Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16a87420-b6a8-39ed-a75a-fe4901c8f223.roa
File:                     16a87420-b6a8-39ed-a75a-fe4901c8f223.roa (raw, json)
Hash identifier:          NmamTc/IcG8TcDdM+fTAvmwKa9+c+7yche5hpovnHOY=
Subject key identifier:   C4:7C:AA:63:33:79:F5:5A:92:74:39:78:8A:12:6F:4F:9A:A0:24:21
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197193314191A8B6B82DB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16a87420-b6a8-39ed-a75a-fe4901c8f223.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        74.15.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:19:33:14:19:1a:8b:6b:82:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4aca0886-f1de-4516-bb30-f0d719341142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:09:bf:d0:4a:22:06:75:77:eb:8b:b0:77:
                    b4:bd:ba:82:4a:59:8d:20:89:22:d1:b5:ac:b1:92:
                    0a:74:10:89:8e:55:72:b3:89:03:f9:dc:c4:9d:31:
                    f0:34:d2:69:a0:c9:db:2d:55:58:74:2a:6e:f0:b2:
                    c7:be:19:ff:e9:94:cb:24:a1:d0:35:48:8a:eb:24:
                    fe:10:0a:9f:36:ea:b4:e7:0b:81:5e:ce:ff:99:39:
                    3d:d4:34:84:65:6f:f6:d7:52:fd:ce:4a:8d:dd:0b:
                    f8:74:7e:e5:fa:ad:1f:25:0a:79:93:b8:13:69:e4:
                    09:52:b5:c3:8e:a7:43:3c:4b:61:64:83:9c:56:d7:
                    d1:9b:74:58:5e:0c:b4:c1:d9:70:5c:14:f8:e3:e2:
                    b2:07:91:d3:49:20:d2:42:79:82:e8:de:66:c6:80:
                    fd:bc:6c:13:70:1b:08:23:e3:cc:9f:f6:fc:32:63:
                    3b:2c:46:08:0a:86:b8:d4:5f:ce:df:6e:38:97:0f:
                    d5:eb:30:6b:c9:0d:7e:46:16:3d:04:0d:e8:ad:f2:
                    98:cf:a4:fb:a6:89:56:fb:84:2a:50:15:45:42:24:
                    ac:1d:97:82:46:a2:ce:fa:a1:7d:86:53:c8:5e:df:
                    cc:09:c1:20:c6:d1:97:a6:a6:cd:95:58:5f:52:dd:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7C:AA:63:33:79:F5:5A:92:74:39:78:8A:12:6F:4F:9A:A0:24:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16a87420-b6a8-39ed-a75a-fe4901c8f223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:69:b0:38:0a:bf:02:4d:17:ee:d8:5c:0f:cf:4a:ca:44:d0:
         4c:05:72:5c:2d:36:90:09:e2:1a:d5:9e:54:db:07:ad:3a:9a:
         1f:bd:41:b9:85:7f:40:b3:40:43:62:2d:c1:7b:c7:ce:43:89:
         97:3c:8d:75:0f:59:9d:e9:68:95:77:5f:f5:a0:dc:00:31:4b:
         2b:98:f3:42:be:55:a6:37:92:1f:bb:c5:2a:6f:fe:2b:fe:2e:
         9a:51:37:76:62:eb:8d:9e:d5:74:5d:69:dc:b3:42:10:56:05:
         e8:51:50:16:db:d0:b9:20:a5:25:b6:e9:06:e4:d7:3b:f1:f2:
         cd:89:3c:89:8a:4b:51:d7:c7:b8:08:48:12:66:41:1e:71:26:
         ce:7e:da:b6:00:0d:be:4e:2f:d5:06:93:e9:50:8a:a1:48:e5:
         b6:97:56:4b:19:01:b6:1b:4b:24:77:09:61:e7:8b:3c:42:e5:
         04:1b:6a:38:a7:b0:41:57:dd:86:ab:87:33:24:d3:07:c1:f2:
         ab:cb:4f:90:51:7f:40:f3:67:9b:f0:c3:14:9f:40:4d:02:43:
         9d:8c:5c:44:86:d9:4e:1b:57:12:93:42:8d:6e:8e:0c:e9:1c:
         ed:87:02:36:f6:a3:32:5f:88:97:fd:cb:bb:a9:9e:a3:42:38:
         c6:c0:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:08 2025 by rpki-client