Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/133968bd-e7fa-3535-936f-c353cbfc5c62.roa
File:                     133968bd-e7fa-3535-936f-c353cbfc5c62.roa (raw, json)
Hash identifier:          7z644zTm5tS0oAq1C4c5gqJEc32bpR/Enk8KUQPVMg8=
Subject key identifier:   3C:2E:41:AF:4E:43:7D:9B:88:25:42:54:09:F4:EB:92:5C:22:F3:7F
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584930DE7988473B5C5A657600C0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/133968bd-e7fa-3535-936f-c353cbfc5c62.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     54994
IP address blocks:        174.35.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:79:88:47:3b:5c:5a:65:76:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=74d9512f-ee74-4ba2-a92e-c4a1e15edef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:65:22:cf:7a:a5:07:de:99:0f:a6:eb:4c:
                    4f:53:76:b4:52:91:b3:1a:b9:72:d7:c3:32:b2:cf:
                    0f:ba:72:7b:d6:e0:6e:36:53:d0:76:0f:99:d5:34:
                    52:84:be:6b:bf:d6:f5:9b:7a:11:65:cb:be:1c:d0:
                    bf:3d:fc:a5:c0:86:4f:94:c0:d6:93:65:cf:a2:96:
                    e7:2e:50:78:f8:8c:3b:8e:7f:f4:0c:7f:db:31:75:
                    6f:64:17:2f:33:99:53:ef:2d:7e:6b:5e:25:45:50:
                    6d:43:7d:f0:95:e8:1a:1b:9b:47:9e:3b:42:8f:88:
                    9a:2c:b6:69:97:ae:11:0f:e7:d7:a1:d3:f9:39:74:
                    78:28:d6:05:85:6d:bb:83:e8:dd:67:ce:a3:b9:a7:
                    b0:b0:aa:92:d8:02:db:be:87:c6:9b:3d:7c:0d:47:
                    3b:28:81:9e:50:a2:cf:ee:42:5e:69:e1:95:0c:19:
                    af:21:3f:8a:20:63:95:75:8e:a9:2f:44:2d:dd:e1:
                    a6:61:15:64:5e:17:a1:64:25:77:d8:fd:37:0e:1b:
                    4e:11:e6:f9:01:04:ab:2f:15:58:62:95:d2:0e:5f:
                    58:99:58:4c:d3:43:20:11:70:25:ea:0d:88:ff:42:
                    92:26:ca:27:30:26:ad:fb:13:3d:51:c3:9a:d4:ca:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2E:41:AF:4E:43:7D:9B:88:25:42:54:09:F4:EB:92:5C:22:F3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/133968bd-e7fa-3535-936f-c353cbfc5c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f6:6e:38:24:9a:d4:0b:fd:6a:59:5b:61:14:34:f4:3a:de:
         bb:a7:11:c3:4b:d3:02:fc:6b:f8:03:67:17:07:0f:18:bb:6b:
         83:07:da:8b:0b:38:79:3f:4c:40:82:d2:7c:18:ee:5b:bc:9b:
         ae:f1:8a:4c:b0:86:a7:ee:30:36:2a:5b:d9:17:9c:00:34:e6:
         16:c6:df:38:99:99:9e:c5:9f:10:0d:01:5f:95:1d:27:4e:28:
         ba:32:09:6a:de:12:1f:97:e6:35:d9:6f:b3:72:53:b1:3f:39:
         78:13:31:18:2b:ad:00:07:95:66:be:41:b3:27:c2:b8:64:1e:
         40:84:dc:5f:93:0c:a9:cb:30:9e:f4:97:ab:22:65:db:5d:d1:
         e0:bd:37:9f:21:ef:9d:c2:24:77:a7:cd:72:91:2a:17:59:a6:
         b5:47:b8:5e:45:5d:e7:3d:98:0a:88:68:50:d6:02:f5:23:6d:
         32:18:c4:23:05:ae:37:b5:3b:9b:d8:b1:45:95:94:e8:65:e6:
         24:20:af:1a:10:6f:42:9b:e9:1e:ee:c3:ed:28:8b:54:50:c8:
         aa:07:cd:ab:2a:91:32:5a:d9:7c:7a:b0:71:c7:ee:5a:52:73:
         54:80:86:ca:e9:b2:be:49:d7:d0:ef:d0:e5:4f:d8:e9:e1:21:
         2d:18:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:37 2025 by rpki-client