Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
File:                     4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa (raw, json)
Hash identifier:          u9Zsbygm8KmLeU9voKGXn3yCpM8lbqcfmQnndSCP23A=
Subject key identifier:   E6:D1:C0:FF:63:B5:C1:14:69:01:C3:00:A7:65:C5:0A:1F:9D:16:95
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584A14656259A37F8046ECBE4C00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     36231
IP address blocks:        148.59.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:62:59:a3:7f:80:46:ec:be:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=dc62f974-1392-474a-a537-5f412a4b8b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:bd:d5:b6:aa:4f:76:41:e9:80:e9:4c:1c:
                    e4:7d:ab:59:19:ce:80:f0:82:1b:89:59:75:e3:61:
                    9c:f4:5c:5b:d0:3a:45:bb:c1:16:d1:03:3d:f8:2a:
                    fe:dd:11:29:0a:23:83:a1:4e:29:8f:c6:30:03:93:
                    1e:81:31:b5:53:04:d6:83:6d:07:f5:62:2b:ec:6e:
                    ae:d1:e9:ad:69:e6:4e:11:b9:9a:2c:b6:36:ca:63:
                    2f:79:61:a5:50:c7:64:b0:4c:b7:c7:3e:9b:a5:bb:
                    9c:15:fe:2a:d8:37:42:15:d3:ad:73:6a:1f:94:59:
                    db:60:04:48:3f:ad:99:3d:fd:f9:c5:b9:db:62:ca:
                    01:ac:a7:5b:45:dd:dd:e2:11:37:dd:11:a7:90:39:
                    55:0e:53:4b:e1:f0:69:01:c9:95:02:81:92:cc:07:
                    e7:a4:3f:72:15:e1:e2:98:96:c7:23:28:38:bd:3f:
                    ae:a7:48:b8:5b:02:17:d0:d4:a2:1c:ae:be:10:cb:
                    bf:f5:65:c3:d6:2c:13:ee:e4:be:40:db:e7:15:f4:
                    83:cb:22:b3:1a:d6:d6:cd:94:20:5f:ef:53:c4:60:
                    cf:da:4f:84:05:ed:d9:8e:c8:57:9d:3b:2c:d3:14:
                    19:46:d0:47:7a:61:ac:85:9e:58:8a:a9:8f:d7:fe:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D1:C0:FF:63:B5:C1:14:69:01:C3:00:A7:65:C5:0A:1F:9D:16:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4e927de0-af7e-30aa-b47a-b4ce5d7eb18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:00:13:77:f0:eb:71:73:18:2a:d2:a4:46:09:a9:c2:96:98:
         e7:53:6c:d6:ac:e4:45:78:67:ad:58:f6:d2:73:f0:27:57:df:
         22:86:41:32:07:86:fa:26:d2:db:4a:f5:78:9f:3c:71:99:c4:
         df:a2:89:9f:3c:9d:8c:a0:e9:68:93:10:bc:a7:c2:95:cd:59:
         a0:65:46:a8:6c:88:f5:88:b6:19:cd:7d:f5:24:c5:ce:c7:c8:
         8a:b1:5f:49:bd:13:60:f0:81:a0:17:4f:e1:9c:a0:68:31:3a:
         25:29:42:82:e2:cb:7d:76:52:31:7b:7b:06:50:f1:92:6a:65:
         dd:c4:53:c2:7b:fc:d0:a8:84:f0:03:87:74:d0:bc:3b:b4:e5:
         f3:38:86:65:9d:c8:23:c8:ab:48:a2:50:48:a3:35:78:5d:76:
         09:da:b3:8e:3c:cd:5d:34:be:2c:38:33:d7:5a:9e:73:45:96:
         ad:54:29:bd:8f:7c:85:36:1b:61:62:79:0d:dd:1f:3b:f6:21:
         40:c3:62:c9:53:ef:38:97:59:3f:04:89:b1:0e:5a:42:91:ac:
         22:3f:fe:dc:01:3e:c1:d3:2e:d7:ec:01:0b:b5:8b:e1:29:16:
         64:8a:d9:f0:d9:3a:14:f6:7c:89:4d:b4:48:86:4e:14:a1:f2:
         a9:f5:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:26 2025 by rpki-client