Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
File:                     74f562d4-913b-3843-9e3d-f9f26ec3da09.roa (raw, json)
Hash identifier:          YAEu1EklVKD0VyQE6Vso3WWNN7SSwwcRiFaB/eyawHA=
Subject key identifier:   DE:74:21:DB:D1:9B:1E:2A:58:43:A5:E3:31:DC:1E:66:D1:FE:15:AD
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584A43DB0526C29153D121B0F700
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     26057
IP address blocks:        168.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:05:26:c2:91:53:d1:21:b0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=cb1e0e7b-96b6-40e3-8fe7-312a84e52bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:3e:97:33:77:ea:c2:0a:94:1d:f8:24:53:
                    4f:b9:83:11:7e:00:26:b6:a9:b8:ae:33:dd:a3:0b:
                    08:c8:18:2c:dc:c6:4a:1e:d6:ed:e1:a6:4b:34:1d:
                    8b:46:02:85:e4:99:5f:7b:6f:bf:cc:4f:c9:92:41:
                    ca:5a:e0:42:2a:1f:c7:e9:5b:4c:97:7c:f4:2c:54:
                    b3:10:e0:03:c2:ea:7e:34:f0:79:d5:4e:c4:f2:28:
                    00:31:a1:5b:cb:5b:10:d5:01:e1:1d:5d:69:37:db:
                    45:e3:a1:11:0a:14:8c:68:4a:c3:ee:23:8c:fc:c8:
                    72:d5:38:a4:29:ec:bf:14:7f:be:c1:5f:39:17:04:
                    b2:ca:94:c5:f1:98:b6:b4:9d:8a:46:05:ad:a1:45:
                    20:a1:1b:ca:d9:14:a4:19:87:91:32:c8:ae:53:2d:
                    6c:d8:b8:17:5d:c1:e3:ff:f6:ef:94:df:b2:7e:53:
                    2b:87:2d:4a:4c:af:1a:01:2e:14:72:78:c3:ca:91:
                    98:57:65:fb:44:a4:2b:1e:64:7b:f9:09:a9:13:24:
                    a6:10:4d:1b:7b:00:57:8b:9f:bd:e7:c1:15:f9:cb:
                    07:f6:e3:aa:30:99:c3:53:1f:4e:17:50:1b:80:4d:
                    7b:a0:7e:3c:ca:3f:87:30:30:bb:d6:5b:39:60:d2:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:21:DB:D1:9B:1E:2A:58:43:A5:E3:31:DC:1E:66:D1:FE:15:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:c9:dc:37:77:f2:cf:13:0c:0d:9e:1e:a8:74:ff:e4:b8:
         e8:a6:f0:86:ca:9e:eb:14:e3:a5:37:27:3c:b2:21:ab:4d:ba:
         3b:d5:56:07:20:ef:8b:57:b7:b9:df:6a:4a:e2:a1:4f:53:7d:
         3d:c1:1c:7b:13:15:fb:32:23:64:fe:df:57:b8:3f:7d:6c:d0:
         a6:00:3b:e8:cc:f0:ff:10:aa:90:67:90:82:f6:06:01:ae:4d:
         34:20:c1:1a:fb:64:02:2e:81:ac:e5:2c:fe:5a:a8:ba:ea:f9:
         16:3b:02:b1:e5:51:a2:73:67:c4:fe:f1:13:45:ed:79:f5:15:
         15:7f:7a:14:32:32:3b:04:43:b4:1b:26:d9:95:82:a0:1d:7a:
         43:75:7f:ce:35:d2:74:58:ad:e3:bb:54:93:70:50:ff:8b:7c:
         ad:79:e9:a2:79:f7:e0:52:2f:a6:3f:1b:af:05:df:e6:a5:5f:
         59:b7:ee:ae:31:97:71:d3:3b:89:12:98:70:46:19:33:a7:33:
         24:27:2f:02:26:3b:a5:4a:de:ba:0b:64:e8:18:d7:fb:66:d8:
         d4:a4:95:9b:30:42:5a:8c:8d:7c:c2:47:00:11:e7:4d:11:a5:
         09:e1:3d:59:a8:61:80:74:09:9f:91:62:10:5c:20:11:1c:b1:
         58:95:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:17:57 2025 by rpki-client