Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1998cff1-c3b2-3072-86c1-aea14ebeff8f.roa
File:                     1998cff1-c3b2-3072-86c1-aea14ebeff8f.roa (raw, json)
Hash identifier:          IeolI3WQ8gwGxeY3Gy+p1yqq2c9Gzny/qtSCCDkiHJU=
Subject key identifier:   25:2D:FD:37:EC:E6:8E:18:AC:6D:AE:F0:0B:56:72:89:08:58:CD:CB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F89000F408417E48CF08
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1998cff1-c3b2-3072-86c1-aea14ebeff8f.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397237
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f8:90:00:f4:08:41:7e:48:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=ee72d986-bef0-4c92-af44-a4096cc7ceda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:ae:2b:13:42:c0:62:92:d5:27:bb:6d:38:
                    12:92:5f:f9:91:d5:ab:32:20:7d:dc:aa:32:b5:15:
                    16:4a:74:66:09:85:bc:b9:36:70:19:2e:87:f7:86:
                    a0:a1:25:68:df:9f:7b:6e:ac:d6:97:16:81:83:66:
                    be:8f:3a:bc:08:b9:c3:e6:1a:75:54:9f:e8:62:16:
                    37:96:bb:62:cb:68:50:45:65:28:87:d3:ab:ad:67:
                    6e:97:9e:d1:c6:8d:7a:cb:a6:fb:b6:3e:92:a7:75:
                    c8:4d:b6:96:04:81:30:41:26:0c:6a:23:0b:9c:a7:
                    fb:fb:8a:ed:fb:91:37:4b:c7:3e:60:d3:cf:ee:6d:
                    50:f2:c3:da:aa:1f:6e:3d:85:f0:30:92:91:9a:ff:
                    b1:70:5e:4a:0c:26:66:c0:6b:40:71:9e:ff:69:70:
                    a5:e8:60:20:54:f0:fd:86:59:2b:a5:20:01:bb:b7:
                    71:a8:4d:44:3f:72:57:30:15:3d:e0:c9:a8:15:c1:
                    75:15:14:e2:e7:fd:3a:93:9e:b8:28:6d:09:b7:68:
                    97:48:35:4d:d4:84:bd:44:10:4e:dc:04:f0:d5:3f:
                    ed:f1:e8:c3:c6:63:53:c6:e3:b5:d3:37:fa:b6:8a:
                    2b:24:10:96:79:b6:5b:2d:72:bf:26:9c:ec:f7:cd:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2D:FD:37:EC:E6:8E:18:AC:6D:AE:F0:0B:56:72:89:08:58:CD:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1998cff1-c3b2-3072-86c1-aea14ebeff8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:79:19:3b:7d:80:56:15:e0:de:c3:03:95:55:48:8b:01:
         82:cd:ad:dd:48:82:3d:63:20:29:6f:69:c3:2d:ae:89:90:2e:
         ad:22:d5:08:66:f0:4d:96:af:11:66:9d:27:c5:f0:a4:d6:44:
         ce:0c:ba:29:ae:9e:32:75:a8:cc:0d:37:15:db:3c:02:f4:c9:
         e0:a5:02:9e:ee:19:6e:e7:5a:fe:22:d2:90:0d:74:2a:83:5f:
         3d:d0:e3:cc:aa:7c:ad:95:29:fc:27:41:a8:f2:d9:34:09:91:
         c8:dd:a6:c8:8a:76:16:81:48:a0:71:01:5c:29:d4:49:fe:bf:
         b2:c8:d0:e2:9a:fe:cd:83:1a:e8:fa:0d:69:4e:1a:ac:96:55:
         bd:50:a9:b0:d9:0f:d4:f7:49:c6:95:48:94:51:05:e1:8e:14:
         c9:f7:14:2d:30:d7:ea:2f:22:52:c9:4c:64:50:51:b3:b4:ba:
         ee:7b:82:02:4d:87:1a:d1:e1:91:cf:71:0b:3f:9b:fe:71:76:
         4d:88:51:d7:b4:b3:8e:da:b5:80:7b:01:9d:0e:75:98:38:e1:
         dc:7c:fb:e0:67:91:e0:48:9f:5b:1e:fd:71:78:01:d5:f0:67:
         93:e2:a3:51:08:e5:bd:a6:c4:16:14:93:13:1f:0c:fc:c1:76:
         d9:fe:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:28:02 2025 by rpki-client