Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaff572e-2f0d-36e5-8882-78e50777f1c1.roa
File:                     eaff572e-2f0d-36e5-8882-78e50777f1c1.roa (raw, json)
Hash identifier:          ZtkmHNP65WOEnHCRVMLvQDUhoX3sAw6aMyOWGvJZ1oQ=
Subject key identifier:   75:7A:D3:F5:C6:70:3F:EF:BB:F9:A2:18:68:65:31:54:BA:E1:03:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2450EFACB7159F7C910380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaff572e-2f0d-36e5-8882-78e50777f1c1.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        71.246.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:50:ef:ac:b7:15:9f:7c:91:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=b626f926-1132-42c3-a1df-2447fae7112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:b9:17:fa:56:d9:6d:43:b3:1e:aa:a2:95:
                    7f:8f:ab:c4:18:ea:0e:3b:96:18:3d:74:9d:4a:9b:
                    eb:66:d9:07:3b:0d:e1:7f:2d:1a:1b:2d:83:e5:c9:
                    e1:d5:75:67:3a:d7:d1:b3:42:a6:19:0b:ce:27:98:
                    ae:c7:85:25:8c:35:5c:01:5c:95:ad:a6:09:54:5d:
                    e1:d4:3c:be:1b:5e:20:47:eb:31:39:ef:65:f2:fa:
                    29:0b:0d:05:77:94:26:b2:b8:0a:3a:2e:28:90:8e:
                    e1:31:65:16:b8:c4:82:64:19:56:b2:0a:80:d1:21:
                    3f:1c:9e:dc:eb:67:8a:eb:f1:9a:9a:9e:40:6f:b4:
                    1e:9e:33:d6:40:2d:80:f3:61:55:a2:d3:e7:7e:ba:
                    b3:e7:3b:92:89:54:c3:0c:71:d3:3b:ff:4d:63:a2:
                    05:ab:06:c3:af:f9:dc:10:de:26:4f:84:be:b7:78:
                    a6:b4:40:4b:06:e1:0c:79:70:4b:ff:a0:eb:e3:17:
                    8d:d4:15:a3:20:53:9f:ac:58:ae:02:dd:c5:ee:94:
                    24:78:8a:69:19:03:70:8c:20:27:b8:4a:25:96:03:
                    61:55:14:bf:02:a4:da:14:d6:da:93:9a:62:63:0e:
                    0b:db:15:2c:2f:eb:e4:7c:8c:26:1b:3b:04:02:44:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7A:D3:F5:C6:70:3F:EF:BB:F9:A2:18:68:65:31:54:BA:E1:03:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaff572e-2f0d-36e5-8882-78e50777f1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.246.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:e3:e9:4c:6d:30:16:32:01:f1:93:a9:6d:c1:d3:2b:ff:
         46:6e:6a:c5:c1:ae:a4:62:fa:6d:64:85:d7:da:45:b5:14:dc:
         1f:ef:b6:8e:a1:53:83:e5:a9:bc:30:d2:04:7d:6e:31:88:f1:
         a6:d8:dd:2e:49:49:e4:76:4a:a0:24:bc:47:ff:00:96:0c:fb:
         97:2c:3a:3d:0d:cc:24:a4:a4:11:1b:45:35:1b:63:1e:02:b5:
         d9:d7:27:8d:4a:01:eb:a4:a7:e9:37:ad:dc:39:57:4a:89:50:
         65:b7:dd:c7:51:64:78:02:fb:18:cb:c1:c7:b3:2b:05:cb:d5:
         86:cf:6a:1b:a3:5a:47:6a:41:cd:f0:30:eb:53:ec:5f:e0:47:
         09:60:56:aa:f1:65:24:c7:fd:dc:ee:3e:c5:f5:a6:7a:1c:99:
         db:21:ea:82:07:bf:fc:1e:8a:67:0d:8a:b1:db:94:22:04:33:
         4e:a5:a7:2a:83:9b:f7:92:a9:61:ff:c2:a8:ea:9b:0b:a1:c5:
         72:35:41:d2:72:e0:13:bf:88:ed:02:d3:ec:bf:1e:75:df:5b:
         fd:6a:30:a9:43:cc:e3:2e:d3:4e:ce:d3:5f:c9:b8:dd:aa:56:
         a4:9b:ba:72:0d:ed:1f:a6:a9:b9:74:c2:b5:23:a5:ce:31:b6:
         14:f4:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:36:24 2025 by rpki-client