Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/74f940ef-a5a5-3cdc-994d-05fec743f183.roa
File:                     74f940ef-a5a5-3cdc-994d-05fec743f183.roa (raw, json)
Hash identifier:          9LptxkNjtZXhd88rAbPL9vcfVlUDc6L66N/nf1g8ibU=
Subject key identifier:   18:0F:9B:B9:99:44:AE:CA:C2:0B:03:8F:45:C3:CD:26:F2:63:71:B8
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F43285848A29B48D9153A10EF73A42800
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/74f940ef-a5a5-3cdc-994d-05fec743f183.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     8075
IP address blocks:        170.88.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:48:d9:15:3a:10:ef:73:a4:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=1a7c9365-a8c6-4fa4-8bd8-8b996e3ebaa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:dd:b2:67:2f:8e:51:07:bd:21:5b:d7:25:
                    86:a3:c1:71:f3:15:e5:9a:28:60:9d:28:44:a8:7c:
                    f2:7a:cd:8f:52:8e:cb:b9:84:b5:55:d6:55:d8:79:
                    55:6e:49:af:20:89:28:c4:7a:4b:a8:eb:f0:d6:c8:
                    11:2a:04:c6:78:39:48:2e:65:48:61:24:97:a7:85:
                    02:d2:5f:27:88:e3:f4:78:61:f3:9c:85:8a:62:ad:
                    12:c6:6d:93:63:b2:8b:bc:16:cd:52:00:6d:51:19:
                    95:80:c1:69:eb:f5:d2:83:e9:87:e5:7d:c4:8e:72:
                    b6:14:b6:60:63:d2:fe:e7:c8:90:50:23:24:ba:6a:
                    3c:6b:35:f2:66:9c:6c:b9:ff:ea:70:95:11:1e:54:
                    bb:ac:58:35:12:09:02:f0:df:8e:6c:12:51:66:06:
                    54:4f:bc:7f:03:ae:a4:78:97:e9:dc:57:0d:ea:bb:
                    61:ab:c2:d8:6a:8b:3f:5f:cb:09:7b:43:d3:8e:f5:
                    9e:6e:92:a5:48:7f:34:8b:6e:d5:a1:a0:9b:c9:fd:
                    33:92:8a:93:73:fb:e3:b5:fb:91:2d:63:b8:46:00:
                    77:3c:b6:7a:00:f6:af:c3:71:04:a7:57:02:f9:5a:
                    26:44:fd:26:99:d3:3d:c8:55:01:7e:eb:8b:25:be:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:9B:B9:99:44:AE:CA:C2:0B:03:8F:45:C3:CD:26:F2:63:71:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/74f940ef-a5a5-3cdc-994d-05fec743f183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:fd:2f:6e:ad:e2:c8:9f:2e:93:68:75:92:cc:51:d9:2c:
         f3:d9:26:e3:94:dd:4a:d7:89:fe:50:ab:ed:73:04:32:0e:f9:
         6a:76:5b:b2:49:76:a8:21:f3:be:72:59:1c:46:26:e3:1c:ac:
         bd:b3:37:b9:de:1b:02:2d:dd:1f:15:44:7f:5f:03:ea:f1:3b:
         12:7b:5c:5b:0b:bf:bc:0e:5f:73:7d:9e:27:53:2f:05:af:1c:
         5a:fd:ef:b8:ab:33:1f:b1:da:d4:7b:dd:12:58:99:4e:ba:62:
         51:fb:29:a7:0c:70:a7:37:48:70:58:78:9b:60:65:93:1d:cc:
         32:36:2e:64:c6:76:a9:fc:ce:f9:b1:91:cd:14:f7:5b:37:e3:
         79:c9:d7:85:24:89:03:11:65:3e:f1:4a:89:88:df:28:03:e3:
         91:0f:c6:43:d7:2e:3a:a7:ec:44:fe:27:39:37:e0:a1:ce:1d:
         41:28:5a:1d:1d:26:8f:70:8f:31:77:b3:33:c5:5a:5a:fd:d3:
         eb:6d:21:d2:05:13:4f:3a:27:10:83:2b:1e:f0:b9:99:59:73:
         b8:f0:b7:31:0a:08:81:f3:2d:b7:78:d6:34:41:aa:b2:b4:6f:
         1f:1a:23:64:f7:29:84:c4:24:b7:18:b9:6e:99:70:20:fa:6e:
         2a:da:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:02 2025 by rpki-client