Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
File:                     74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (raw, json)
Hash identifier:          JQToqta+3t2wCt1ghLu4Hrx0jeVJPODkGDhWSo7y3e0=
Subject key identifier:   AB:69:3E:E7:3F:E4:DA:DE:9B:66:1B:32:BE:63:91:7F:29:BC:CA:53
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F4328584A1B5FFFDD9C8126607EDCD7C0
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     53904
IP address blocks:        162.244.229.0/24 maxlen: 24
                          205.189.33.0/24 maxlen: 24
                          2001:410:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:ff:dd:9c:81:26:60:7e:dc:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=993697ae-0353-44ab-bdb1-67cec0230938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:8f:ce:9d:83:af:04:45:5f:ed:96:8f:7c:
                    1d:fb:54:60:1b:a3:05:af:60:d8:03:32:e8:ce:9c:
                    ed:09:49:be:4b:1a:c9:94:45:3c:44:cc:51:bd:f4:
                    56:d4:08:10:dc:c6:04:6a:90:76:8b:9f:f9:49:63:
                    9a:1b:e1:91:f5:e5:a7:bf:03:bc:b8:82:2d:7a:6a:
                    c7:e5:0e:03:40:51:4c:b5:1f:3e:c0:9d:d1:87:7c:
                    25:7d:2e:8c:13:96:5d:76:9c:58:e3:77:53:89:01:
                    54:b7:69:64:10:a0:62:0c:33:cd:00:3b:69:40:47:
                    5e:de:6e:24:a9:5a:fd:c5:1b:8c:bc:88:0a:9a:03:
                    a5:43:5f:ce:60:72:3d:5d:be:8b:44:a2:72:d0:ae:
                    5c:0e:25:8b:7f:36:72:c2:07:6d:d6:a4:3d:d4:da:
                    9b:23:46:c0:26:e2:e8:6e:5b:47:50:3f:e3:6d:57:
                    7c:ce:36:29:f4:b2:77:22:76:58:02:9d:39:58:64:
                    5e:93:a2:fc:1e:6f:5e:c0:f1:7e:4e:a5:bd:6d:30:
                    09:b7:37:23:ca:b7:d1:81:74:ea:7a:1e:51:ad:1e:
                    1e:83:a7:1a:80:8b:2f:fd:f7:6a:42:30:54:0e:c2:
                    42:e6:2a:f7:07:ff:d7:ef:6b:ad:5f:6a:c2:5c:86:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:69:3E:E7:3F:E4:DA:DE:9B:66:1B:32:BE:63:91:7F:29:BC:CA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.229.0/24
                  205.189.33.0/24
                IPv6:
                  2001:410:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:82:cc:a2:00:14:85:69:75:81:cc:f7:1c:89:f8:9b:ef:
         6c:26:05:a2:e6:05:c8:cb:18:55:ae:6a:b3:ef:fd:8d:e7:c9:
         6f:42:a9:5a:67:9d:1c:22:31:20:f8:57:0e:38:4c:0b:65:a4:
         43:49:39:56:a4:eb:e2:d8:fe:f3:c3:1e:ad:4a:70:e1:0b:07:
         1d:35:c2:ca:62:02:50:34:1b:74:ec:9a:e2:c5:11:bf:34:40:
         c5:f0:ec:bf:e3:82:32:de:0d:5f:fe:e3:21:ed:65:c4:bd:9f:
         83:c5:10:ab:42:51:f2:32:f8:03:54:ac:85:40:b6:32:00:4a:
         2f:09:19:bb:7b:ee:6b:5e:3a:23:df:f4:30:94:9c:d8:79:e3:
         87:94:b4:62:56:33:dd:d3:e7:0f:b0:7a:be:26:da:62:8a:cb:
         69:f8:df:f8:32:89:90:c4:fd:3f:14:34:48:83:c0:00:2c:8e:
         d0:f6:e4:25:0d:8a:71:db:c0:84:26:dd:0a:e0:a4:cc:15:d8:
         a2:59:99:8b:4f:77:bf:e6:bc:42:00:27:9a:a1:3d:18:d5:05:
         2f:66:6f:d4:8a:a4:09:1c:a8:a0:ae:17:ff:1d:63:9f:58:c0:
         75:cf:d2:8b:72:b0:e7:d9:f8:a7:bd:04:e3:24:17:e5:60:79:
         33:bd:0e:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:15 2025 by rpki-client