Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144d72ee-b024-374d-8491-38c42d41affb.roa
File:                     144d72ee-b024-374d-8491-38c42d41affb.roa (raw, json)
Hash identifier:          kkGCbBC++KjlYH2nGvqFN++wA19z5SioAu7nDG8xnG4=
Subject key identifier:   1E:B3:89:87:56:BC:5E:3F:D0:34:91:9B:CC:57:DC:E3:50:A8:C6:47
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84BED0533FBDF0B166067A1
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144d72ee-b024-374d-8491-38c42d41affb.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        74.125.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ed:05:33:fb:df:0b:16:60:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=84ad61fd-92d1-492d-a3d3-966cae7d9547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:0a:c2:7d:34:27:84:f1:e0:55:93:28:00:
                    22:12:f4:0d:aa:c1:10:bb:31:07:ec:0f:eb:52:69:
                    fe:7e:8a:c1:22:74:78:5b:34:91:61:bc:28:66:ed:
                    01:07:08:44:cf:bb:57:ce:3c:4e:fc:a4:dd:ef:29:
                    7c:72:ae:4e:67:9b:0d:e1:1e:00:dd:f4:3f:47:64:
                    da:20:ea:52:31:f4:79:50:cc:e5:ec:d3:f7:d0:a9:
                    95:24:2b:c7:1b:9e:ae:89:8c:fb:91:aa:b7:0f:27:
                    ae:3d:d6:06:2e:9b:b0:b1:13:ba:d0:7e:84:aa:e4:
                    76:0e:6b:89:b0:fb:54:90:f1:e1:ab:89:14:da:2f:
                    58:79:3c:1c:dc:70:ed:96:92:12:84:40:98:93:3a:
                    67:b2:eb:97:c3:4a:d8:c6:82:6c:17:27:9b:86:bb:
                    a6:9b:e1:55:69:fd:03:97:f7:05:ba:f0:b9:ea:f6:
                    95:55:42:11:12:8c:a3:d5:a1:93:67:18:5c:d4:27:
                    1b:59:eb:94:c3:90:8d:3f:a7:5f:6f:d3:cc:66:c6:
                    ac:40:a7:29:85:cb:15:63:88:da:d2:e2:00:f7:02:
                    65:60:41:bd:7b:eb:31:11:01:66:7d:42:84:95:b6:
                    fc:ed:10:78:77:62:9a:fa:19:e6:cc:c2:08:60:83:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:89:87:56:BC:5E:3F:D0:34:91:9B:CC:57:DC:E3:50:A8:C6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144d72ee-b024-374d-8491-38c42d41affb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:75:1f:d5:fd:ed:54:25:ac:9a:37:11:e3:99:a1:f3:c5:
         50:94:f4:8f:6a:eb:ee:fb:5b:8e:1d:2a:ff:d2:56:08:dc:7f:
         87:17:52:2f:1f:d6:96:24:4d:3c:c5:e4:84:b8:8f:40:d9:b9:
         98:ef:7b:9a:2d:29:f9:e5:71:1c:0b:4f:83:b9:9a:94:0f:57:
         ba:33:de:a4:7a:73:16:37:dd:31:d0:43:bf:22:83:be:90:3d:
         0e:48:11:4f:28:01:50:d7:6c:a9:c9:61:90:94:6f:2d:52:72:
         b0:6c:26:22:24:ad:a5:6f:0f:41:ab:95:5f:44:cc:ef:0e:7a:
         2b:f9:42:d7:d2:5e:ca:8f:f6:dd:5f:83:9c:7f:34:83:d9:1b:
         23:8c:8f:df:81:41:49:e3:9b:71:44:af:f8:10:1f:c4:44:eb:
         eb:10:f8:20:51:2c:ae:df:3c:63:be:ce:93:39:c5:a1:5b:de:
         8c:79:6d:a7:f3:8d:f5:1c:71:b1:e2:9a:ec:79:41:ec:c2:b6:
         b6:59:25:26:7a:53:3b:39:eb:2e:91:ec:7e:fe:64:c5:4e:df:
         bb:af:8a:26:c5:d0:6d:c4:a7:39:5b:05:cb:84:75:3d:a2:ce:
         42:42:e3:66:15:dc:4f:71:2f:1f:39:55:88:99:85:c8:84:5d:
         5c:a4:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:56:05 2025 by rpki-client