Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/180f2811-4194-318a-8805-660cf2becece.roa
File:                     180f2811-4194-318a-8805-660cf2becece.roa (raw, json)
Hash identifier:          AzaytDZEEImLJxT0iKinXJPrFQ7eVvbgTChPoqf3D9g=
Subject key identifier:   97:1B:27:0F:1D:0C:F7:A0:D6:25:A9:67:26:3B:66:B5:F6:1F:2F:91
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A2ABAF9696F17BA0D5A414E48
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/180f2811-4194-318a-8805-660cf2becece.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     397239
IP address blocks:        204.74.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f9:69:6f:17:ba:0d:5a:41:4e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ee950006-383d-459d-8b7c-9eca2136f404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:c4:55:06:52:d6:cd:d9:d4:b5:38:a4:6e:
                    a5:bf:ca:76:bb:8c:50:48:d3:1a:ab:ca:97:1f:b4:
                    f9:fc:86:ac:4c:ca:2c:1b:a0:99:ba:f3:57:35:b7:
                    a4:a4:e2:1e:2d:a0:e2:6a:2e:ea:99:79:cf:ab:ac:
                    21:2c:51:8e:71:1e:bd:2c:af:b4:a9:62:bd:98:a7:
                    93:09:e7:41:58:5f:c6:43:df:c5:43:fb:e0:f5:dd:
                    49:99:36:4e:15:3e:60:5d:04:79:16:d1:9c:09:8d:
                    32:69:f9:1f:ff:63:f1:98:96:14:9a:2b:37:0e:44:
                    46:03:5d:78:0b:5d:fe:da:4a:63:be:3a:e3:eb:71:
                    82:c8:b3:5a:b5:e9:4d:0e:17:3e:e3:44:92:84:c2:
                    c5:5d:06:81:a7:29:8b:75:20:83:dd:13:20:75:b6:
                    08:ee:03:1e:83:69:07:66:85:aa:b9:cf:d5:bc:6c:
                    0b:c3:41:54:bf:af:32:de:cb:f0:77:0f:a6:09:59:
                    22:3b:0c:af:d1:58:78:19:05:4f:a5:63:80:e3:25:
                    21:7c:69:1f:3c:fd:a3:e2:4b:30:9c:91:e1:1d:a0:
                    79:ab:4d:69:70:1b:08:26:71:39:64:0d:b9:de:32:
                    be:b0:3f:5d:ce:e8:ac:80:b3:29:47:3c:08:2f:d7:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1B:27:0F:1D:0C:F7:A0:D6:25:A9:67:26:3B:66:B5:F6:1F:2F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/180f2811-4194-318a-8805-660cf2becece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:92:3f:ec:4e:56:9d:ee:e2:b0:fe:a6:0a:e2:a6:f1:9d:b3:
         aa:5f:2f:1a:13:36:ad:ce:66:ca:8a:48:79:a0:c2:69:1c:af:
         89:94:89:27:af:d8:36:e0:b3:86:9d:3f:af:93:fa:5d:a8:c2:
         21:52:69:06:fb:a7:98:8e:85:ec:66:f9:ef:1f:1d:01:b5:47:
         d9:3a:0a:8c:f2:94:f6:ea:11:6f:95:3e:76:1e:5a:69:2f:50:
         e1:f7:91:82:00:e8:10:f2:ee:d2:b5:d5:1b:64:47:de:cc:16:
         2f:9f:0f:4e:5c:df:f3:69:2c:93:bd:7b:39:7a:fe:34:b9:bb:
         11:81:2b:01:90:2a:a5:41:e6:27:f1:b1:60:c8:6b:40:14:f8:
         f8:ae:d1:9e:67:b1:44:23:33:71:18:aa:08:bb:0c:ca:7c:88:
         d6:68:df:59:9b:bb:26:69:00:c1:76:da:fd:9d:8b:4d:8b:c7:
         10:b3:a1:31:03:c9:cc:6a:9a:76:d2:81:d9:32:9e:5a:d1:bc:
         3a:19:3b:71:ff:52:85:f5:14:fc:8e:35:27:51:70:fa:1f:70:
         c5:48:dc:b0:1e:00:c2:2d:1c:fa:0a:ec:1b:19:ca:dd:e1:5b:
         2f:0c:5f:1e:bd:52:7e:fe:ef:c8:ac:4f:f3:aa:81:67:c7:6f:
         1a:51:1b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:25:07 2025 by rpki-client