Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa
File:                     e33fcabc-b77b-3869-b070-63c53fd0f768.roa (raw, json)
Hash identifier:          RSUuL3yLe0Blc2Rx6/Wikwxw5K7wfzp2eSSYe7fkUYM=
Subject key identifier:   4C:B7:0C:55:1E:E1:F7:E8:E1:6E:A6:3C:87:F1:A8:59:90:87:DC:E2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84BB31672C85C5DD457EB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        74.125.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:b3:16:72:c8:5c:5d:d4:57:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=994530bb-e513-43b6-acd6-43315adebbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:eb:db:df:06:07:57:11:01:b0:28:87:61:
                    95:28:7d:72:0d:17:9b:69:87:08:50:c6:78:5e:ce:
                    17:57:8a:0b:ed:2c:b3:d0:8f:f2:de:e2:25:aa:88:
                    c9:86:93:72:0d:ba:1a:d8:8a:7c:4b:14:b9:0f:b3:
                    d9:32:ee:d9:8f:29:f4:cb:cb:13:34:6a:52:a8:b2:
                    96:b9:c8:e9:27:1c:77:9a:87:fa:26:92:0e:ad:58:
                    2e:a4:62:09:3d:cd:51:21:b8:0d:48:2c:22:93:3f:
                    25:31:c0:c7:17:ee:25:12:de:15:dd:3d:74:2b:f8:
                    e2:ee:1f:ac:9f:82:e5:27:e1:cd:97:b1:72:e7:fb:
                    d6:8c:b9:81:2c:b9:84:b4:94:ee:84:c8:8d:43:78:
                    48:a9:d0:2a:32:b3:d8:f3:51:16:88:0b:fa:b1:2d:
                    b2:1f:94:9f:a3:3c:cf:6a:cd:e9:82:ca:14:27:e8:
                    2c:26:dd:0f:be:d0:4d:cc:cf:92:c1:8f:22:78:e6:
                    f5:0b:2d:65:07:79:fd:30:a5:73:27:06:b3:5a:52:
                    bf:a7:0c:c4:ec:3e:93:ba:71:69:d7:e5:a3:95:7a:
                    98:59:40:7e:c6:5f:28:64:dd:d9:ed:65:d5:ad:8d:
                    2e:67:18:d9:15:cc:77:d7:b0:14:a2:98:b4:ba:98:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B7:0C:55:1E:E1:F7:E8:E1:6E:A6:3C:87:F1:A8:59:90:87:DC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e33fcabc-b77b-3869-b070-63c53fd0f768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:76:98:56:96:53:d5:5a:89:b8:2a:ee:6b:2b:04:d8:69:
         be:2e:b8:c6:61:69:31:6a:3d:91:f8:49:69:25:3b:2c:6b:2a:
         eb:c2:2f:a9:7c:0c:7d:ab:60:fc:08:04:d4:f1:df:35:fc:df:
         5c:4c:29:5c:cb:aa:54:c2:6c:ed:96:6d:e2:2f:81:44:ff:b5:
         a2:d7:f7:b7:9a:38:99:f8:37:1e:f9:fd:7f:3f:1d:e8:e9:ff:
         dd:a9:d7:a0:76:b9:8e:f7:44:5d:6e:df:30:11:91:dc:02:af:
         ea:2c:69:ff:83:9b:9f:1b:65:17:d1:f9:40:f0:db:0d:1c:16:
         ce:df:b9:57:1a:2e:a7:27:3a:cc:5d:35:a8:f5:eb:1f:5e:cd:
         a9:63:58:a5:34:7d:90:fb:2a:3a:c1:c7:17:a1:78:fa:d2:0e:
         92:c9:dc:6d:5a:1a:2b:8e:ac:d4:4d:6c:3a:75:b1:91:59:c7:
         b5:18:4d:7e:bf:bb:56:87:59:9a:92:1c:5f:f5:b9:43:ba:f0:
         5a:ff:ce:34:a0:43:f7:60:8c:62:c4:70:59:eb:11:55:cf:c9:
         17:dc:bf:8b:05:79:71:c9:83:96:6f:a3:1a:30:68:81:1a:f4:
         8e:3e:76:e6:e3:96:88:78:bc:a4:53:1a:a2:c1:f5:57:d9:c3:
         bf:92:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:26 2025 by rpki-client