Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa
File:                     30045496-fbf9-3b3d-abd4-a8521a8506ee.roa (raw, json)
Hash identifier:          5QeqEWfnRp3tbuWRzmMaMemFGlTHlxF6TMzxwcEVaA8=
Subject key identifier:   B7:07:0E:2D:E3:18:54:58:0E:E1:B0:D7:E8:E5:33:FF:87:35:3C:4F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BB0F6A30BE16635E0C3992C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        172.217.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:6a:30:be:16:63:5e:0c:39:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=fb74449f-c456-4b58-8d1e-4be8a102c9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:eb:79:31:d6:64:1a:5e:f7:5b:1e:4e:75:
                    f0:7a:8f:16:e1:e0:3e:52:91:fe:8c:1b:81:9f:87:
                    85:7f:66:39:d5:a0:7c:31:13:01:59:5d:af:0a:f1:
                    ea:f5:d8:20:48:69:b3:19:18:e7:35:c0:3d:4a:bc:
                    0c:f9:64:f3:c3:6b:e6:76:54:3f:2d:74:ba:d9:e2:
                    0c:1f:a9:19:0a:b1:57:fa:7c:b3:5f:3d:31:84:d1:
                    f6:d1:85:4f:e0:15:27:1b:56:c4:c4:38:05:f7:e8:
                    a3:eb:c7:10:8d:5a:4e:b3:79:a6:41:be:57:74:41:
                    ee:f8:43:bd:e3:e2:35:84:58:12:03:7f:eb:b8:6f:
                    f0:52:dc:8b:4f:d5:25:ea:56:24:33:d2:16:08:85:
                    1e:c3:40:db:e2:e5:4b:81:c6:c7:fa:41:db:29:6b:
                    cb:78:f8:44:10:69:0f:d7:4c:26:3d:9a:4a:3c:4d:
                    a9:8c:fe:df:95:eb:16:f3:bc:a8:86:3c:9f:ac:60:
                    c9:a4:04:95:3b:07:72:30:8b:78:a9:69:d3:fd:be:
                    54:76:3f:6a:98:5a:cc:15:7b:09:36:f4:e0:b2:7a:
                    2e:ee:e3:f2:e5:56:b8:85:66:b3:96:58:d6:4c:be:
                    49:14:c3:03:dd:6f:4a:2b:2e:61:10:53:3a:a5:b7:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:07:0E:2D:E3:18:54:58:0E:E1:B0:D7:E8:E5:33:FF:87:35:3C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:09:03:1d:ec:d0:0e:27:3f:9a:15:55:1a:29:d6:cb:f1:07:
         da:ff:85:56:7e:16:11:53:53:a0:c4:e8:43:43:5b:c6:b5:e4:
         4f:e5:6d:ab:1f:0a:a8:48:16:9d:88:f4:12:74:15:9a:90:cd:
         a6:70:d9:e6:85:e9:4c:9e:22:8d:23:45:03:0a:bd:8f:00:f9:
         0c:a4:26:fd:ed:f8:cb:90:dc:eb:d2:55:a6:6a:aa:ae:0d:e0:
         86:b7:48:65:ad:f3:73:a2:30:56:a1:bf:5a:51:5d:cd:3e:93:
         0e:e3:ce:39:6a:43:c5:c3:1d:49:12:9b:2b:10:72:fe:6c:67:
         0e:b9:a8:64:7b:1f:33:8b:bf:6f:5c:5d:0f:59:fd:83:6a:bd:
         ca:dc:df:ef:8e:16:30:80:9a:4d:e7:ed:b0:30:46:b9:7d:7c:
         f5:c5:b5:b0:bb:7f:ff:2c:57:35:15:c6:c9:96:0f:3f:f3:3c:
         ac:fe:a2:97:8e:6e:ba:38:41:6f:05:b0:22:f8:ee:4e:7d:a1:
         ce:23:f3:40:39:e7:f2:44:5c:2e:c4:e6:e7:f2:31:ea:3d:c2:
         f7:b8:65:84:ac:45:2f:e0:05:6c:4b:15:9d:ce:f1:c6:8d:44:
         5d:2d:38:99:af:5b:bc:27:1d:0a:d3:08:84:1f:b1:63:5e:04:
         f8:92:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:31:11 2025 by rpki-client