Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac7d2d7a-c8fa-355b-b3ef-6da01486a697.roa
File:                     ac7d2d7a-c8fa-355b-b3ef-6da01486a697.roa (raw, json)
Hash identifier:          UzjIBGt/xZjOGnjurwJYGuKtfYcU2a04sHaG0bXtgv8=
Subject key identifier:   C3:FC:25:D0:CC:61:0A:38:9B:46:FF:5F:83:85:D1:98:7A:4F:77:75
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A331AF8D8DCF93B2325C2AE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac7d2d7a-c8fa-355b-b3ef-6da01486a697.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     12271
IP address blocks:        184.74.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f8:d8:dc:f9:3b:23:25:c2:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=3062b3ad-cbce-49ae-8cdf-7242d98a66df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:11:c7:bf:d6:53:92:67:20:06:63:0a:d6:
                    74:22:69:15:c9:b7:9b:6a:b1:2c:f9:f8:1f:bc:5d:
                    c4:80:6a:5e:c1:bf:ea:fe:30:42:12:50:39:d2:7c:
                    dd:8a:b5:45:5a:50:ca:37:27:e8:cd:46:eb:55:a5:
                    62:af:4c:c9:41:3e:de:a9:a0:bc:86:99:d5:5a:62:
                    75:18:9d:8a:88:93:76:88:5c:c3:06:88:96:2d:62:
                    03:31:35:d5:69:c7:7b:5b:fb:8f:1e:c6:7a:62:ec:
                    2d:ee:cf:05:17:9b:58:8c:be:11:cf:ec:01:a9:fc:
                    af:28:f8:00:2a:34:02:9f:2c:e2:75:fa:6e:44:74:
                    09:af:c9:8f:e1:2a:c0:d0:22:22:0f:f4:bd:f4:6c:
                    3a:66:68:c0:6c:c4:06:77:58:01:0b:68:a7:0f:1c:
                    00:9d:43:b2:ed:64:12:da:87:8b:60:75:be:43:f1:
                    61:28:e1:6a:40:fd:59:32:06:0b:ad:a0:89:c9:37:
                    95:0e:58:12:a4:5e:02:c0:71:25:d3:20:07:f1:d0:
                    78:d8:50:20:3e:f1:16:f7:e2:cc:32:db:ab:72:b9:
                    35:3b:54:50:b1:35:ff:bd:4a:86:42:3f:05:79:b1:
                    57:00:66:e2:d9:7f:4c:84:8d:4f:20:41:1f:7b:81:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:25:D0:CC:61:0A:38:9B:46:FF:5F:83:85:D1:98:7A:4F:77:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac7d2d7a-c8fa-355b-b3ef-6da01486a697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.74.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:26:01:b5:de:3e:89:28:6e:17:ef:21:4e:ef:dc:38:9a:6b:
         37:2c:5b:5d:2b:c5:49:86:4b:e8:c3:fb:9b:73:eb:06:8a:e9:
         ec:26:de:15:ad:4f:d9:a7:5f:6f:99:6b:8f:39:92:4a:b5:1d:
         17:a3:b7:81:35:c4:4f:8a:a8:20:7d:ac:a8:fa:5b:2c:c6:63:
         da:c8:dd:1e:aa:d7:6f:9f:0d:37:83:ca:de:3a:8a:2b:01:65:
         82:02:c9:6f:f8:15:83:8c:38:ca:77:a6:81:82:bc:6e:b8:11:
         19:a0:37:59:87:af:76:e9:c7:b4:48:e9:eb:b0:08:ae:9b:88:
         b0:5b:a1:7c:47:65:89:b3:e3:92:fc:92:b5:d1:e5:05:15:e3:
         de:89:f3:95:39:f7:c1:38:0c:36:e0:60:6c:59:1c:79:ab:e0:
         dd:7b:8f:cc:ba:08:cc:2e:62:ed:8b:a8:04:ed:2b:19:b5:d4:
         3b:69:b0:e5:db:cd:d7:81:3f:71:c5:ba:0e:12:4e:05:c5:67:
         e5:72:d0:07:69:53:7e:7f:a0:1d:0d:d7:7e:f7:75:ac:f5:7b:
         18:bc:21:af:60:06:cd:18:44:c4:c1:51:4b:d3:e2:15:07:d7:
         1a:70:5c:cc:70:13:6d:a4:1b:66:7d:be:f7:96:c3:a9:99:1c:
         a5:ce:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:32:16 2025 by rpki-client