Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a10043b0-0f74-3e8e-8e3c-1da36f4b8ff9.roa
File:                     a10043b0-0f74-3e8e-8e3c-1da36f4b8ff9.roa (raw, json)
Hash identifier:          iLefJPEPepbYCdCe85w/TYg6n9eOv9L97ZdqS/8Vn9g=
Subject key identifier:   38:79:93:63:22:AB:42:3F:D7:44:01:D0:EF:58:EA:0F:07:E3:FC:2A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A1BF5511BFF576A6A1198F340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a10043b0-0f74-3e8e-8e3c-1da36f4b8ff9.roa
Signing time:             Sat 07 Jun 2025 06:01:52 +0000
ROA not before:           Sat 07 Jun 2025 06:01:52 +0000
ROA not after:            Fri 05 Sep 2025 06:01:52 +0000
asID:                     21769
IP address blocks:        216.74.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:f5:51:1b:ff:57:6a:6a:11:98:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  7 06:01:52 2025 GMT
            Not After : Sep  5 06:01:52 2025 GMT
        Subject: CN=ff56e389-7433-4177-bd44-32696bca355a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:02:26:28:7f:d0:93:ac:8c:6e:eb:76:4b:
                    93:8e:56:dc:7e:4c:76:f3:b5:6f:1f:bf:07:09:9f:
                    7c:94:2a:a8:3d:f1:c2:61:7f:6c:04:73:70:ab:8d:
                    22:e6:91:30:4e:cb:1e:33:66:79:96:4c:fb:25:68:
                    fc:ed:32:19:9c:b6:77:fe:85:c9:ca:3a:4b:6e:7d:
                    a3:a2:74:01:24:d4:26:dc:e8:63:51:9a:05:a2:a2:
                    be:06:fe:5d:80:fa:6c:57:24:e3:bb:3d:b0:4e:57:
                    06:44:b5:11:fd:cc:6b:8a:7e:1a:02:5d:1e:d1:42:
                    8f:a2:1c:40:df:b4:56:3b:3e:85:64:b0:99:8f:9e:
                    91:f4:f0:db:86:6e:6b:84:42:1a:e7:80:90:9a:65:
                    71:df:81:47:d7:24:3a:1f:6d:51:7e:b8:be:35:9f:
                    c9:2b:3f:79:39:df:44:60:6e:50:fd:5a:cf:9d:df:
                    7e:b5:53:49:23:d7:53:25:a1:14:46:5a:f1:8a:90:
                    33:b0:b3:04:2a:b3:c1:58:d2:e9:a6:81:85:cf:35:
                    9f:63:f2:8d:16:e8:9b:8e:85:cf:bd:57:8f:ca:38:
                    42:67:a7:42:8c:b4:9a:b1:ec:af:65:2b:f0:0f:0b:
                    20:3d:56:c0:5a:63:0a:b9:08:27:00:34:ad:ca:63:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:93:63:22:AB:42:3F:D7:44:01:D0:EF:58:EA:0F:07:E3:FC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a10043b0-0f74-3e8e-8e3c-1da36f4b8ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:ee:18:55:32:03:d3:3e:1c:36:53:96:f9:21:0d:56:07:
         73:7a:d3:39:94:7c:1f:f2:1b:29:94:bc:e9:38:1d:96:f1:92:
         e6:ff:28:49:2f:a6:1a:28:af:3c:06:32:f4:c6:e9:c0:4b:ec:
         8f:8c:1c:cb:e1:5e:03:d3:3e:ca:8e:e4:cd:99:c0:85:13:7f:
         a5:07:3a:db:dc:44:72:72:c0:cd:97:0e:09:61:0f:0c:91:da:
         3b:da:40:08:de:ca:c0:7a:96:64:89:cf:ed:96:ed:de:2c:2d:
         d6:75:2b:40:3b:b7:20:02:8e:01:6a:fd:e5:80:fc:e4:f4:39:
         d2:5a:1a:45:84:ea:14:46:8b:22:d6:60:d2:bd:f0:7b:99:e9:
         40:58:8b:36:bd:36:6b:be:0c:84:99:fd:16:30:bd:c7:bf:c3:
         a5:19:7a:2c:40:e7:df:6c:dc:ec:02:c5:7f:48:22:0d:2e:44:
         b4:33:de:ee:9b:c7:66:51:09:16:a4:bb:82:a5:7a:8d:bf:63:
         74:df:b5:aa:36:13:44:c5:86:51:91:92:4a:68:92:58:50:a6:
         c2:50:e9:75:a9:a1:7c:49:9c:3d:9b:c4:25:f7:39:3f:28:39:
         02:9e:cf:51:19:63:12:d6:7e:4d:67:93:30:ab:64:c3:07:e1:
         ac:7b:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:26:21 2025 by rpki-client