Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/7b5872da-1fbb-338c-b627-c76119fe3e7d.roa
File:                     7b5872da-1fbb-338c-b627-c76119fe3e7d.roa (raw, json)
Hash identifier:          HZ9U0ADcjJCDzmq+c5dJOd5qGpDHkJt8uOe8SKU4aKM=
Subject key identifier:   CF:96:81:B2:8D:0B:3B:71:0E:9D:58:21:3A:6A:2D:1F:F0:0A:BC:5A
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F432858494733EDF838D7CD725F61AD00
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/7b5872da-1fbb-338c-b627-c76119fe3e7d.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     6142
IP address blocks:        74.85.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ed:f8:38:d7:cd:72:5f:61:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=6a1c99bb-5177-4ac1-8602-4c883493185d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:5a:73:2a:03:16:7c:80:cd:73:15:29:a0:
                    bd:90:af:ba:bd:6b:61:24:96:ab:3b:c7:5d:c3:dc:
                    e5:f9:e5:c3:8e:16:8b:e8:46:e2:8a:52:4f:45:5f:
                    a5:66:74:02:12:45:bd:46:84:34:4f:92:39:4b:a4:
                    4d:7c:27:ca:35:ab:0f:7c:e4:e0:90:d2:81:51:f0:
                    15:66:56:00:b5:aa:05:85:5f:d4:a6:26:9c:57:12:
                    44:1f:cf:7e:d4:16:6d:cb:2f:0c:7f:ee:c3:13:9a:
                    5e:34:8b:8c:a0:e3:9a:b2:1d:3d:08:3b:3c:11:65:
                    2a:2a:90:ab:7e:d6:e1:76:32:b4:d2:73:1e:3b:5f:
                    7d:71:52:4d:6d:4f:75:70:e2:6f:e6:7a:58:94:f7:
                    b1:ce:3f:b7:ef:68:79:d7:b5:be:c9:59:70:58:de:
                    73:77:98:22:18:94:ca:7b:d0:da:68:e5:f4:20:4c:
                    fe:fd:ba:cb:9e:60:6c:7c:66:18:50:c1:9f:29:9a:
                    7d:0f:f0:79:16:ab:2e:aa:3a:17:d5:32:f1:d5:a6:
                    80:56:ce:62:cd:b1:fc:a8:4d:9d:9f:ee:25:66:cf:
                    3b:26:1f:33:c0:15:0e:fd:67:7b:bf:4a:a7:17:9d:
                    f6:37:29:2e:13:ff:d7:fb:34:a7:75:04:03:e2:d6:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:81:B2:8D:0B:3B:71:0E:9D:58:21:3A:6A:2D:1F:F0:0A:BC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/7b5872da-1fbb-338c-b627-c76119fe3e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:75:48:ee:8c:cd:1b:24:0d:21:cf:c5:26:4e:13:0c:7c:2d:
         f7:cc:c3:79:a3:d2:9b:77:fd:43:04:5a:b5:7b:ae:ab:51:af:
         7a:2b:63:15:ae:84:00:09:d8:69:b0:c9:b5:75:91:64:83:5a:
         7e:3d:4d:6a:d7:30:28:62:b1:43:78:69:64:56:66:db:7a:56:
         b5:e4:c7:f2:7b:f5:94:dc:01:f8:71:d4:d0:0f:a3:4e:b4:81:
         63:ef:ac:ae:5a:cb:31:8f:c5:57:ae:1b:62:dc:bb:e5:57:7c:
         14:fc:b9:b4:2d:b5:8b:e7:fe:61:15:84:28:79:82:7d:d8:b9:
         5a:15:db:6d:94:6d:fa:70:2c:ba:6e:54:a2:e6:7e:1b:d7:44:
         2b:2b:71:a4:ab:5f:9f:53:d0:98:23:04:c5:2f:a1:1b:fa:3f:
         f6:6f:5a:b7:dd:b9:d1:89:f4:75:f4:cd:25:f3:7b:22:1d:70:
         fb:d9:cd:ec:02:a1:24:b7:e8:2d:ba:ca:e8:ad:d5:9e:fa:15:
         01:95:1b:00:3b:e7:d0:98:e4:20:02:ee:ad:0c:77:87:b9:27:
         45:60:e1:f3:5b:ef:13:bf:c7:a6:d6:90:6c:c8:52:55:75:5b:
         ec:1d:92:3f:cd:62:de:d6:06:1e:48:4a:2f:d3:69:b1:77:41:
         69:50:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:45 2025 by rpki-client