Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4832b4f0-a969-3d3f-a757-a6724fae04d3.roa
File:                     4832b4f0-a969-3d3f-a757-a6724fae04d3.roa (raw, json)
Hash identifier:          QTYksLLzjyy5GQu0YwgXxTfQvLCqM0v5FLczkEpg5Vk=
Subject key identifier:   75:FD:49:DC:94:09:08:DA:6E:A5:EE:C3:DF:F3:54:29:99:64:25:DA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84C20393C72859E5FB26940
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4832b4f0-a969-3d3f-a757-a6724fae04d3.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        74.125.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:20:39:3c:72:85:9e:5f:b2:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=ed14d312-d886-4d9f-9704-7d33eddc9d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:ef:73:c8:9b:70:2d:fe:50:be:ca:f9:d7:
                    16:bf:77:f5:99:73:d4:fc:88:b8:35:2d:71:5c:86:
                    d8:27:d1:4a:b7:54:a7:29:38:f2:e1:bd:96:4e:d2:
                    56:d0:47:b4:9f:a1:bc:d7:ff:90:43:32:e2:80:a1:
                    e2:5e:40:bc:5b:84:f8:99:94:6f:76:30:41:15:50:
                    bc:42:3a:43:95:59:11:9e:6c:5c:61:b3:99:f1:d1:
                    27:d1:35:dc:a4:07:d4:4d:6b:a5:e4:ab:a6:c9:04:
                    52:90:fc:d8:87:18:d6:11:9d:07:1c:9a:7a:4f:8b:
                    8f:07:60:3d:4b:12:5f:66:b1:31:29:a9:e3:c8:2a:
                    47:80:b6:19:b5:e1:ce:cd:ea:b9:cb:48:34:7a:9f:
                    71:e0:b8:d3:f6:06:7a:b1:46:b6:6d:c9:ef:30:83:
                    8a:2a:67:d0:7f:5a:50:77:01:93:67:7f:8f:e5:a1:
                    23:0e:83:44:91:a0:58:cc:d0:c0:00:7e:97:7d:0a:
                    ff:a7:79:8a:76:62:9c:89:08:49:41:54:77:fd:8f:
                    3f:45:8b:42:bb:23:b3:70:8a:2d:c2:eb:94:1d:77:
                    c6:49:ad:8e:f0:b0:ef:a4:e3:0f:74:55:05:ef:76:
                    e8:bc:05:70:e2:03:dd:44:97:e8:fc:86:e7:8a:c3:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:49:DC:94:09:08:DA:6E:A5:EE:C3:DF:F3:54:29:99:64:25:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4832b4f0-a969-3d3f-a757-a6724fae04d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:ec:dc:ff:a3:5e:99:2a:f3:b3:76:38:41:37:54:9d:86:
         49:64:e6:f2:11:4b:f9:40:4c:7d:a7:92:cb:3f:a3:7b:e3:f0:
         43:71:42:69:df:40:6d:f6:61:65:0c:03:ee:67:b6:64:03:1c:
         0d:d3:0b:dd:5c:71:90:80:ef:18:fc:89:c6:24:6f:e5:a2:a7:
         cb:a0:18:ab:ff:cb:24:b1:95:42:21:51:9b:ec:cc:13:d2:45:
         12:8a:6f:c2:72:57:ae:b6:df:bd:fa:f4:60:d1:b2:ff:f3:75:
         3e:ac:22:28:b9:ad:a4:10:2a:be:a4:ac:09:5d:00:de:33:93:
         ba:67:fc:ce:5c:7e:39:5e:33:5d:de:33:2d:9c:80:85:29:96:
         85:fa:96:26:64:02:7c:38:2c:24:90:c3:0c:db:6f:3c:f3:75:
         a0:2f:be:eb:b2:78:f3:11:53:3b:64:32:3c:ce:5a:28:17:fe:
         1d:7c:8e:a2:a1:cc:f1:d7:ad:ff:84:4a:6c:fb:c6:39:2e:ec:
         13:2a:ce:94:c0:70:2c:5a:86:da:f5:1c:84:68:7a:35:f7:6e:
         1f:e8:9e:08:ad:46:ac:a2:a3:a9:9c:b2:b2:7b:b5:0b:54:a1:
         20:8c:75:0a:8b:c0:e6:b4:18:c9:0c:3e:82:a0:b1:5c:0a:b7:
         bb:9e:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:42:17 2025 by rpki-client