Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa
File:                     8c7110f4-9850-314d-a729-b9b9de4adc13.roa (raw, json)
Hash identifier:          YnLK/DshTxFOYMdDeNHjrR8OzzxxmSlKJMb1TBkevec=
Subject key identifier:   7D:1E:49:D1:3D:35:0F:0F:7B:E7:F3:57:18:39:F3:10:FB:B8:97:C6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00663266954CA8A056B0B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        174.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:63:26:69:54:ca:8a:05:6b:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=9015b21a-b5ba-4f7d-8a94-b28a69fc16e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:23:90:29:2e:be:df:56:be:e5:dc:cc:17:
                    0e:90:e0:09:45:ec:a5:a3:39:d6:44:28:94:b0:89:
                    93:4d:5b:6e:6e:b7:8d:3d:cd:43:bd:5f:84:92:db:
                    53:12:92:a0:db:83:c9:27:94:ba:b0:9f:3d:b9:cd:
                    58:41:b6:41:88:0a:09:6e:94:53:51:55:0f:ff:c5:
                    1d:73:0e:1f:76:c2:28:21:cb:7d:f7:d5:2a:1a:32:
                    de:17:ac:58:96:a1:25:4c:2a:10:8b:d1:a9:2e:b3:
                    13:7f:38:ef:d2:2e:fe:e3:4e:7a:7e:4b:d0:b8:58:
                    32:00:63:26:7a:98:d6:11:7c:49:78:0a:a0:4d:ac:
                    d3:1b:fd:72:30:80:c2:9e:5c:26:66:c1:a4:a8:90:
                    9d:27:22:56:db:fb:a7:38:f3:63:d8:0e:7b:73:6d:
                    94:98:cc:e9:ef:06:ba:c2:5b:00:f3:51:b5:5c:f1:
                    08:b1:3f:52:fe:8f:44:e4:62:18:16:2e:72:9f:2f:
                    a1:4d:c2:1d:4c:4f:26:be:cd:0b:11:6a:ce:31:f4:
                    88:3e:21:63:aa:1b:0a:b2:d7:20:db:bd:1d:16:0e:
                    20:cd:fa:44:c7:c3:5d:81:16:e3:ff:95:c2:ee:f4:
                    7e:81:9a:7d:0c:86:34:ad:40:95:7e:5e:e8:5e:2d:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:49:D1:3D:35:0F:0F:7B:E7:F3:57:18:39:F3:10:FB:B8:97:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a0:0b:e4:37:6b:99:33:77:69:0c:ff:53:31:b9:37:5c:1b:
         2d:dc:a4:e2:36:c6:c0:0d:fd:d0:4e:d6:4c:1f:ed:85:d9:c8:
         df:b7:56:f2:a3:f3:24:3a:51:dd:a2:61:f1:0b:2e:dd:6c:ce:
         0d:2b:08:61:9a:6a:2a:ed:96:f9:57:62:c8:f2:72:bc:fa:16:
         4d:a9:86:13:95:99:85:4d:2b:8f:f1:97:4b:ae:6b:b8:0b:82:
         8b:b6:fa:38:de:f9:e9:95:bb:8a:7a:a6:26:2f:9e:41:d7:0a:
         48:68:64:5c:30:cc:e4:58:5e:67:2a:2b:3d:d7:14:05:c9:a3:
         78:27:a0:b8:8e:fd:a2:1d:5b:d7:fa:89:18:ff:42:1c:cc:a5:
         5b:75:31:ca:e2:af:a6:0e:b2:1f:62:72:ea:22:8a:a0:d2:ef:
         db:71:f6:7a:23:01:72:f7:05:75:d3:cb:e7:e0:d3:9b:ad:3d:
         34:80:8a:b6:26:08:84:ee:69:f0:14:59:c7:88:63:20:ce:db:
         08:66:5d:18:aa:b5:ae:13:2a:43:d2:54:7f:c1:80:f8:0d:3b:
         f9:26:1b:4a:5b:4f:fb:db:73:81:7d:23:99:54:54:ac:cd:1f:
         9c:63:3b:28:8f:f9:9a:46:94:a4:b9:92:8b:57:19:ed:8e:36:
         b0:f6:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:58 2025 by rpki-client