Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
File:                     23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (raw, json)
Hash identifier:          nX1mw3e612UYc64y1XT4cUtKACux9jTlzf10ZSzLXQY=
Subject key identifier:   AD:E8:AD:7C:DD:69:36:47:1D:A5:DC:0D:43:9D:18:5B:27:D9:1C:4D
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F43285849A61F44A9C6BF6AF334DF4360
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     16655
IP address blocks:        74.205.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:44:a9:c6:bf:6a:f3:34:df:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=97355b4f-4ce1-4e67-97fc-9d0aa7137de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d3:b1:7e:3d:1a:5b:ee:8d:dd:6b:75:a6:76:
                    34:ae:ec:d3:46:53:0c:7f:d6:79:b6:b7:c9:da:45:
                    07:62:32:0d:a9:50:1e:87:8a:41:ec:e9:30:33:33:
                    f7:db:f3:cc:0a:9a:25:59:7f:ff:f6:39:a4:4f:02:
                    db:d0:89:e2:5e:08:2e:06:da:99:c8:ec:32:c5:8f:
                    a1:a7:d1:b9:1e:8d:87:9c:38:3f:81:ba:04:30:86:
                    76:1e:e6:6d:df:7c:59:c4:43:a7:3a:5d:c1:d7:e0:
                    53:63:29:b9:1d:56:3f:95:0c:65:12:35:94:33:7e:
                    2a:a0:71:38:b2:11:a8:5a:95:3f:c9:87:5a:74:a5:
                    86:4c:a9:e6:c9:51:8c:76:ce:8e:26:36:81:4c:1e:
                    27:d8:8c:cf:64:9f:a6:a1:0c:4f:2b:39:06:8d:a0:
                    d8:6d:23:db:00:19:c5:69:cf:97:dd:5e:f9:21:b6:
                    3d:b1:ee:16:19:0d:12:5d:9f:4f:a7:89:7b:7e:06:
                    51:a7:c6:ec:a2:77:c5:17:e8:e1:d8:3f:e3:25:4d:
                    af:2e:83:23:4d:fc:cd:59:ee:a0:f0:28:22:25:d9:
                    ac:03:ad:ea:04:c2:99:7e:ae:a9:f3:f6:6b:ee:35:
                    54:0d:51:d6:59:17:1b:92:e8:71:91:a0:c3:6b:41:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:AD:7C:DD:69:36:47:1D:A5:DC:0D:43:9D:18:5B:27:D9:1C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:a3:e1:3b:7a:5a:9e:e3:3d:8f:d3:e6:6b:0a:c6:c6:8f:
         45:91:92:d9:13:ca:60:52:f1:9a:06:9c:0d:e3:4a:03:98:d8:
         f9:41:a3:9b:74:7d:70:1a:3a:f3:68:2c:48:8b:bc:7c:ed:9b:
         db:39:51:b4:70:36:b8:e6:7e:3e:47:3e:48:37:67:85:30:3d:
         9d:41:24:8c:99:f9:bc:59:d2:a3:8d:dd:94:00:8c:77:8e:cd:
         8c:e0:75:9f:92:58:3e:8e:da:e5:1f:39:47:db:34:bf:c7:75:
         c4:13:86:14:95:5a:9f:b1:39:06:ea:f5:3d:87:b5:c4:c4:f1:
         f4:d4:11:b0:1f:f1:1f:f6:86:20:08:e1:a6:80:96:d1:55:1f:
         86:31:3c:0e:de:3e:57:99:cc:f0:cd:7e:2a:11:34:91:57:79:
         ef:bf:e1:3a:87:2b:43:5d:aa:ef:58:61:b3:15:9a:97:1f:99:
         16:9e:97:2c:b7:bf:59:9b:25:57:1d:00:27:c9:a0:e3:b1:d7:
         0c:c8:83:4b:c0:45:21:9d:ca:90:56:19:63:ac:3d:a8:69:5c:
         71:98:37:9f:17:ea:f2:a7:ed:20:d4:86:77:fb:8b:49:05:a0:
         3e:2e:45:0a:7b:04:cd:88:92:35:bf:d1:8e:40:dd:ba:a6:9b:
         87:10:6d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:31:13 2025 by rpki-client