Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/a55208ba-b471-37fe-8b5f-e33b55b6a7ad.roa
File:                     a55208ba-b471-37fe-8b5f-e33b55b6a7ad.roa (raw, json)
Hash identifier:          08R5wxsyGA3JCd4bu6ptmvJGRXsB4LZ2DPT2dHqtOgA=
Subject key identifier:   DC:0B:65:F1:17:1D:9E:17:C9:83:ED:F6:6F:4D:65:72:9F:B9:60:CD
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F43285848F65BE2DB6A910F3236066800
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/a55208ba-b471-37fe-8b5f-e33b55b6a7ad.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        74.117.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e2:db:6a:91:0f:32:36:06:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=2a75b421-7861-4fd3-ac60-748db63eb666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:54:a3:dc:de:51:3c:8e:41:9d:bc:9d:36:
                    b7:7b:d6:ef:98:18:11:b7:d5:41:ba:45:14:88:f8:
                    32:62:3f:3f:99:a5:7b:f0:27:9a:df:63:78:a8:d2:
                    2a:f2:61:63:46:e0:89:35:c7:58:6b:64:81:eb:ca:
                    c6:2c:b9:39:a6:f0:38:c0:e0:3a:51:34:fc:1e:17:
                    32:2a:e4:db:20:e6:73:6c:73:40:df:3c:61:20:50:
                    f3:49:9d:22:08:61:f3:28:b1:4b:94:bd:ef:42:31:
                    8d:88:4b:94:1e:36:3d:f2:d7:ef:51:fa:99:03:12:
                    fc:e8:a7:bb:f3:00:32:ff:f9:60:00:cd:a9:61:04:
                    1a:5f:78:f7:88:de:1f:d6:b9:10:6e:c1:1e:32:aa:
                    b6:02:2d:e0:bf:c5:73:d6:56:7a:df:99:f6:92:97:
                    dc:ea:af:7c:e8:1e:e8:9a:d7:e4:f7:a2:1a:5a:0d:
                    0d:ec:07:9c:c3:4e:08:92:4c:1b:6b:cc:64:c9:4f:
                    2f:d2:8d:d5:d4:cd:87:db:a9:01:7e:45:f6:18:3c:
                    16:06:d0:fa:bc:0a:7a:a8:aa:08:63:15:27:04:65:
                    26:ec:52:4b:59:68:8b:4c:cd:b3:b2:f8:89:af:52:
                    4b:dd:ae:38:92:9a:58:87:e1:9e:7b:8d:34:46:bc:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0B:65:F1:17:1D:9E:17:C9:83:ED:F6:6F:4D:65:72:9F:B9:60:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/a55208ba-b471-37fe-8b5f-e33b55b6a7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:54:3e:41:73:22:f8:69:59:b1:95:69:54:57:91:16:ea:06:
         26:ec:29:af:00:36:8d:a1:93:88:4b:35:98:73:f8:cd:3d:af:
         e6:7f:5f:10:3c:b8:3c:fa:dd:e2:6b:82:df:53:39:68:84:fb:
         1e:16:e3:81:d1:68:08:87:a0:71:a7:08:c6:2f:e4:38:b9:87:
         0f:c5:28:8b:dd:cd:b6:e4:fd:e9:5e:46:d1:df:6e:bb:6e:f3:
         3c:68:1c:f1:9a:1f:5b:f9:0a:a0:00:c5:61:cc:63:c6:a8:47:
         4f:59:c1:f5:87:ec:ed:0b:17:cc:e5:94:80:3b:85:81:56:41:
         d1:e1:26:7c:30:52:a8:33:c5:2a:e7:fd:8e:5d:0f:fc:0b:53:
         c2:35:89:2e:a8:f6:6a:f4:18:30:f1:ad:d6:90:64:1c:20:6d:
         52:f3:f5:f6:5c:f1:07:7b:11:ef:ac:f2:cb:ce:5f:3e:50:ae:
         e9:f8:86:e5:2a:d2:04:f0:7e:9d:aa:ce:15:d0:60:b6:0b:2b:
         46:bf:8f:c0:6b:3e:41:c0:7b:ef:73:12:34:a7:32:70:20:50:
         79:d1:50:ff:dc:6c:0d:de:3d:13:ed:76:68:7b:ef:25:3a:c5:
         b9:e8:ed:90:2a:6a:50:bc:8a:0e:29:53:50:82:a9:77:fc:6c:
         76:83:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:12 2025 by rpki-client