Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/074a9c4e-1d46-351f-8a9b-ba435062d31c.roa
File:                     074a9c4e-1d46-351f-8a9b-ba435062d31c.roa (raw, json)
Hash identifier:          vroicVXTAGk0gyN4HYAq2mGe91bvtbh2lewxDng40VU=
Subject key identifier:   C6:C4:46:8E:B2:F3:DA:41:40:00:B3:A0:EC:3E:90:D6:14:90:A5:9C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB452DEB4A8E5874E71E2740
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/074a9c4e-1d46-351f-8a9b-ba435062d31c.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        64.237.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:2d:eb:4a:8e:58:74:e7:1e:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=83184b7e-1ec5-4cb7-ba9a-0287d4b821d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:2a:06:0c:cf:69:27:d3:aa:da:ff:90:81:
                    6c:70:a4:a5:8a:6f:71:47:b3:3d:d9:18:47:22:30:
                    d7:52:ff:ef:89:6a:da:13:78:56:37:4e:b5:a6:ff:
                    a0:b2:ea:8b:34:51:e4:9c:ec:00:6a:e9:16:71:d5:
                    34:0e:c4:2e:ee:14:64:3c:9c:84:10:ea:96:88:15:
                    da:e0:20:12:02:58:f7:69:ba:b2:77:5e:71:e3:bf:
                    ba:57:40:d0:8b:f8:2a:88:82:4f:b7:71:72:ae:94:
                    c8:30:db:69:0d:eb:6c:8d:0f:94:6b:b1:ae:42:88:
                    ff:f0:31:93:b1:5a:f7:ef:a4:0e:a2:dc:7a:8d:bc:
                    b7:fa:d6:19:8c:ef:9e:8f:76:59:1b:db:ec:c8:84:
                    45:7a:41:5b:c5:27:a1:6d:5d:5b:b9:40:9c:f0:21:
                    d8:3b:52:2e:6c:07:2b:8f:0f:aa:f0:ee:22:5c:f5:
                    fb:06:db:6d:19:fe:00:32:bb:19:9e:42:24:f7:6d:
                    6e:53:7d:e1:fc:9c:ed:ec:bb:cd:3e:a6:ef:6a:dd:
                    94:49:90:fb:e2:7b:a2:ba:0c:f5:a2:35:b6:20:23:
                    1b:59:85:1a:49:1c:d5:a0:4d:13:b7:3b:d5:f1:b7:
                    96:67:b9:94:47:7d:fb:a2:60:b0:c1:28:b5:4d:e0:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C4:46:8E:B2:F3:DA:41:40:00:B3:A0:EC:3E:90:D6:14:90:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/074a9c4e-1d46-351f-8a9b-ba435062d31c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:41:6a:63:2e:78:a0:c7:4b:2a:62:d0:5c:0d:fb:8d:96:ca:
         91:2a:c6:69:49:3b:0c:88:16:e5:87:be:b3:97:03:ab:29:72:
         27:2c:3b:23:5c:5d:87:a7:4f:20:98:c8:05:aa:39:21:7d:f7:
         2e:da:de:5f:c2:5d:7f:8d:50:2b:83:c8:44:ea:16:4f:9e:5f:
         66:d6:ce:5d:65:ae:ee:3a:67:f2:3d:30:0b:1c:22:e9:e0:fb:
         57:d7:f1:9e:ab:2a:33:c1:7c:b4:ca:5f:81:12:2d:04:ae:e3:
         eb:e8:77:1a:83:1a:ed:a3:ae:b0:33:8e:63:3c:ef:e0:e7:54:
         fb:65:25:97:c6:ae:08:db:89:a7:d9:01:ec:63:ad:88:c8:f3:
         4c:40:c3:0c:bc:d6:68:93:66:d1:44:0a:f4:16:70:e1:38:7c:
         e1:20:46:95:2c:27:a9:a7:05:b0:1a:b7:84:0b:16:7f:20:14:
         1d:db:ec:f1:3c:ee:d8:17:0e:a1:9e:6e:96:72:ea:08:28:d8:
         51:8f:99:c4:96:67:16:df:32:fe:ca:f4:61:21:c0:5d:9a:91:
         5e:c3:48:8c:e3:61:92:c8:44:14:14:fe:60:c1:1d:6c:df:16:
         70:9a:a4:b4:1c:50:55:7f:92:c1:2a:7f:d8:18:eb:70:3a:59:
         e4:b9:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:25:14 2025 by rpki-client