Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46c6146f-b15e-3605-8ee1-f5bd041231ff.roa
File:                     46c6146f-b15e-3605-8ee1-f5bd041231ff.roa (raw, json)
Hash identifier:          suom2TJ1BI4b3wsHl46idZrFC/UqM7OgXnpMseYufJI=
Subject key identifier:   D9:80:E4:3B:6D:74:77:D5:A6:E4:EB:40:3E:29:20:44:C1:63:08:57
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA91FE25D8FEBBCBB45D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46c6146f-b15e-3605-8ee1-f5bd041231ff.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        74.13.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:91:fe:25:d8:fe:bb:cb:b4:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c296623c-052b-4c95-b7ed-9d43bedceb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:f4:f2:c8:9b:6d:a3:47:6f:f7:b1:77:fa:
                    8a:26:e1:a9:25:54:aa:5b:20:56:0b:dd:ec:f8:ca:
                    99:8a:c2:8e:61:54:a7:00:08:c4:10:c3:23:9b:32:
                    82:9d:40:85:d3:d6:8e:ed:ef:2c:5d:3b:be:a3:dd:
                    12:18:55:a0:ce:10:ab:1e:6b:a9:a9:a2:e5:96:97:
                    68:fa:fa:10:a1:d5:ae:c6:cf:a1:9c:34:e8:8d:3e:
                    ae:be:86:1f:6a:aa:82:7e:85:ef:dc:7e:7c:a1:b1:
                    f5:a4:c7:aa:2d:d8:8a:23:3a:c2:be:1f:14:e6:1e:
                    4a:57:5f:3e:13:d0:6a:36:20:42:6f:04:94:6d:a9:
                    f2:d6:7c:e0:82:88:9d:68:ec:f3:60:39:54:1b:77:
                    27:3a:58:ab:74:27:68:0c:f9:81:da:4b:e3:6d:95:
                    41:a7:a6:25:8a:53:67:d5:52:f8:84:1b:fb:7e:f1:
                    fc:d0:11:4e:b9:5f:4e:a8:b7:5e:fa:51:b3:33:33:
                    0e:cd:46:c0:dc:a0:f1:44:3e:dc:e9:6f:42:a7:e4:
                    c4:d6:50:b9:9e:7a:00:4e:7c:26:1a:e7:5e:ca:d6:
                    fd:02:a9:35:93:d3:dc:66:9b:75:ff:f3:a5:de:a6:
                    03:c3:91:b5:5a:62:e7:f3:7e:98:fb:7a:b9:e6:f9:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:E4:3B:6D:74:77:D5:A6:E4:EB:40:3E:29:20:44:C1:63:08:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46c6146f-b15e-3605-8ee1-f5bd041231ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:09:62:5c:27:5c:a3:8d:22:bb:77:cb:2c:91:33:da:60:
         25:c7:73:d5:51:ce:8a:3c:02:bb:3f:0f:15:d8:af:2e:84:d0:
         95:8f:c1:79:ea:3f:c6:f6:02:b1:42:18:bc:bb:0f:73:03:b9:
         56:ed:f2:1d:f8:9f:43:f7:da:94:e3:16:42:47:ca:f8:f2:57:
         63:83:4c:92:a2:4f:93:2d:f7:d1:d3:1d:d2:2b:5e:6d:d1:e3:
         ca:77:ec:05:e1:be:53:b1:22:f7:56:13:19:e4:65:f8:d6:d4:
         1d:32:b9:52:40:5c:72:83:8e:5d:99:81:05:36:1b:20:75:a6:
         cd:2a:94:6a:e0:3a:54:8d:29:a5:e6:d8:1c:32:e4:5b:ac:9a:
         c4:6b:3b:a6:7b:ad:18:f4:49:6c:aa:81:50:06:f3:c5:95:ea:
         11:b5:30:e0:ee:3c:5a:74:50:98:4a:84:7c:a7:82:40:b8:7d:
         08:1a:c6:2a:63:05:2d:4a:df:58:9f:7f:a0:fd:02:d7:89:1a:
         74:6d:3d:44:c4:83:c4:44:8a:04:55:48:7e:13:4e:c7:8f:33:
         6c:dd:57:2b:ce:f9:e0:88:31:ec:f5:3e:ce:7f:5c:5c:28:fc:
         00:c7:09:be:d8:a2:88:8c:f7:21:79:af:eb:ad:16:d1:ba:c0:
         ee:1b:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:53 2025 by rpki-client