Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
File:                     fa7de386-946f-3fd2-80ff-439e4566d9cf.roa (raw, json)
Hash identifier:          hbiKMY24Q+f91sv9wP2FI43Dmprmq4nuc4lBnwocjKA=
Subject key identifier:   D4:BE:56:28:89:1D:4F:3E:B7:AC:C6:B8:38:98:F5:FB:A9:34:6F:0F
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285848DA70F73045AAE8BE024648E0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     174
IP address blocks:        207.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f7:30:45:aa:e8:be:02:46:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=4bf77be3-1114-4c5b-8784-4bcafe224ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:0b:e0:97:f9:90:92:e6:da:73:ed:36:d1:
                    e3:58:8e:93:e0:e8:4d:f6:50:e1:5e:de:8b:5b:dc:
                    83:66:22:e7:05:51:cd:d2:6a:59:af:ef:d5:96:a6:
                    7c:e6:65:04:6f:43:16:27:a9:7b:4a:82:55:7a:64:
                    d0:73:7a:2f:49:41:eb:52:2d:60:22:9d:45:c5:a9:
                    de:75:a2:35:76:bf:94:e6:70:8b:c3:bb:67:1e:cb:
                    db:0b:74:d1:d2:c9:83:70:a8:e8:a6:6b:7d:ed:b2:
                    8d:82:d8:e4:b4:ba:d5:6f:da:e9:b3:94:2b:14:3e:
                    c0:3e:2c:65:a1:4b:3d:92:82:6b:45:f4:e4:b0:e8:
                    b2:61:e2:7c:4a:81:7d:84:a1:a1:d3:f2:6b:96:67:
                    a5:a6:14:50:ee:b9:94:93:c2:39:b9:77:ef:c8:90:
                    7c:0b:78:be:fc:d4:b1:0e:82:bf:bb:ae:47:a3:4e:
                    d3:b3:68:91:80:80:2f:bc:8f:73:36:27:a6:b5:64:
                    fe:01:35:18:96:ec:45:da:2a:1a:64:3c:71:91:fc:
                    eb:e9:09:5a:08:38:20:9d:4f:b4:a3:2e:19:ad:c6:
                    a8:aa:2a:33:81:e2:2a:de:da:7c:14:19:40:73:55:
                    a1:cb:c5:a6:77:93:a4:69:f4:98:82:aa:75:e6:fe:
                    3f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:56:28:89:1D:4F:3E:B7:AC:C6:B8:38:98:F5:FB:A9:34:6F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:e3:27:4b:2a:a8:3d:63:d9:c9:49:75:61:b0:5b:11:c7:
         dd:3e:8a:d7:24:73:60:2f:9c:eb:01:06:6d:68:83:17:e3:0b:
         8e:ab:44:2f:a9:70:1c:2d:bc:71:66:27:be:58:85:2e:31:ca:
         d6:5b:5a:f5:50:07:09:dc:1c:14:f9:cb:5d:b0:f9:6a:62:38:
         5b:c3:12:69:8b:70:22:16:10:dc:71:c7:9e:02:21:1f:eb:d5:
         98:72:6a:86:da:43:02:52:80:88:4d:d6:a2:0b:ad:de:c1:44:
         0c:9b:5f:86:95:97:0b:71:3a:6c:f5:37:bd:38:eb:8b:0f:dc:
         c4:23:3e:b6:35:5e:0b:bf:9e:e3:42:50:2d:25:2a:0c:22:ea:
         0a:c9:97:26:5f:5e:ad:14:25:0d:a2:49:13:28:88:37:35:29:
         9c:54:00:4d:82:69:31:ad:7f:92:27:73:3e:9f:90:bf:c0:29:
         74:19:c2:c3:0a:20:f7:2e:cb:bf:b2:c8:a0:fe:ea:6a:3e:73:
         b3:12:11:e9:7f:65:14:6b:06:b4:45:8f:f8:a5:02:89:a1:39:
         80:91:03:03:c9:cd:50:9e:79:63:3a:b2:db:d1:ee:73:ac:6a:
         40:8f:98:0f:6e:0b:63:fd:89:45:72:08:fb:2a:00:e6:53:b5:
         f6:a5:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:52 2025 by rpki-client