8a:52:85:e6:0f:1f:6a:22:a1:
         40:e6:c5:f9:f9:65:19:89:4b:14:e0:65:81:63:20:35:9e:3a:
         9b:4f:3c:cc:ae:64:74:30:0f:e6:14:4c:24:1a:5a:b2:6a:74:
         25:4d:01:cb:43:ff:b9:e6:84:44:77:df:36:60:84:8e:5d:14:
         9c:29:d9:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TKK7FE5tWBlt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTNmMTMzMGMtMzFlNi00YWE3LTg4YTAtNWFjNmQ0OTkyOTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpXUavV96rNG753EmkR6wlpWqBMme4ygmII/
xn2eAq5z3mngbpJs0Ybgty2bMXPL7H9NzNVrrER9hP79QFxDU/ivVjURfzYswai8
sqDUOK5QT4hMFtcpcK4cyE2FpNnloDd7BtzdghkggZGeXMYFMxyDat/aIX51z6Lq
SACVsnmRQEH2+eS303eToOA6QFY3XMhf+kH/4A3+zmOwk4lQgtB464QUdFvKGglo
SjngMnAQdDEPt/QczvEovvt/6Dhsca3mhHROR+RQ55hu79KZojmZYfHQMgToh1Vu
HqgwTJgzbJDSytaNduv3Ql5+pYfl07DTk+63iayfN6T1gp41ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXg1hDR/oswmyR2pEfkBSLZvhK+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZjhmZmFmMGYtZDljYS0z
NGY1LTk5NjEtYjZlYzk1OWZjNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXvdGf450d+orfFp7dYG8pvW7JXVWBp5zFZLUJbSLufgtu1hx8fT4Ca
YjRGU4AIqSb2HA2x9+XCA3c/GuWEwSoGd+kk3bZ0jLWWYQ6/JqlVtc+9k9q/XZpi
J7vFOhW3C1TiAYFmkFqp+ib6CHamzUFnqEPr695TsUWTOeIM6Zx8OQese3rMrVQu
h/ssxlTa1sI45agkoFzX/r8DYCMd1WCN/JoA3NWqj76Q9sOBdw1iZGaO6cPmEtY4
JYm/wYpSheYPH2oioUDmxfn5ZRmJSxTgZYFjIDWeOptPPMyuZHQwD+YUTCQaWrJq
dCVNActD/7nmhER33zZghI5dFJwp2ZU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:38 2025 by rpki-client