Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa
File:                     ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json)
Hash identifier:          UjIzkcVJ1V4U5Q/a8EihYerCZi+SILnEhd7H69IcUrQ=
Subject key identifier:   89:81:6D:82:1E:BC:25:C3:E6:8F:F6:6A:93:24:27:1C:97:70:6F:0F
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584A1E2AA28EFA2F5A50739C3180
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     21949
IP address blocks:        74.213.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a2:8e:fa:2f:5a:50:73:9c:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=a4bd5242-cc0a-4ce4-b16c-fe915e929972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:d2:28:62:d7:bd:57:49:d5:3c:d2:07:a0:
                    7f:a3:4d:3c:9a:f8:41:b7:7c:ee:f7:75:0e:8f:01:
                    1d:06:d5:ba:df:13:b1:a4:83:41:6f:26:90:ce:6a:
                    8a:ef:73:48:03:77:7f:50:d8:9c:d2:a7:94:8f:b3:
                    69:83:7e:22:f7:81:27:8b:d4:f1:cb:14:43:f1:09:
                    eb:df:7d:23:d2:29:08:b9:0f:a2:4f:a5:21:b2:f5:
                    fe:c9:10:32:8e:a3:84:d1:6b:60:9a:16:a6:76:54:
                    16:e8:b1:f3:b7:c7:ec:48:be:49:e1:50:9c:57:21:
                    15:9f:b5:21:71:fa:de:ac:3c:90:7d:83:61:06:e3:
                    45:9c:d0:f9:ba:8c:d5:75:ad:37:a6:bc:5b:37:d6:
                    42:2d:f7:e2:56:77:19:99:ee:44:4b:68:09:76:58:
                    65:ec:db:95:2a:b4:2f:ab:dd:ca:f6:61:90:2b:2e:
                    27:31:82:8a:47:6b:49:f1:75:05:15:dd:b9:8b:ec:
                    e3:26:cf:43:25:14:28:62:f4:36:94:f6:c1:c9:80:
                    5f:8f:46:eb:56:3d:40:c9:b1:2d:b8:60:64:f5:db:
                    be:96:c9:5b:a1:26:83:e2:1a:b4:b5:f6:8d:86:b0:
                    d5:06:63:d4:ab:4b:ee:0c:b1:af:f5:d0:49:ec:50:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:81:6D:82:1E:BC:25:C3:E6:8F:F6:6A:93:24:27:1C:97:70:6F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.213.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:b4:24:a3:5e:87:40:c7:3e:04:04:02:10:cf:68:b6:f6:
         7f:13:56:d6:ab:2a:6c:8c:f4:3b:48:a4:82:64:4b:a5:30:5b:
         a6:8d:4e:59:3f:7c:95:34:14:28:1f:60:14:99:ae:f9:d6:3c:
         47:cd:60:88:6f:60:ac:5f:27:eb:44:c6:b1:9f:bf:1f:6d:77:
         6f:1e:1b:5e:c3:e9:00:6d:df:da:e2:e9:12:f9:34:14:b0:97:
         c8:55:70:0b:a3:d6:a5:56:be:58:5d:06:d6:bb:fb:17:21:66:
         d0:61:c2:f5:34:72:02:66:22:69:87:16:ed:40:cd:a5:4e:41:
         98:53:d4:7f:81:a0:da:41:e6:4e:ea:58:c6:b4:d0:ee:f5:28:
         b3:86:fa:c6:f2:37:f4:45:a6:18:81:42:68:05:fd:61:a5:f0:
         ae:dc:9f:a4:be:d7:7d:a5:24:ef:4c:81:7b:ee:83:52:87:b2:
         d5:17:70:77:bf:73:b3:c9:c8:23:6c:5b:90:73:b1:32:21:ab:
         7b:4e:34:38:ce:6d:b6:50:4f:6f:b1:c7:34:11:fd:eb:9d:e0:
         7f:4a:36:f3:dd:7a:3b:4e:83:c3:3b:3e:95:b2:41:40:fc:53:
         48:68:60:46:8d:cf:7c:e7:bc:2c:aa:71:6c:c9:7e:e2:f9:0a:
         50:e5:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:43:42 2025 by rpki-client