Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
File:                     2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa (raw, json)
Hash identifier:          Qo4GQGPGfOrp/QLibdewZu5BIWUAZSoZYUoAbxrTqDE=
Subject key identifier:   84:CC:4A:19:83:99:58:82:A2:06:90:89:53:8A:CF:C4:E7:DF:AF:59
Certificate issuer:       /CN=38a6de71-55e9-453c-8cf4-1a205aef0191
Certificate serial:       010D0C9F432858498B767C5C13C658E975BFB940
Authority key identifier: 1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
Signing time:             Wed 16 Apr 2025 11:49:55 +0000
ROA not before:           Wed 16 Apr 2025 11:49:55 +0000
ROA not after:            Tue 15 Jul 2025 11:49:55 +0000
asID:                     40772
IP address blocks:        74.116.44.0/24 maxlen: 24
                          74.116.45.0/24 maxlen: 24
                          74.116.46.0/24 maxlen: 24
                          74.116.47.0/24 maxlen: 24
                          104.36.104.0/24 maxlen: 24
                          104.36.105.0/24 maxlen: 24
                          104.36.106.0/24 maxlen: 24
                          104.36.107.0/24 maxlen: 24
                          208.89.36.0/24 maxlen: 24
                          208.89.37.0/24 maxlen: 24
                          208.89.38.0/24 maxlen: 24
                          208.89.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:76:7c:5c:13:c6:58:e9:75:bf:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a6de71-55e9-453c-8cf4-1a205aef0191
        Validity
            Not Before: Apr 16 11:49:55 2025 GMT
            Not After : Jul 15 11:49:55 2025 GMT
        Subject: CN=f6a3961c-ec00-42f3-b94c-04dbc1f89f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1c:59:3c:9f:3e:fa:2f:10:32:29:e9:78:54:
                    fb:99:0a:ee:27:64:33:25:ec:fd:a9:88:6c:71:e0:
                    4a:cd:0d:46:99:2f:7f:8b:b7:21:53:84:41:8c:6b:
                    32:55:ff:cd:9a:87:4e:8d:e0:6d:56:93:42:ca:fb:
                    f9:95:3b:e0:40:b1:94:16:ea:bc:61:0b:32:24:53:
                    b8:60:17:56:47:42:98:20:d8:71:67:df:c3:f2:3f:
                    a8:d8:72:f4:60:c8:bf:3a:ee:42:e6:10:fe:6e:76:
                    a2:ec:15:ac:6e:90:c7:f5:34:c8:39:3d:19:b9:be:
                    37:33:b2:18:8e:97:3c:5e:d7:59:17:47:15:5c:b4:
                    aa:23:ed:64:3d:d1:31:9b:a0:27:7b:ce:3d:4b:ac:
                    5b:b9:20:28:fa:39:ff:36:1d:a2:a0:94:a8:e0:a9:
                    b7:f1:39:44:5e:b0:7a:9a:da:4f:51:f1:83:c6:85:
                    fc:67:fd:3a:98:5c:7c:8e:89:71:88:c1:49:9e:95:
                    25:67:02:53:e5:5f:1a:1f:49:3c:83:89:ff:74:17:
                    f7:91:4c:66:af:7a:7b:ff:45:30:35:d2:c1:92:63:
                    04:1e:fa:15:97:a6:ff:f6:cb:60:d4:98:a9:14:38:
                    0c:71:59:5d:97:9c:2d:20:bc:b6:c5:c2:dd:f3:c9:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CC:4A:19:83:99:58:82:A2:06:90:89:53:8A:CF:C4:E7:DF:AF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl

            X509v3 Authority Key Identifier:
                keyid:1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.44.0/22
                  104.36.104.0/22
                  208.89.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:e3:67:02:8e:40:63:5b:16:db:ba:e5:2a:d9:55:eb:60:
         2a:b8:a1:af:ae:77:e1:3a:f3:7a:b5:b6:a3:3d:7a:f2:79:20:
         a1:47:fc:d5:e4:1a:0c:87:11:c6:04:06:1d:19:06:59:e1:fe:
         81:96:b2:3c:c4:a7:49:18:21:0f:45:06:3c:75:bd:b5:02:aa:
         8c:95:6a:98:43:52:df:21:b1:11:9e:0a:44:c5:77:89:ac:b6:
         80:a1:4e:57:02:c4:ef:66:34:8d:ad:d1:92:de:fa:8d:6d:75:
         d2:dd:0d:b3:c3:8e:43:85:80:ab:2b:ef:b1:86:70:66:36:48:
         47:67:2d:c1:72:42:a6:50:c8:98:e9:3b:0a:56:91:97:de:61:
         8c:4f:c0:00:6d:1c:cc:14:67:6a:ce:58:8b:77:74:6f:45:68:
         3c:50:de:ae:5f:8f:9f:09:b2:91:e1:a7:b4:cc:69:8a:36:01:
         3a:90:84:07:22:04:48:92:fa:ac:34:e1:b0:94:37:33:25:1a:
         7e:ea:2d:31:3d:1d:66:ca:af:34:20:ca:f2:93:c8:5c:a1:b7:
         66:40:30:50:6c:78:54:03:e5:27:af:ab:72:03:30:18:8f:61:
         28:25:6b:e8:9d:87:b0:32:ae:8f:be:e7:ae:dc:ac:da:06:c1:
         68:a2:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:21:57 2025 by rpki-client