Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/64c0e0a7-76eb-3327-9643-9a405458fa6f.roa
File:                     64c0e0a7-76eb-3327-9643-9a405458fa6f.roa (raw, json)
Hash identifier:          XzNQ8GaYBNyUX7R2nrsu53d9Z2PG9KJHyWXSAerkD2s=
Subject key identifier:   54:3F:7A:2E:C3:99:B5:9C:F6:50:7B:9F:52:D1:1F:5D:C1:2F:C5:F6
Certificate issuer:       /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial:       010D0C9F4328584A5E60641B296F3A32E64969C0
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/64c0e0a7-76eb-3327-9643-9a405458fa6f.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     17056
IP address blocks:        74.115.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:64:1b:29:6f:3a:32:e6:49:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=b37fbdcd-9f2b-4b3a-a0f6-e29af6a83776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:91:7a:f8:2e:f9:97:92:d6:99:3d:9c:d4:
                    27:89:a2:70:ed:94:b7:84:a1:d9:f1:b0:7d:f1:35:
                    be:e3:1e:e4:fe:61:7e:fd:49:57:10:f3:77:6c:29:
                    02:a3:d1:2b:9f:de:2d:b5:dd:77:1f:8a:4b:4f:6f:
                    2a:b7:e5:ea:c4:b0:5f:89:aa:7a:ea:a2:8a:bb:38:
                    4e:a0:69:8b:b0:95:eb:c4:2e:93:43:56:54:a4:8b:
                    57:f3:56:44:62:91:8e:11:20:e5:c0:23:37:49:f7:
                    fe:b8:4d:a5:9c:d4:30:3f:d3:da:14:76:e7:26:79:
                    91:d8:fe:2a:b6:e3:aa:59:dd:7f:90:43:94:b1:43:
                    28:43:15:a8:40:d2:c1:bd:d6:d1:08:36:a5:39:03:
                    f7:e2:29:d2:a9:0b:28:9b:19:ca:35:c2:c1:0f:f8:
                    ac:38:03:62:68:db:bc:65:02:4c:68:84:a8:17:11:
                    21:d4:9d:40:f5:56:e6:3c:a7:9b:e1:3d:0b:10:19:
                    b0:a1:c1:f8:b0:b2:03:fc:3c:18:c5:a4:bf:4a:5a:
                    f8:89:1b:7a:f7:3b:97:0b:dd:cc:34:72:fe:45:cf:
                    ec:4f:ae:70:ab:d6:64:00:42:fb:04:35:3f:3b:91:
                    38:4a:de:7e:c6:c7:9a:55:e6:82:60:46:f3:b8:45:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:7A:2E:C3:99:B5:9C:F6:50:7B:9F:52:D1:1F:5D:C1:2F:C5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/64c0e0a7-76eb-3327-9643-9a405458fa6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl

            X509v3 Authority Key Identifier:
                keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:f5:4d:dd:cf:80:4b:88:d8:79:ec:45:c3:c4:10:36:97:
         f8:de:aa:7a:20:92:dc:b4:a8:d7:85:77:c5:c6:81:13:3b:3b:
         da:c8:fe:75:84:0b:2b:bb:4f:93:b6:f9:9e:58:eb:70:55:4f:
         0f:e1:7d:7a:2f:cf:ad:60:d0:14:fa:2f:ff:12:22:2f:c6:82:
         88:17:f7:84:ba:12:81:47:a4:ab:4d:aa:b0:bd:17:cb:25:08:
         9e:d5:fd:83:22:63:fb:da:3c:e2:39:da:10:ae:c6:89:98:e9:
         73:96:1c:49:7d:38:12:ba:c5:63:0a:f1:70:f6:0d:58:1f:c7:
         04:bb:e2:2f:6e:1b:15:bc:03:6c:32:17:aa:b7:8c:31:35:e2:
         13:cf:fc:23:ec:3e:e5:19:25:60:92:47:3e:8d:e2:1f:86:df:
         af:ed:70:cb:ff:cd:66:f1:3b:2d:e6:7c:b8:c0:31:d9:ae:93:
         32:20:2d:5b:1f:3b:97:7a:06:ed:c3:10:d0:8d:b8:39:a9:10:
         0f:4c:d1:7b:3a:73:54:55:b8:5b:db:12:73:32:f8:61:24:f1:
         8c:63:67:c5:17:f7:b5:09:9f:a8:7c:c2:16:86:14:ca:a4:04:
         92:1b:20:6f:ba:f3:91:04:98:d9:cd:a1:65:74:06:71:ff:9f:
         6a:5d:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:30:56 2025 by rpki-client