Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/7b1f679c-d44b-3608-aa41-a4282203d095.roa
File:                     7b1f679c-d44b-3608-aa41-a4282203d095.roa (raw, json)
Hash identifier:          fTMhoLaEwTWOy+RqHM5G4M6xnFE+0nBO5v58IkLPKac=
Subject key identifier:   27:67:A9:A0:FC:63:FC:EA:F5:EC:23:25:39:55:12:99:21:DA:F6:98
Certificate issuer:       /CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
Certificate serial:       010D0C9F4328584A3E45A9F586FA40CE36050D00
Authority key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/7b1f679c-d44b-3608-aa41-a4282203d095.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     17378
IP address blocks:        74.80.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a9:f5:86:fa:40:ce:36:05:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=ecb24a89-06b2-4378-9e00-756027032899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:7e:b9:8a:31:6b:b6:aa:6e:b7:b5:02:fa:
                    a9:f7:24:98:a8:a7:fa:42:6b:d9:6a:c5:51:55:c1:
                    ce:7f:88:51:fa:86:2d:2f:da:b3:41:14:1e:f1:af:
                    5c:db:fb:57:fd:be:1a:ba:b5:1d:af:87:01:af:3d:
                    24:f5:fa:26:d9:b7:cf:6a:71:e7:d5:9a:58:6f:d3:
                    83:5b:ff:73:2f:48:e9:9e:8f:98:b3:a0:ce:34:3a:
                    13:ba:56:28:ed:ab:4b:23:e7:12:cc:d1:f8:cb:49:
                    44:0a:51:4d:1e:9b:1b:6e:0a:e6:7c:45:cc:66:6a:
                    35:52:bc:1c:6d:b2:90:c3:6c:a3:2f:5a:e6:9e:dd:
                    ba:56:70:40:f1:79:2f:70:7e:e6:71:8e:05:41:2f:
                    41:d1:ab:30:18:9b:41:8f:e6:83:81:5d:4a:c7:d0:
                    e6:ef:b6:da:ae:e7:e9:4b:96:24:92:f1:c1:87:1c:
                    10:68:02:cb:9a:23:fc:17:d4:24:7a:ca:02:c5:3c:
                    6a:87:92:1c:a3:1b:f5:0b:fc:6c:b4:ef:76:ad:63:
                    e8:44:59:93:99:cc:5a:5e:2f:55:d0:c2:8b:04:f1:
                    ce:17:c8:25:1f:ad:e9:e1:3d:0b:0b:1f:b9:f4:c1:
                    c9:1d:ff:41:b6:47:da:44:33:09:d2:ca:aa:e5:cf:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:67:A9:A0:FC:63:FC:EA:F5:EC:23:25:39:55:12:99:21:DA:F6:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/7b1f679c-d44b-3608-aa41-a4282203d095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:b0:f8:06:8f:32:c2:3c:bb:12:2a:a1:31:d0:0b:37:01:c9:
         35:36:b2:0b:20:94:be:b6:3e:c8:0d:e1:28:87:49:ca:3b:4c:
         00:67:bb:1c:6a:95:95:e6:03:a1:7b:f2:2f:e6:81:3f:0e:53:
         cc:ce:9d:30:cf:49:3d:3e:8b:aa:e8:37:f7:35:99:9c:2a:2f:
         76:d3:30:e8:58:e3:7b:f7:b9:7d:c6:f1:8f:ad:14:89:58:f1:
         f7:d9:48:8b:8c:a3:79:4e:26:ea:2f:b9:16:3a:d3:2a:d3:ac:
         67:39:3e:42:56:1d:15:77:f9:26:ec:c4:98:af:12:ae:0f:76:
         28:3d:d4:5a:99:7a:08:5b:db:ed:7f:3a:60:c6:67:9f:ce:ff:
         d6:e5:ef:6b:fd:3b:8a:bb:f0:c6:83:07:60:92:44:a9:72:44:
         7e:46:55:6f:06:bc:6e:fd:01:00:0e:bb:c1:73:3d:09:2d:11:
         85:5b:bc:a7:c1:47:1f:18:6a:93:94:60:f1:07:07:b1:71:20:
         b7:9b:6f:76:e4:d6:85:86:4b:ce:91:f4:25:c8:cc:22:09:54:
         77:06:47:42:82:16:28:18:2c:29:d3:8d:87:69:2d:5e:d7:28:
         7f:57:ec:cc:af:9e:24:33:9e:0b:ba:1b:8e:cf:1d:a4:35:04:
         f5:6c:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:31:55 2025 by rpki-client