Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/9c4dd4d5-944c-3964-82b6-42803dd91783.roa
File:                     9c4dd4d5-944c-3964-82b6-42803dd91783.roa (raw, json)
Hash identifier:          Cc4KzYTecWmHMmMxQAVRl6dXyBc4snf0RAs1ipQAzHg=
Subject key identifier:   6A:62:49:7B:50:B6:1A:BB:77:71:7F:E4:08:45:27:65:CD:46:74:AC
Certificate issuer:       /CN=73fe0d74-68ab-4934-afe2-84c2b7ce1ef8
Certificate serial:       010D0C9F43285848F92695ACD7AB2B400F1776E8
Authority key identifier: 90:76:93:39:16:72:AD:40:EF:F9:EA:12:A7:DA:0F:F7:93:15:36:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/9c4dd4d5-944c-3964-82b6-42803dd91783.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     197560
IP address blocks:        170.75.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:95:ac:d7:ab:2b:40:0f:17:76:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fe0d74-68ab-4934-afe2-84c2b7ce1ef8
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=5e770117-ed93-4a98-afd4-019e59bc2abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:80:30:d3:dd:10:45:1b:bb:7f:f7:ea:3b:
                    52:01:9d:63:e3:79:55:78:69:f8:42:37:10:71:e4:
                    10:94:88:7f:43:a7:8b:65:00:04:b3:21:0f:58:ab:
                    27:b0:5c:67:f8:33:b3:3b:56:ff:5b:c1:a8:0c:4a:
                    cb:59:3c:82:8f:6f:73:93:6a:eb:c0:fd:fa:a1:b4:
                    4b:76:33:a3:b9:d8:76:2f:07:dd:cf:39:71:a5:20:
                    8c:91:48:1c:ff:35:d8:78:97:ef:96:0b:56:13:68:
                    e0:67:0e:37:7b:16:47:8f:a6:f9:9d:43:19:82:85:
                    eb:4a:1b:16:2f:11:3e:59:e8:cb:53:79:13:43:3f:
                    2f:ee:01:fb:bd:0e:58:87:1c:2c:58:1b:87:70:9c:
                    7f:97:47:43:1a:04:0f:97:0a:7c:83:7b:15:d2:a8:
                    41:f1:4b:8e:8e:53:c1:d2:f2:b2:9c:49:98:71:1d:
                    17:01:61:b7:ee:95:c5:18:99:69:08:6f:f9:2b:15:
                    aa:27:4b:a5:f7:7f:68:c4:bd:d3:b6:25:ac:72:60:
                    50:7a:c0:d3:01:6d:75:28:61:68:3e:94:41:26:4c:
                    5f:d6:3a:06:d4:6f:bc:f0:09:b9:51:60:4a:8c:fe:
                    22:43:44:b8:df:dd:51:78:d1:da:a8:db:ff:cd:aa:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:49:7B:50:B6:1A:BB:77:71:7F:E4:08:45:27:65:CD:46:74:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/9c4dd4d5-944c-3964-82b6-42803dd91783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.crl

            X509v3 Authority Key Identifier:
                keyid:90:76:93:39:16:72:AD:40:EF:F9:EA:12:A7:DA:0F:F7:93:15:36:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73fe0d74-68ab-4934-afe2-84c2b7ce1ef8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5b:ac:b5:74:75:0e:99:4b:ac:91:92:f4:a9:34:6b:aa:f6:
         16:d3:09:85:f7:e6:d9:1e:64:e9:c9:e2:05:c7:1f:fc:04:3e:
         14:a4:d1:93:56:42:f6:ee:82:20:dc:50:84:1a:65:53:a4:6f:
         c7:86:21:22:d1:f5:6b:eb:52:f2:56:0c:db:80:25:ba:81:53:
         5e:b6:4b:b5:1c:c8:55:f8:2f:4c:a0:59:dc:6b:00:a1:7e:66:
         67:22:27:97:c0:e4:dc:85:fd:3d:e0:57:cc:cd:df:27:ff:5f:
         86:7b:04:1d:c5:8d:5e:59:f2:57:0b:39:48:90:54:1c:10:75:
         d1:38:8c:72:a0:5d:ee:f3:ae:b4:6c:2e:04:f1:f2:fb:da:4d:
         0c:b7:fe:a5:53:81:eb:5b:43:4a:df:a3:91:5d:26:dd:38:45:
         6a:3f:f7:14:c2:84:d9:3d:96:a5:20:65:e4:b5:f5:18:66:97:
         a5:85:69:3e:64:94:51:60:38:27:7f:0d:d5:1d:d0:6d:61:ca:
         43:b9:2f:57:4a:65:58:cd:09:bb:0c:9a:c2:da:eb:28:26:4e:
         c5:81:1e:5c:0f:fa:6c:5e:2a:78:2c:b8:e0:6d:2b:7f:f2:2a:
         c6:34:ee:2b:91:a1:1a:6a:d0:9f:55:b5:3f:c1:db:fb:3a:d0:
         1d:72:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:16 2025 by rpki-client