Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
File:                     574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa (raw, json)
Hash identifier:          jIP4l1kmG4LkDGj6nw9iK+vRlalfxZZCx+TlQfEyBh8=
Subject key identifier:   06:65:43:26:7B:55:47:42:BF:E7:D7:BD:E1:ED:C6:DC:24:AE:28:E9
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584AE19683E26A79FE6232A28DC0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     54994
IP address blocks:        174.35.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:83:e2:6a:79:fe:62:32:a2:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8dc483c8-890d-47e1-9eed-49146a00b141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:4a:c4:cc:fe:25:59:e8:54:42:f3:65:b8:
                    10:eb:0d:ec:f3:6c:4e:17:67:6b:6a:80:8f:19:f4:
                    db:e1:eb:df:ab:a5:d1:f3:eb:17:8a:61:c3:fd:a4:
                    7e:d8:0f:dd:09:0f:e6:d3:b7:ae:5e:44:57:46:d5:
                    3f:98:73:33:4d:18:ba:19:dc:62:40:73:d0:eb:b4:
                    0f:5e:9c:6c:e2:cb:2b:61:d4:43:80:d1:92:c2:87:
                    38:ce:a0:39:5c:da:5c:e6:f5:94:ec:35:a3:e3:7b:
                    32:26:ef:43:a3:bc:93:20:f1:0b:85:46:be:23:fb:
                    43:c3:7f:8c:03:6d:50:f3:fd:a4:a6:0d:12:62:4e:
                    0d:f9:27:77:f0:cb:b8:0c:f0:1f:dd:98:52:d8:0d:
                    46:97:84:d5:2a:f7:31:71:47:b4:a3:b6:b1:28:48:
                    d0:90:69:ad:8b:47:7c:c1:bd:41:ba:df:7d:9a:2d:
                    3b:eb:58:1f:dc:b1:bd:71:01:e6:89:44:71:d0:0d:
                    0e:39:57:cf:e9:f9:d1:b3:c9:e7:c7:5d:f4:33:56:
                    0e:37:e1:6b:23:df:86:7a:00:ea:07:5b:fc:9d:af:
                    c1:e0:53:4d:d8:cf:72:95:a2:b9:df:21:73:c7:84:
                    fc:ec:86:d2:0c:3b:bf:f4:8f:77:da:60:a3:49:74:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:43:26:7B:55:47:42:BF:E7:D7:BD:E1:ED:C6:DC:24:AE:28:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:43:2e:a5:9e:e6:65:62:da:9f:42:e4:7e:87:a2:d6:8d:58:
         18:b4:3b:54:93:25:3d:58:63:e5:10:75:31:6b:bd:35:dd:2d:
         0c:9e:6e:84:4d:ed:8d:d2:74:4d:30:84:1e:02:77:7c:73:af:
         a9:92:24:48:70:bd:e1:f0:75:0f:04:74:1e:7c:c6:4e:07:7c:
         83:fd:fc:e1:05:88:ad:5c:10:1e:ad:7d:37:6f:84:36:d6:f8:
         70:99:91:85:10:cf:f6:9a:00:fb:72:6d:80:17:8e:e2:67:d8:
         b6:c7:97:f6:a2:ea:d5:b5:aa:ab:74:f6:f4:ec:93:24:00:96:
         97:d0:9b:bf:bd:03:eb:70:09:2b:8c:47:34:62:b6:65:75:19:
         bb:a8:9e:be:e0:3c:42:2c:5f:e3:1e:3a:f8:9c:c3:48:b8:db:
         50:43:9b:c6:f8:75:c5:d6:03:6f:80:71:7b:2e:fb:86:4f:5b:
         62:e7:3a:e6:ec:7e:07:44:50:92:15:d8:a5:92:b9:f2:d4:93:
         f5:30:28:26:d4:13:43:a7:c3:b3:f2:62:51:b0:59:92:d7:81:
         30:41:9f:eb:5c:2c:82:dd:81:60:a3:2b:e2:19:44:cf:ef:6a:
         d8:c7:de:12:21:0a:f8:a8:e9:4f:b4:24:0f:22:4f:eb:8d:d0:
         4a:d3:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:36 2025 by rpki-client