Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/6c921613-8127-36b7-a11e-66ef6fa49a0a.roa
File:                     6c921613-8127-36b7-a11e-66ef6fa49a0a.roa (raw, json)
Hash identifier:          w9/+H2GqkQ3lo/BCy3XubIZ/pt++QUrS8RbbrczVVyk=
Subject key identifier:   19:6F:95:43:D3:48:79:19:4F:A1:9A:5C:2D:2C:9C:4C:DA:8F:12:A9
Certificate issuer:       /CN=f90be2e1-b57b-4e04-bd16-0b4a08488878
Certificate serial:       010D0C9F4328584AE891255B95E4DF6942C92EC0
Authority key identifier: 0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/6c921613-8127-36b7-a11e-66ef6fa49a0a.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     32161
IP address blocks:        74.119.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:25:5b:95:e4:df:69:42:c9:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90be2e1-b57b-4e04-bd16-0b4a08488878
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=bb3e4ca1-084f-4a19-8d7b-a5d3fc0912d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:14:6b:a2:5f:12:02:30:16:aa:62:52:6e:
                    e3:0c:97:a1:e3:70:35:13:ad:d2:00:16:40:39:5c:
                    9a:3e:07:02:97:13:a7:54:35:80:3f:cc:02:73:65:
                    2c:96:ed:87:6a:8a:a7:2e:ab:6e:95:0b:03:23:24:
                    a3:fb:8b:20:d1:56:f6:df:82:5a:65:7c:55:73:87:
                    62:75:a6:5c:f8:da:fb:5e:b7:68:cf:03:54:77:cb:
                    f4:20:25:db:14:04:b6:66:8c:ad:a0:fc:9d:1a:cb:
                    bf:fb:6a:c2:89:c9:a9:eb:12:ba:50:eb:a8:f9:ec:
                    b3:d3:65:19:4e:c5:7f:36:0b:ca:ad:d3:33:55:ae:
                    d9:b8:64:ec:87:2c:31:c9:38:2e:51:b9:de:61:d3:
                    6a:2e:b0:e6:6b:af:8b:1f:f1:a4:a6:b0:46:b4:74:
                    80:aa:5b:f2:2d:41:ba:85:a3:4c:c0:f6:41:1b:d2:
                    5f:12:21:42:0f:5d:55:59:c4:10:ba:c2:98:20:88:
                    5e:b6:dd:d6:87:43:05:c7:7a:e9:f2:57:fc:04:3b:
                    0f:9b:f1:6f:6a:0a:e0:7b:2f:c1:50:34:75:dd:1e:
                    6e:bb:05:39:1c:43:7b:5d:5c:80:e8:1a:1d:26:f4:
                    1a:3b:ea:b2:39:00:80:e0:11:57:3d:86:b7:54:31:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6F:95:43:D3:48:79:19:4F:A1:9A:5C:2D:2C:9C:4C:DA:8F:12:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/6c921613-8127-36b7-a11e-66ef6fa49a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl

            X509v3 Authority Key Identifier:
                keyid:0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:71:ef:e6:6c:4e:91:be:31:0c:ad:22:b5:4f:66:1b:28:
         1a:87:02:9d:5f:44:cd:fe:c5:ca:15:04:92:2a:e2:e4:fc:c7:
         1f:8f:ed:89:45:75:ec:5d:a8:e3:e4:ed:aa:4a:fe:da:4f:ea:
         a3:20:41:b3:d3:67:01:70:e5:fc:50:24:c5:89:6d:91:0c:59:
         57:fe:29:84:a3:5c:01:70:da:e2:22:67:68:41:4b:58:9f:ad:
         13:40:db:9e:8c:48:10:d0:6d:47:15:ee:1b:90:05:ce:a2:cd:
         5a:df:75:10:06:0a:aa:45:cb:c6:12:ee:34:fb:35:1c:62:93:
         8f:8b:19:c8:46:60:ce:9d:e0:78:8f:c5:26:0d:27:be:38:b4:
         81:a2:e0:f2:b3:6f:af:bc:52:e2:8c:89:33:d3:18:74:6a:13:
         b0:14:02:5a:09:93:c4:3a:34:30:c3:fc:10:b5:78:25:54:47:
         4c:7e:c2:2d:b5:ed:76:7e:5b:8d:42:99:c5:da:d2:f2:75:8a:
         86:86:9a:75:4a:f6:85:90:09:ab:5e:18:a7:06:db:53:7d:39:
         04:13:71:b2:12:f0:54:73:af:3b:c5:e9:a9:c8:41:33:1e:58:
         44:9d:07:df:5e:8a:8a:f7:02:73:9e:65:95:ae:75:16:eb:9b:
         e5:d6:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:00 2025 by rpki-client