Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa
File:                     bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa (raw, json)
Hash identifier:          kObcleob7sS5E3qcU5Zqpy+GFihS+tMY8plUnMJN+hU=
Subject key identifier:   2B:F5:49:F1:8D:52:6C:30:B2:F7:76:BD:4B:59:52:F1:6F:D2:F9:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A7F70F311E6560F5BA580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     22394
IP address blocks:        174.40.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:7f:70:f3:11:e6:56:0f:5b:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=03bba99f-d0a4-465b-851a-f846449e4169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:fb:27:98:e9:d7:08:54:ac:90:a7:72:a9:
                    d2:d9:0e:0c:3e:0d:ba:e5:be:f0:25:29:ac:4f:ec:
                    17:01:95:c8:cd:77:62:6b:0e:6d:98:c0:75:7b:85:
                    9a:eb:02:9c:47:f0:b1:08:e6:e0:f7:1b:05:30:cb:
                    6c:7c:4f:ca:1b:b8:e6:5d:7d:6c:b4:96:e3:04:b8:
                    46:13:90:f2:5d:b3:88:e7:5f:ac:5f:42:8a:70:07:
                    28:c3:b5:e8:f8:a9:e9:a7:02:e1:18:a3:da:d7:89:
                    e4:39:26:fe:d5:ca:ef:a3:c5:7f:02:c8:af:05:17:
                    9f:b4:a4:bd:3b:e6:93:1a:8e:db:8e:71:e1:b7:b3:
                    4a:15:c3:77:ed:51:70:2b:df:ac:98:5d:49:fb:cf:
                    ef:d4:89:f1:4d:4a:12:6d:bf:1c:ea:5e:f4:ba:c8:
                    ed:d3:c3:17:88:da:56:3c:5d:c8:e2:f2:7f:c9:e9:
                    c2:7c:42:a3:1e:bb:57:b0:38:f5:44:93:9e:f4:f0:
                    dc:7b:2d:b0:40:d9:01:c9:59:e8:b1:25:9d:37:9d:
                    d2:a2:5f:18:cd:47:7b:51:3f:20:19:d5:68:36:50:
                    0a:b8:d8:6c:10:8c:db:6f:57:ab:60:89:6b:8e:fc:
                    9b:08:32:25:b2:26:c2:f6:3a:3e:a3:da:dd:98:7e:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F5:49:F1:8D:52:6C:30:B2:F7:76:BD:4B:59:52:F1:6F:D2:F9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bac9d275-fb1f-3c00-9112-2ea4ff17bed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.40.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:82:f4:45:24:5a:b6:b4:c0:e8:44:4d:90:ad:57:b5:84:d4:
         8b:cb:28:39:74:fb:ec:7a:c9:de:5d:fa:56:14:9e:21:31:5f:
         02:73:93:19:a1:35:c0:3e:83:cf:16:08:a9:36:a4:8c:03:93:
         2f:41:c3:4c:fe:ea:72:c3:26:c3:43:50:b0:39:45:29:31:a3:
         1a:fc:d2:67:49:2a:af:53:7c:e7:00:b9:85:4f:cf:52:c4:89:
         bf:f3:fe:a6:78:82:de:1c:78:48:86:66:6b:34:bb:cc:c9:4b:
         ab:77:79:68:b1:47:76:7e:f3:60:47:4f:7a:61:f1:14:a2:14:
         a1:bf:39:86:3c:e2:e5:b5:42:4b:79:ef:c4:48:b5:51:d0:eb:
         62:d0:3e:01:2d:37:8d:a9:e4:e9:e4:a7:ff:23:db:90:b4:cb:
         9f:97:fc:bc:3c:78:95:17:07:01:27:83:53:95:dc:b5:19:bd:
         8d:da:a8:08:25:18:b5:59:9b:32:c0:53:64:e5:57:7e:d1:df:
         b9:9f:c7:8b:fa:f4:f9:ee:c9:8a:cd:f1:3b:1d:bd:eb:ab:7b:
         8f:c0:7d:55:a3:b4:e5:49:fc:b7:67:f0:90:ad:df:85:79:4c:
         b9:5f:d2:ac:71:84:f4:e7:46:56:b2:42:f5:f8:2e:3b:1b:9f:
         14:92:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:22:31 2025 by rpki-client