Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa
File:                     8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa (raw, json)
Hash identifier:          bdY2veCFYyvoN+2sUacYYsICKtFX+eDmRVKcSq8NHTI=
Subject key identifier:   AD:44:C6:D9:1E:91:AA:D0:76:2D:8B:1C:7A:4B:E7:1E:7B:9C:84:05
Certificate issuer:       /CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
Certificate serial:       010D0C9F4328584A3E45A448ACCCED69BE59A2E0
Authority key identifier: E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     399761
IP address blocks:        74.117.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a4:48:ac:cc:ed:69:be:59:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=da95b871-d636-4cbd-909c-0d233f7a869b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:57:cb:2c:84:2d:d5:0e:f3:40:e0:4d:d9:
                    4b:7b:d5:af:d0:9e:6f:19:0e:67:68:62:ed:8b:04:
                    98:ee:7a:27:39:14:e2:e6:08:3a:12:65:12:a2:c5:
                    2a:e3:71:19:4a:8b:ea:b6:77:3b:f0:07:a8:3d:d2:
                    e0:f3:15:1b:43:c9:a6:89:ae:e3:1f:60:e6:dd:56:
                    47:17:f1:c1:99:b7:aa:b7:60:67:a0:0e:a3:8e:c7:
                    13:48:fb:ac:b9:bf:06:64:92:bb:15:71:9a:f9:79:
                    e0:5c:65:cf:ef:fb:f9:78:26:7b:3e:b6:28:24:53:
                    d8:b6:f7:d1:cf:3f:43:81:86:47:75:06:c5:43:bd:
                    76:44:20:d1:89:30:8e:dd:ad:fb:f8:60:d9:b3:db:
                    08:c9:6d:d7:cb:7f:f0:4c:87:b0:32:61:72:4d:b2:
                    56:9f:35:22:e5:30:ba:cd:81:fe:4b:48:ca:0d:0a:
                    72:c6:09:02:be:a1:43:37:5d:13:bd:27:3e:9a:d3:
                    f4:cf:40:1f:d0:58:e6:75:18:fe:0c:a7:92:4b:67:
                    09:19:b0:96:3b:b9:c4:cd:62:06:e4:3c:ed:48:52:
                    ac:8b:4a:98:29:4b:e2:b9:8c:13:a1:4d:62:27:52:
                    90:02:71:ef:e6:e5:36:04:ac:29:57:e9:84:87:82:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:44:C6:D9:1E:91:AA:D0:76:2D:8B:1C:7A:4B:E7:1E:7B:9C:84:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:68:f1:94:d9:a3:0c:d0:01:82:e5:9b:28:fe:c1:3e:9b:
         a1:95:5c:d4:90:dc:1c:40:e3:e9:5a:3e:3f:15:86:0a:a0:9f:
         00:f8:f0:e2:5a:f9:b4:31:65:90:ef:94:9a:4e:8a:fe:72:b1:
         3a:30:d8:b8:b6:86:4f:67:46:c9:af:ad:7f:a7:97:18:e0:b8:
         e7:2c:97:73:4a:6b:c2:81:47:71:fd:9f:72:38:a4:71:82:e0:
         12:ea:b1:2a:fa:79:ba:b8:c3:d0:42:56:4c:c3:92:19:0c:b8:
         1e:56:df:38:32:9e:3f:41:98:63:a3:77:8d:67:f3:3b:60:ba:
         31:d3:2a:96:18:45:0c:0d:ff:a8:46:0e:81:9c:3e:68:cc:a7:
         61:ad:2c:4b:b2:c2:bd:8b:f9:91:16:57:87:0b:5a:2b:99:b0:
         d3:82:64:6f:99:37:be:bf:e5:61:af:90:65:ed:5d:c7:62:5c:
         d1:0e:45:e0:45:60:37:73:1f:b1:f9:38:9b:97:f5:69:30:69:
         ea:0e:f0:24:67:bd:97:8f:0c:32:04:fd:dc:ab:20:41:7b:b4:
         dd:f0:1b:1d:d2:b5:4d:ce:03:7b:b6:8e:3b:78:1c:33:34:fe:
         7f:df:67:b3:78:b3:1a:1c:e2:85:b8:d1:2d:a5:7a:66:91:57:
         5f:cf:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:52:42 2025 by rpki-client