Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e744c44-f975-3d56-bc70-8626ab159a9d.roa
File:                     1e744c44-f975-3d56-bc70-8626ab159a9d.roa (raw, json)
Hash identifier:          AKSVrEKbsuNws3d7/cKmB0SY8cQ61dEpBiw8rII/Mhc=
Subject key identifier:   A4:67:3B:A4:57:32:CB:41:D7:20:9B:59:64:A9:A6:56:43:A3:9F:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A7F650FFEA3CCC3200200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e744c44-f975-3d56-bc70-8626ab159a9d.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     22394
IP address blocks:        174.42.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:7f:65:0f:fe:a3:cc:c3:20:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=0e99cc60-5c1e-49c8-8611-29d54d98b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:70:cb:4e:d3:8f:9a:18:17:0f:0b:f6:7d:
                    1f:ca:8f:58:19:85:26:77:59:ab:af:53:91:10:ba:
                    8e:5f:07:b0:6a:c9:28:c4:61:12:d6:da:fa:0a:9b:
                    33:5a:0d:b2:2c:75:6e:2f:3b:66:0c:4e:1a:fe:e9:
                    ad:54:9e:b1:36:ca:bc:bc:cb:61:c3:b2:8c:b3:70:
                    69:89:9c:16:43:f2:06:45:46:9a:66:84:08:1e:13:
                    d8:bc:71:45:e3:63:22:91:65:3b:70:38:75:1d:65:
                    22:c1:a3:c0:0d:80:c9:a0:a6:04:33:d5:da:ac:36:
                    78:fb:6b:f3:7d:ee:77:a0:51:1d:6a:04:21:de:ed:
                    a7:c1:2c:27:be:e1:de:f0:6b:da:d6:a5:f2:44:2a:
                    70:97:86:ac:69:57:45:44:ab:c6:e3:13:a6:ca:9d:
                    63:42:ba:5a:5e:c3:f7:c4:34:7a:24:e1:86:24:5c:
                    2b:a0:42:a4:c5:21:87:27:01:1e:c2:d4:4e:d8:2d:
                    97:e7:b1:cc:24:23:51:0e:d1:d2:9a:19:58:c4:ac:
                    50:89:ac:97:73:79:ec:c5:dd:53:21:03:49:e5:be:
                    32:98:a5:23:6f:50:ea:fe:14:e5:9d:47:4e:0f:fe:
                    79:d3:98:00:ec:3d:c9:8d:94:aa:cd:c7:7d:3d:60:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:67:3B:A4:57:32:CB:41:D7:20:9B:59:64:A9:A6:56:43:A3:9F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e744c44-f975-3d56-bc70-8626ab159a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ea:69:b5:f9:e3:95:49:8e:f4:40:7a:da:d2:20:3f:5f:70:
         09:9d:03:1a:0c:e3:92:e2:67:42:e7:90:aa:02:09:a5:da:f5:
         53:01:fd:e6:a3:3d:b6:54:97:ee:53:e5:7d:c6:fd:72:c4:5c:
         8c:b1:61:2d:70:db:6b:01:26:0b:ed:92:c5:1b:df:d7:f8:cc:
         94:b6:3d:80:51:b7:02:ee:c1:eb:8d:0c:96:58:25:4b:0a:4c:
         6b:04:ce:cc:aa:15:f2:e0:f9:fb:0d:2d:f4:bc:9a:5b:2b:5a:
         5b:3a:70:37:75:47:c6:3b:5b:72:1d:87:4f:a4:f4:00:2b:95:
         6a:95:da:cd:b0:10:b3:68:80:60:30:05:3d:f4:69:17:79:83:
         2e:9e:67:64:29:98:15:a9:cb:ef:c7:e9:32:ee:27:3a:33:31:
         44:2e:3c:02:b8:65:2a:ca:21:72:82:ee:cd:77:a7:73:30:3e:
         30:b3:8f:9b:07:16:f0:87:47:4e:46:83:5b:e5:0b:0e:a1:ba:
         d9:f3:2e:ce:37:f1:30:75:31:c0:0f:be:27:1f:9d:ac:b4:c2:
         18:5a:50:65:38:1c:b9:ca:5c:8d:87:54:e5:a0:43:07:1a:9b:
         bf:9c:53:13:de:fc:8d:84:c7:86:cd:63:52:4a:0f:d4:70:62:
         8c:e9:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:51:26 2025 by rpki-client