Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/057cd764-a794-37ee-b112-24b52ecc32cb.roa
File:                     057cd764-a794-37ee-b112-24b52ecc32cb.roa (raw, json)
Hash identifier:          QOxTIkSRNJjPykHhMMRAGWkjxgFLfoq2Hx6vOrSU7HY=
Subject key identifier:   69:B8:D9:90:97:A4:A8:3F:6E:84:5C:11:F4:C2:46:94:0E:99:0E:74
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF865CA0DD8603D4C89E00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/057cd764-a794-37ee-b112-24b52ecc32cb.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     42
IP address blocks:        199.184.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:86:5c:a0:dd:86:03:d4:c8:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=8c255a29-9f10-48a9-93c6-72e170fd5599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:0a:77:c3:db:02:43:fb:0f:a2:e9:04:eb:
                    c7:9e:8a:29:bc:24:a2:c9:3c:40:73:48:ef:67:22:
                    83:99:7e:d0:69:62:12:7a:eb:7d:72:fd:ed:d4:33:
                    f6:fd:c8:45:b9:2a:5f:0e:d1:72:58:da:3b:e1:66:
                    09:e2:be:ec:cc:aa:57:ea:f7:bd:6c:a9:d4:c5:64:
                    e8:2c:d9:4d:be:a6:e6:7c:91:e4:e1:9c:ef:b5:62:
                    55:50:0e:04:a2:86:d5:2a:bd:57:32:4d:10:aa:f9:
                    16:23:88:e7:8e:2b:8f:0e:5c:b8:84:fa:20:9c:a5:
                    1b:31:7c:87:fa:ae:09:8d:c8:d8:f5:ff:bc:fc:22:
                    14:63:ca:db:a0:63:cd:04:cd:d9:d0:3a:f3:4c:29:
                    3a:7c:8b:c8:ad:18:9a:1a:75:8e:7d:68:69:30:8f:
                    d4:d6:38:f3:b8:77:23:d1:20:8c:65:4e:13:a1:33:
                    75:35:15:73:0a:a9:07:d3:a3:83:fa:64:5a:e7:01:
                    a4:63:c9:3c:4f:33:ff:fb:b3:16:35:95:a7:24:53:
                    60:cd:dc:b0:08:13:4f:e3:d7:a4:b3:42:fc:ed:6b:
                    07:fb:de:a6:69:b0:41:c4:15:54:12:08:01:f4:62:
                    92:e1:1f:40:8b:4b:65:bf:5b:6b:79:72:6e:0b:ba:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:D9:90:97:A4:A8:3F:6E:84:5C:11:F4:C2:46:94:0E:99:0E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/057cd764-a794-37ee-b112-24b52ecc32cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:37:83:cc:82:aa:cf:27:66:5e:7c:0e:08:31:d0:e2:b8:2b:
         28:bc:0a:e7:2a:53:12:dc:94:d7:5c:7b:eb:95:8c:83:44:02:
         1c:ff:72:f4:85:35:13:59:35:51:4c:17:12:8f:f5:06:27:e3:
         57:83:18:42:4d:18:06:ce:59:99:43:dd:44:ae:72:e1:e4:ce:
         38:51:83:85:32:a6:64:84:7f:58:b0:f5:f2:5c:e7:84:7f:2a:
         9a:e8:e9:24:f3:f7:73:cf:52:c7:18:79:ed:94:3f:ee:8f:92:
         ad:33:8b:40:20:46:3e:95:8b:d5:1a:34:c9:5d:6c:39:c3:c4:
         2c:e5:c7:49:7d:ce:37:18:5e:e5:ca:8c:44:fd:3d:be:55:8b:
         ec:82:18:7a:ee:7a:0a:6e:8d:f9:da:10:19:81:ca:a1:5f:39:
         9e:67:f0:aa:65:91:d0:68:1d:40:21:22:55:66:28:08:9a:bb:
         46:05:d9:16:b4:91:02:21:d3:7b:49:51:64:64:f9:16:04:18:
         ed:cd:78:15:50:88:39:24:b4:3f:62:56:7e:cd:1c:ba:d4:fe:
         9d:59:5c:2d:ea:fe:6e:8e:93:ae:0c:90:b2:71:75:59:c9:2d:
         38:e0:e3:4a:5a:95:23:cf:73:73:1e:54:87:8c:68:e3:e3:87:
         05:48:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:25 2025 by rpki-client