Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/30ddf081-bfb4-3224-82f0-817556f4eeb9.roa
File:                     30ddf081-bfb4-3224-82f0-817556f4eeb9.roa (raw, json)
Hash identifier:          6roPfSolqWm4rQiRJkDdFwpP7gXAzUp8ITtZbxRXvz0=
Subject key identifier:   C9:FE:AA:7B:68:B4:EE:02:80:E3:6E:F9:34:64:6D:59:75:52:13:41
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F4328584ACE0B9244B376C20F9E624480
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/30ddf081-bfb4-3224-82f0-817556f4eeb9.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     46208
IP address blocks:        74.221.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:92:44:b3:76:c2:0f:9e:62:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=43876bf9-ebdf-422d-8d1d-1ebbe7cb2c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:4d:50:6b:5d:89:aa:18:74:3f:27:21:d5:
                    e8:36:82:d6:95:ca:5d:e7:cc:d0:07:82:4a:f1:fa:
                    f5:cf:d6:30:15:49:b4:49:1f:4a:6b:84:4e:50:3c:
                    7b:fc:72:a3:5f:a9:11:16:e6:d6:d8:eb:27:84:95:
                    85:81:10:f0:4e:32:a0:fe:d5:43:20:87:f0:09:6b:
                    f2:d1:ed:2d:9c:6c:57:93:7b:be:96:6a:66:73:91:
                    81:47:8f:22:e9:0e:59:3d:8f:bb:ae:d9:19:6a:67:
                    e0:1f:68:52:9c:9e:4c:9b:50:db:90:b3:43:4b:99:
                    14:57:4a:42:a4:7f:08:7f:46:d4:4c:20:42:f3:8b:
                    03:fe:90:e3:f2:00:a7:af:02:a5:a7:6b:32:e0:97:
                    af:06:11:c4:88:f0:e0:18:99:3d:72:e9:a4:a5:ba:
                    68:ce:7e:90:03:af:81:2d:96:17:b5:f4:97:e5:c5:
                    e1:b9:19:d6:3f:ef:7e:b8:dc:b0:be:9a:00:32:a4:
                    c4:46:4e:38:03:f3:c4:50:7b:2e:4c:b4:29:2f:1e:
                    29:a9:b7:f0:1a:55:ee:5a:18:13:b1:ef:7f:32:20:
                    0e:c3:51:5d:c5:47:4f:48:39:e6:a8:a2:5b:83:20:
                    cf:ee:42:00:c9:ee:a2:de:5e:94:56:8f:a0:fb:c4:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:AA:7B:68:B4:EE:02:80:E3:6E:F9:34:64:6D:59:75:52:13:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/30ddf081-bfb4-3224-82f0-817556f4eeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:90:af:b4:e9:c2:f5:e2:b9:ad:80:05:0c:64:d3:ce:41:ad:
         42:d1:9c:05:68:f1:fd:cc:74:5d:40:1b:ed:a8:0d:ad:dd:e8:
         b2:d1:07:23:a1:d5:44:3a:7f:d8:9c:5d:16:f3:ba:32:06:78:
         42:97:ba:bb:93:cf:20:7b:53:8d:3b:28:d8:75:f6:29:00:a4:
         f2:89:2d:49:b7:27:56:6d:de:9e:a6:77:d7:6a:d7:12:51:c0:
         85:a4:4a:c3:2c:a6:32:1c:40:46:32:31:b3:92:90:fd:0a:79:
         8a:be:d3:fc:4b:6f:0e:62:f1:e7:29:61:6f:92:51:f0:e0:d1:
         38:c9:07:f7:f1:27:0d:b4:d7:72:03:49:b7:80:80:35:c7:e9:
         c9:00:a8:26:f2:f7:a9:65:d2:47:a2:c2:23:48:34:86:d2:cb:
         e2:0a:5c:d7:33:d7:8d:14:72:7c:68:61:fd:b4:61:7f:76:0a:
         32:92:d5:fb:1c:67:46:1b:68:19:30:63:76:34:a9:fe:44:6f:
         65:44:34:dc:4d:f4:04:2c:98:5a:8d:44:d5:40:2b:0a:72:36:
         11:a2:6c:4d:4c:97:1d:30:7b:73:42:a8:69:65:ba:aa:55:6f:
         39:01:a7:58:d1:9a:26:72:b7:38:00:7f:49:32:9b:ce:f1:25:
         81:59:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:45 2025 by rpki-client