Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa
File:                     3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa (raw, json)
Hash identifier:          Y/9itXcMEYJA4IWEvUH60pKcmd+2fjxbvRHRuUoMLh8=
Subject key identifier:   CB:D5:EA:4E:76:08:17:07:4E:52:99:58:F0:6B:15:87:51:4F:3E:FC
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584900215E6F1D100C089159C780
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     19257
IP address blocks:        23.252.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5e:6f:1d:10:0c:08:91:59:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=8c9c8cac-32ad-4215-86ee-ed1b454459ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:f9:38:c8:ba:cf:de:60:03:5e:e8:74:75:
                    f8:7b:7c:93:17:90:c6:66:c0:2d:f1:cc:62:a3:e0:
                    0f:c1:7a:32:65:02:06:19:fd:57:fc:a5:ff:ed:2e:
                    e8:ec:8c:a6:36:ba:e2:c6:26:54:22:08:0a:b9:79:
                    bd:a0:4f:e8:76:6a:8c:ae:e9:36:13:cf:1d:d5:1c:
                    83:78:88:b2:d9:e5:da:d7:70:65:bc:c9:e2:f2:0a:
                    73:33:f5:e3:49:8a:5a:00:c7:3e:26:b7:f1:55:5e:
                    a5:57:ea:3a:c3:cc:54:40:fb:c0:17:6f:b3:17:3f:
                    e8:5a:40:e1:f3:9a:27:f6:80:31:3f:42:02:d0:07:
                    e6:65:22:18:90:f0:d0:24:de:6e:81:79:bd:b1:76:
                    c0:ca:01:2e:91:a4:f2:cb:af:67:88:fd:53:25:89:
                    a7:7c:1e:d8:c9:e9:4e:e4:ea:77:89:f2:3c:32:36:
                    13:cf:59:b0:ae:a0:d8:9e:57:b8:82:49:0d:33:21:
                    6b:c7:d2:4a:74:c4:84:b8:fb:68:49:ff:2a:57:f2:
                    e6:35:83:a6:97:a8:12:cf:2e:5c:0c:c8:1e:33:65:
                    b7:a4:cc:99:cd:41:9d:78:c2:41:87:13:4e:fe:74:
                    8c:c3:fb:f2:10:8c:52:f3:f4:1a:fe:c7:46:32:fb:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D5:EA:4E:76:08:17:07:4E:52:99:58:F0:6B:15:87:51:4F:3E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:45:22:14:a7:cc:c7:b3:22:66:67:7f:60:3d:f4:2c:1c:
         24:f1:8b:2d:6f:64:db:aa:83:9a:e0:3f:f8:49:de:6b:7b:cd:
         11:85:be:01:0b:51:f0:cd:ee:7a:ba:bf:f9:a8:78:ff:6d:e9:
         48:de:cd:38:b8:9d:14:97:58:02:b2:f3:cf:16:b8:90:f8:c6:
         e4:33:09:14:1d:0e:ee:89:6c:19:d4:86:ec:e9:d1:8a:b6:32:
         ae:e7:a0:45:76:e2:01:4e:26:71:f6:14:9c:1a:fa:85:76:e1:
         e6:d3:f0:c3:fd:8c:4b:fe:ad:a5:a3:aa:b4:9e:bf:02:15:db:
         b5:3c:bb:56:9f:43:ef:d7:56:7f:35:26:1b:ef:cf:2c:cb:8a:
         6d:d6:74:f8:56:e6:e1:34:c8:c2:f5:e7:ef:eb:e1:2e:37:73:
         93:c1:2b:43:c2:0b:17:b0:da:b9:d8:14:16:7f:3f:5c:61:10:
         c8:20:23:8a:6b:94:a4:7b:30:07:05:0d:a9:b0:bd:0e:db:65:
         95:93:07:4b:e4:89:bd:15:0c:5f:2e:85:f3:26:32:63:5f:64:
         fa:8f:c5:4b:76:0e:75:a3:b1:26:bd:00:2b:f3:9d:22:34:32:
         78:c4:fc:3b:25:30:d5:07:1d:5c:dc:f2:68:90:76:72:d1:02:
         58:77:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:26:09 2025 by rpki-client