Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa
File:                     b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa (raw, json)
Hash identifier:          1FVzQAAe6PCurHMPQsp4o+7DFHB2H4C87/hOdfpxYpo=
Subject key identifier:   87:36:AE:E5:93:56:D6:AB:C9:E6:B1:B9:AB:0D:20:87:57:77:1C:6D
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584A3A1581C23711A327AB5EE780
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     2914
IP address blocks:        174.35.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:81:c2:37:11:a3:27:ab:5e:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=814e4980-815d-43f2-bcf8-3a3cfb64df0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:ed:c1:19:d2:80:96:f8:e6:41:09:32:5c:
                    73:da:bb:58:c3:71:88:93:c8:72:06:ff:6e:ed:33:
                    f9:e8:c6:30:13:f5:f2:fa:f9:53:d4:f4:ff:87:24:
                    8a:1b:b4:a5:67:f6:49:f7:00:65:7b:bd:7e:70:37:
                    94:d1:21:f3:9c:df:ca:fb:11:f0:02:b2:1e:53:98:
                    63:f2:c5:8d:ba:8f:03:f4:5d:d6:0b:db:a7:3e:b0:
                    d1:8e:f4:6b:59:cc:9a:2b:54:11:02:75:ec:68:c2:
                    40:73:2d:d3:bc:f4:2a:8e:fd:ea:71:d7:ee:75:b0:
                    ef:5d:2d:cd:8a:cc:38:37:45:4e:4a:ca:2f:3f:4a:
                    29:00:1f:41:11:ae:34:4c:17:60:b9:ca:1b:1f:e2:
                    33:43:62:62:8e:e5:df:0e:61:7e:10:47:92:4d:93:
                    4b:68:bb:da:02:76:33:28:c6:26:79:95:30:67:14:
                    2c:21:0d:e6:0f:75:fe:9d:80:f9:63:92:bd:1f:2f:
                    7c:bf:3d:75:84:19:06:88:e0:f5:51:41:be:d8:e1:
                    10:3e:46:0c:dd:b2:eb:df:72:f6:a9:ee:8a:b4:43:
                    7f:9b:b2:73:31:20:33:b4:f2:6a:d6:11:73:6d:6a:
                    cf:28:32:d0:49:4a:da:76:89:12:97:57:ed:c1:73:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:36:AE:E5:93:56:D6:AB:C9:E6:B1:B9:AB:0D:20:87:57:77:1C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:85:68:fe:81:cb:cf:9b:9e:a0:0c:b4:92:9c:56:bd:bb:
         95:4e:6a:f0:c4:7c:51:7f:b3:60:28:86:b9:9d:03:af:c5:52:
         56:df:7d:21:d7:61:43:d9:e0:5f:7f:d9:f1:0d:d8:e1:ad:20:
         23:2c:22:51:31:5d:13:ec:9f:95:aa:05:3b:e9:dd:74:ec:44:
         8c:b0:44:ca:3d:a9:66:73:d5:f6:50:d6:91:f9:fe:c9:d7:ea:
         e4:8e:b0:e2:89:77:e0:5a:fc:6f:3a:d4:e1:02:8e:9b:1d:07:
         ca:39:25:91:f5:e1:97:5b:7d:1b:49:bd:f6:2f:5a:76:bc:00:
         37:29:15:ea:1d:5c:9e:12:87:bd:3c:1e:5f:5f:42:d7:b8:31:
         3c:3d:bf:29:d8:a1:48:8a:94:3a:da:16:cf:a2:18:3d:92:b6:
         b1:8a:d8:29:2c:08:c7:b8:79:a0:c7:9f:e9:39:b7:bf:f6:bd:
         d0:38:ec:c8:87:d4:f5:f5:52:ab:c4:10:1a:e3:f5:4c:e3:b7:
         91:3f:71:45:5a:18:43:b0:84:bc:d5:8b:f8:a6:db:3d:75:0a:
         2b:52:a6:cf:9d:6d:80:25:0d:53:65:06:a4:c9:7f:df:9e:05:
         5c:c4:52:22:dd:c6:9e:83:e5:4e:b3:56:b3:ac:01:cb:37:bf:
         a4:8e:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:45:27 2025 by rpki-client