Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
File:                     fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa (raw, json)
Hash identifier:          zNl2ufUKrdAiui9dgyrOdOQJOg5Gn6p6aN9pU1QMLvg=
Subject key identifier:   B0:29:D8:F6:C7:65:78:53:2A:B6:B3:F0:24:31:DF:2B:24:B1:BE:97
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B57A15B9BA72638F6A52D5E0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     55246
IP address blocks:        209.237.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:15:b9:ba:72:63:8f:6a:52:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=3ab827fe-100b-4e32-b706-02105079fda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:de:78:ab:10:06:97:4f:34:d7:b1:ef:fe:
                    a3:63:88:c4:34:ff:33:39:f0:09:27:69:68:9e:d9:
                    24:5f:cd:0a:bd:ff:45:dd:47:65:01:8a:ae:e6:d6:
                    a3:19:88:eb:04:59:49:6e:f5:ab:b3:71:a3:5e:cc:
                    45:0b:ae:58:ea:99:b3:06:8a:66:98:31:57:7f:bb:
                    3d:bd:03:3b:13:5b:0d:d3:a7:bc:f0:6a:62:45:ef:
                    14:2b:d9:0b:2b:ad:a2:63:ff:4b:92:0e:98:ab:d0:
                    53:78:2d:c5:58:e3:48:86:9f:eb:ad:84:96:2f:32:
                    55:f7:7e:1b:17:15:eb:a7:4e:86:95:b8:a6:5c:d2:
                    91:31:76:c5:6f:96:60:b8:d4:bf:b4:62:98:84:11:
                    db:f3:b3:cf:ea:8f:78:a0:08:86:cd:46:d1:55:ee:
                    8e:22:bb:bf:a7:b9:9a:c4:10:71:7f:34:ef:11:1d:
                    40:d6:15:a2:54:f1:ed:75:ff:dc:d5:7f:d8:46:04:
                    b8:a7:f0:27:4b:51:d6:ee:d2:4c:c7:f4:51:e9:57:
                    28:44:9a:5a:21:53:07:e1:a7:39:8c:e6:50:7c:a1:
                    e0:c0:cf:3e:97:dc:b8:17:9d:48:1f:ab:d1:79:90:
                    22:34:77:ae:b0:b2:6a:b9:9c:cd:9b:0c:6b:13:18:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:29:D8:F6:C7:65:78:53:2A:B6:B3:F0:24:31:DF:2B:24:B1:BE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:01:0a:76:1e:24:7f:49:ec:06:2f:e6:0c:e1:2f:c5:46:
         90:8b:df:2c:be:dc:ae:7b:75:69:37:4a:9e:ad:ba:f6:33:f4:
         05:d2:eb:64:2d:11:32:93:72:75:d8:89:43:72:9d:8d:2a:f4:
         82:6f:50:56:52:6b:c6:9f:86:34:61:ac:5e:1c:71:16:9c:e0:
         be:40:f1:15:5d:37:4c:e7:77:da:c5:88:c5:ca:86:57:60:74:
         e6:3c:28:a0:59:50:dd:5f:f5:b3:75:26:95:09:a8:6a:5b:5e:
         d3:7f:f3:0a:7d:44:bd:8e:11:55:fb:da:72:f2:47:6a:91:14:
         54:4e:8c:91:b0:de:0a:bc:6c:d7:af:3c:8a:8e:76:10:b3:3b:
         c2:3c:49:7e:2f:c6:3e:f7:b1:bd:0d:a7:78:a6:78:b2:f1:ec:
         02:ea:dc:ed:32:14:04:8a:36:f1:8e:48:1e:68:48:21:12:86:
         a6:75:0e:43:54:f8:a4:6f:ff:3a:40:b3:54:16:a8:5b:11:54:
         ba:c5:25:71:a0:67:99:c2:1d:7d:7a:b4:5b:e6:3a:ea:2e:34:
         97:f6:91:5e:ee:82:ef:ae:96:6a:ef:5b:5b:58:ca:d3:d3:b5:
         86:7e:3b:51:dc:d9:39:12:f8:d2:ea:72:88:a2:0e:9e:a2:b4:
         ac:a2:5e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:28:14 2025 by rpki-client