Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/204312a3-60d7-3f5c-b151-8a1f1f09d361.roa
File:                     204312a3-60d7-3f5c-b151-8a1f1f09d361.roa (raw, json)
Hash identifier:          v5RJL/TKIa0B0JHtDD0QDcSxsdqoe5tapgiqCPkQdEw=
Subject key identifier:   D8:4C:F9:71:F4:E5:6D:8E:36:23:09:22:28:3F:01:44:98:96:2B:CD
Certificate issuer:       /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial:       010D0C9F4328584A6C55D708F44E5B7C935AF3C0
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/204312a3-60d7-3f5c-b151-8a1f1f09d361.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     17056
IP address blocks:        74.115.112.0/24 maxlen: 24
                          74.115.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d7:08:f4:4e:5b:7c:93:5a:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=0ce6bab5-bbb1-4773-a047-12e8f4dc0f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:a5:55:66:ba:76:fe:af:62:32:b0:42:a7:
                    d6:89:4c:e1:f8:14:3e:f4:11:fd:62:d9:7d:0f:cd:
                    bd:79:b6:71:2c:25:3e:77:ca:8b:27:6c:10:9d:4d:
                    0e:bb:09:7e:54:a7:4f:16:15:2c:ce:23:f9:8b:3d:
                    6a:9c:eb:7b:e6:20:c4:c5:14:b8:fb:f1:1f:b8:6c:
                    76:ad:c1:ff:7c:24:ae:be:b5:ee:94:06:6d:54:2a:
                    59:fa:94:69:38:50:07:f4:29:0d:9a:d0:8c:6c:2d:
                    cd:a3:d7:0f:cd:1f:90:03:2d:c3:42:51:8b:56:e7:
                    d3:ed:cc:08:cb:b1:33:e1:20:8c:fc:cf:c9:bf:23:
                    57:3d:13:e4:b4:41:c4:06:e9:90:62:65:bf:a0:48:
                    f4:85:28:fb:43:b4:7a:21:cb:75:7b:a6:8b:fd:c5:
                    63:20:51:bc:c6:0a:ad:83:7f:08:85:b8:ef:7f:a2:
                    1c:dc:79:25:b2:0f:fa:7d:68:dd:b1:41:70:da:f3:
                    a0:be:c7:b0:65:fe:3a:1b:09:5f:64:81:76:6a:6b:
                    9a:53:d6:99:fa:0e:03:fc:4f:94:75:8f:d7:3c:ce:
                    79:21:e2:d6:81:7f:ae:65:02:45:8e:e5:81:d6:00:
                    00:d1:cb:67:0d:e5:99:a7:11:70:b1:be:28:0c:ce:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4C:F9:71:F4:E5:6D:8E:36:23:09:22:28:3F:01:44:98:96:2B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/204312a3-60d7-3f5c-b151-8a1f1f09d361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl

            X509v3 Authority Key Identifier:
                keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.112.0/24
                  74.115.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:57:19:22:a2:6a:d7:d7:aa:99:a9:56:59:89:cc:61:a4:60:
         fd:c3:27:16:95:3e:93:1d:a3:40:e9:3d:39:47:51:6c:68:1f:
         91:ad:07:af:ae:b7:43:af:a5:c5:7c:ab:05:98:0b:0d:20:52:
         88:ab:ea:68:ba:59:3e:16:ae:fd:a0:28:03:db:75:bb:c2:2e:
         16:a3:d8:7f:76:c9:b8:cf:8e:05:6d:84:f6:4c:8b:c3:c1:ce:
         94:21:2d:74:6f:1f:62:6d:db:a5:d4:e9:35:52:02:05:f3:ba:
         3b:02:6f:98:28:58:23:3a:81:a4:80:aa:9b:0d:af:58:d7:ec:
         a8:9d:84:82:2e:49:92:80:ba:61:85:f8:ba:43:10:e1:55:e6:
         50:bf:c3:bd:03:31:3e:69:23:e8:fa:fc:0a:7b:3d:e3:dd:0b:
         ac:20:02:30:7d:9c:e0:95:92:54:3b:90:d8:77:cd:3e:03:8c:
         94:69:47:0a:58:06:d2:f9:51:b9:28:53:7c:bc:1d:c2:37:f0:
         53:5a:1a:fc:fb:db:64:f0:6d:07:9f:b6:20:d1:01:40:b7:cf:
         2f:ca:05:b7:34:30:1e:d5:f2:01:4c:22:16:44:63:7f:e0:db:
         41:61:91:07:ae:b8:dd:85:73:1d:9c:90:10:fc:80:67:6d:6d:
         a2:32:10:1a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpsVdcI9E5bfJNa88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm
YTIxMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
MGNlNmJhYjUtYmJiMS00NzczLWEwNDctMTJlOGY0ZGMwZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQGlVWa6dv6vYjKwQqfWiUzh+BQ+9BH9Ytl9
D829ebZxLCU+d8qLJ2wQnU0Ouwl+VKdPFhUsziP5iz1qnOt75iDExRS4+/EfuGx2
rcH/fCSuvrXulAZtVCpZ+pRpOFAH9CkNmtCMbC3No9cPzR+QAy3DQlGLVufT7cwI
y7Ez4SCM/M/JvyNXPRPktEHEBumQYmW/oEj0hSj7Q7R6Ict1e6aL/cVjIFG8xgqt
g38Ihbjvf6Ic3Hklsg/6fWjdsUFw2vOgvsewZf46GwlfZIF2amuaU9aZ+g4D/E+U
dY/XPM55IeLWgX+uZQJFjuWB1gAA0ctnDeWZpxFwsb4oDM5QLwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNhM+XH05W2ONiMJIig/AUSYlivNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx
MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvMjA0MzEyYTMtNjBkNy0z
ZjVjLWIxNTEtOGExZjFmMDlkMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk
NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx
ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0
OGEwMWZhMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASnNwAwQA
SnN0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD9XGSKiatfXqpmpVlmJzGGkYP3DJxaVPpMdo0DpPTlHUWxo
H5GtB6+ut0OvpcV8qwWYCw0gUoir6mi6WT4Wrv2gKAPbdbvCLhaj2H92ybjPjgVt
hPZMi8PBzpQhLXRvH2Jt26XU6TVSAgXzujsCb5goWCM6gaSAqpsNr1jX7KidhIIu
SZKAumGF+LpDEOFV5lC/w70DMT5pI+j6/Ap7PePdC6wgAjB9nOCVklQ7kNh3zT4D
jJRpRwpYBtL5UbkoU3y8HcI38FNaGvz722TwbQeftiDRAUC3zy/KBbc0MB7V8gFM
IhZEY3/g20FhkQeuuN2Fcx2ckBD8gGdtbaIyEBo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:44:40 2025 by rpki-client