Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa
File:                     4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa (raw, json)
Hash identifier:          T60mmvttxjIKHe3MXdiACNl4KSZ2irZcX0n5YQ2GhNM=
Subject key identifier:   4F:66:63:31:73:A7:98:AA:9C:E5:F1:F1:27:06:53:35:2F:A9:06:04
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F934C9C28D06DDC51C6E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        174.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:93:4c:9c:28:d0:6d:dc:51:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=a50a725f-ecc5-42d1-83be-ca0aff17d4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ec:bc:e8:39:1f:37:97:f3:2e:dc:6c:52:51:
                    96:b4:6d:a8:fa:69:42:7f:fd:e7:43:29:f2:ae:4a:
                    a7:29:fc:84:c0:ea:88:85:ae:c8:fc:af:6a:78:25:
                    c6:3f:1e:0f:4c:26:80:da:5a:46:de:5f:27:45:93:
                    83:73:1d:ca:8c:9d:cb:8c:97:13:09:15:31:49:cd:
                    a5:d6:25:65:01:1b:f4:6d:22:90:47:2b:9c:b8:00:
                    00:73:5e:7c:b7:c9:b8:4b:ca:2a:35:a9:4c:13:60:
                    fe:5c:74:8a:35:66:e7:3d:94:bc:55:60:bf:39:27:
                    12:72:4b:61:0f:c4:ba:8e:27:e0:eb:56:53:a2:84:
                    b9:ef:3e:ca:2b:8b:9a:fd:9e:92:38:9e:f6:ae:4f:
                    71:a0:78:5d:98:53:06:8f:b1:7e:7a:2c:48:03:5d:
                    cd:0d:3b:c6:96:99:8b:f1:d8:a2:90:b2:29:28:3f:
                    d6:bf:b2:ea:bb:18:a3:44:4d:e1:ab:b8:96:8e:f6:
                    ec:3b:8e:8c:3c:01:e7:58:e8:f2:52:81:35:5d:37:
                    df:aa:81:38:af:48:d6:c9:e2:4f:83:17:40:59:90:
                    fb:43:ee:05:35:2e:9d:1e:35:44:0d:63:02:a9:bf:
                    a2:9f:4b:33:01:2b:0f:d7:cd:f0:17:53:a2:ba:94:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:66:63:31:73:A7:98:AA:9C:E5:F1:F1:27:06:53:35:2F:A9:06:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c31809c-5b52-3554-8a1d-dfcc7c0868a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:29:b8:87:d2:cd:95:b1:d6:88:f6:d4:60:ac:bb:44:61:1c:
         86:31:1c:15:ff:87:a7:f7:65:54:18:c3:52:d0:6f:0d:ad:a1:
         d1:42:43:ab:ab:8a:b8:f4:20:31:47:0e:39:c3:4a:9d:4f:22:
         8c:e9:11:e5:e3:55:4f:a3:08:50:44:5f:65:2d:a2:c3:7a:84:
         0e:a0:8d:d4:04:06:31:26:8b:e5:98:ea:ad:ed:62:be:16:bf:
         67:f8:17:6a:ed:a9:7d:57:b1:17:3e:5c:e6:9c:63:d6:10:c4:
         63:0f:3d:57:5e:0b:98:dc:c5:6a:8a:e1:d6:88:4f:ea:4b:5d:
         83:e1:4e:1c:d6:e5:b1:ce:8c:27:54:20:32:0f:21:a2:22:dd:
         1f:7d:b4:01:45:ab:a2:cf:da:c6:ad:26:e7:f0:09:67:98:2e:
         48:f6:b4:3f:e0:9e:85:3b:32:93:b0:cc:c1:d3:06:18:26:47:
         f1:3a:15:19:10:bb:b8:c8:5c:a9:4e:27:d3:fd:c1:6b:bc:af:
         4d:95:6f:7d:57:10:6c:ee:81:6d:cd:dd:a8:20:a6:9e:d5:50:
         79:2d:96:b9:98:82:b1:af:7b:97:d0:e3:d3:eb:c6:ca:6b:f3:
         f0:73:42:06:52:b1:0d:5e:b4:b9:7e:e4:69:3d:ce:50:51:32:
         ea:2d:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:53:16 2025 by rpki-client