Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07a66b3e-c9f5-3f03-ba92-d2860c527d57.roa
File:                     07a66b3e-c9f5-3f03-ba92-d2860c527d57.roa (raw, json)
Hash identifier:          X8B1PDor3GCx1prC4kPbvaeOWxVNid15TiZzT0WGHA0=
Subject key identifier:   AE:B3:A4:66:42:22:9B:31:01:B7:2C:EB:59:13:E7:71:9A:E6:3F:28
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849A4BA4D58D09F7AD59C31A140
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07a66b3e-c9f5-3f03-ba92-d2860c527d57.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        74.221.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4d:58:d0:9f:7a:d5:9c:31:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=dbd0f36b-9e6d-4c9f-befe-50b7e9d10617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:2d:32:ac:10:49:d3:3e:86:13:53:01:72:
                    ca:cc:aa:f1:63:46:99:ec:a4:3b:65:5c:a9:1a:b9:
                    fd:c8:c8:b6:55:ae:57:cd:6c:73:ea:62:4b:cd:09:
                    e9:87:ef:f8:2a:17:47:67:7c:53:bc:31:f9:b4:f1:
                    26:88:22:60:6f:70:94:ff:87:b6:dd:85:aa:e4:b9:
                    7b:7b:73:b9:f5:74:23:fb:6b:06:5d:c1:c1:7c:fe:
                    63:1a:12:22:02:f6:34:a8:bd:d2:61:bf:17:31:38:
                    39:77:aa:ff:1a:a2:dd:b9:fd:eb:85:d4:1b:93:2b:
                    a5:62:3a:83:70:da:7d:77:87:a6:4f:f0:f7:95:2b:
                    27:15:b0:84:39:e3:0d:6f:ac:90:20:c1:4d:d2:b3:
                    9f:29:4b:ec:b2:cb:5b:c0:8f:68:4d:68:ad:eb:64:
                    2c:c1:6b:1d:fb:68:6b:2b:0e:ec:0e:dc:ca:f6:79:
                    cb:1c:c5:12:9b:d2:44:14:89:06:f7:03:ff:d9:ad:
                    2f:df:ea:18:61:ab:a6:53:e5:2a:91:6d:0c:65:5f:
                    f6:73:37:35:b1:f8:7c:b2:a5:15:a0:b6:fb:43:76:
                    e1:27:ad:42:37:65:71:41:ac:0e:c1:9a:3a:6e:1e:
                    ba:57:32:9b:1c:20:06:8a:54:ef:11:ab:09:16:f2:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:A4:66:42:22:9B:31:01:B7:2C:EB:59:13:E7:71:9A:E6:3F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07a66b3e-c9f5-3f03-ba92-d2860c527d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:3a:00:f1:60:13:d5:33:ec:20:56:34:5a:85:e6:38:23:
         08:e4:3e:5c:1f:23:1d:cf:58:be:42:08:21:b3:bb:ef:72:70:
         48:58:32:b7:65:94:ab:75:6b:92:78:d6:8d:60:69:82:02:4d:
         46:62:25:eb:dc:bb:cc:32:43:d5:66:e0:57:3a:be:fe:f0:ce:
         b8:59:f2:f6:37:af:48:a5:2a:de:bb:2e:2f:83:c1:ab:2e:82:
         66:87:ac:1b:0f:04:05:56:d2:de:e4:75:60:c5:1d:93:41:e9:
         69:06:36:68:f8:21:fd:00:e7:b6:f1:4d:97:a9:d7:af:a5:01:
         9d:f9:f9:f9:4f:b9:57:a5:63:35:0b:93:b1:dd:09:c5:25:cb:
         ce:cb:a1:af:8a:78:15:08:11:19:e2:f3:ae:4c:dc:95:23:5b:
         0c:14:5d:87:f5:31:b1:89:03:4b:ad:f2:ab:86:b6:78:61:67:
         88:12:20:c2:10:64:a7:18:a9:ed:0b:8d:0f:0a:65:c1:0e:a0:
         69:85:d5:2a:4c:de:86:f5:64:28:ad:ab:1e:21:82:6e:e2:bd:
         0a:e2:38:50:42:c1:41:cd:ba:a1:6a:5e:10:76:d5:e5:9b:22:
         cf:be:93:9e:23:32:5a:42:df:12:1e:07:fe:f9:32:36:4e:b1:
         e1:4d:cb:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk1Y0J961ZwxoUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZGJkMGYzNmItOWU2ZC00YzlmLWJlZmUtNTBiN2U5ZDEwNjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaEtMqwQSdM+hhNTAXLKzKrxY0aZ7KQ7ZVyp
Grn9yMi2Va5XzWxz6mJLzQnph+/4KhdHZ3xTvDH5tPEmiCJgb3CU/4e23YWq5Ll7
e3O59XQj+2sGXcHBfP5jGhIiAvY0qL3SYb8XMTg5d6r/GqLduf3rhdQbkyulYjqD
cNp9d4emT/D3lSsnFbCEOeMNb6yQIMFN0rOfKUvssstbwI9oTWit62QswWsd+2hr
Kw7sDtzK9nnLHMUSm9JEFIkG9wP/2a0v3+oYYaumU+UqkW0MZV/2czc1sfh8sqUV
oLb7Q3bhJ61CN2VxQawOwZo6bh66VzKbHCAGilTvEasJFvII6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6zpGZCIpsxAbcs61kT53Ga5j8oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMDdhNjZiM2UtYzlmNS0z
ZjAzLWJhOTItZDI4NjBjNTI3ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt2CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6QOgDxYBPVM+wgVjRaheY4IwjkPlwfIx3PWL5CCCGzu+9ycEhYMrdl
lKt1a5J41o1gaYICTUZiJevcu8wyQ9Vm4Fc6vv7wzrhZ8vY3r0ilKt67Li+Dwasu
gmaHrBsPBAVW0t7kdWDFHZNB6WkGNmj4If0A57bxTZep16+lAZ35+flPuVelYzUL
k7HdCcUly87Loa+KeBUIERni865M3JUjWwwUXYf1MbGJA0ut8quGtnhhZ4gSIMIQ
ZKcYqe0LjQ8KZcEOoGmF1SpM3ob1ZCitqx4hgm7ivQriOFBCwUHNuqFqXhB21eWb
Is++k54jMlpC3xIeB/75MjZOseFNy8Q=
-----END CERTIFICATE-----
Generated at Mon May 5 15:03:07 2025 by rpki-client