Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa
File:                     4453567d-94a3-375d-9415-c8c1fdd02afd.roa (raw, json)
Hash identifier:          Wv+JGwdNXQK7AicVCyLba7Bblje40/fpfi3PIaCr2v0=
Subject key identifier:   6B:03:90:BA:EB:4B:57:BA:9D:87:52:FA:18:39:A5:63:DF:FB:F8:C8
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F432858498604658A81474C69B555B0B2
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     401416
IP address blocks:        74.123.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:65:8a:81:47:4c:69:b5:55:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=119c430d-83ca-4823-b370-69499f3b5d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:02:ab:40:0c:e7:cd:10:15:23:15:11:a7:
                    0b:f1:27:19:07:68:8b:95:62:ce:29:50:5d:84:ae:
                    1c:14:4e:e1:24:a6:55:de:d7:75:54:23:bc:1e:ba:
                    94:bb:be:f6:f4:78:96:e7:ed:97:f0:52:96:cf:fd:
                    26:94:0c:da:61:df:9e:38:5c:aa:ed:d9:bb:8f:32:
                    9d:34:74:fb:6f:d9:18:52:f5:a1:ca:68:dd:25:71:
                    e0:c7:98:14:e6:a7:e6:af:24:0a:af:ca:c6:8b:71:
                    a4:3c:28:51:d7:00:59:70:50:6e:7b:94:a2:b8:0e:
                    d7:39:ca:5f:4d:da:54:8d:9b:43:a4:1b:91:c9:1e:
                    79:60:22:83:90:87:7e:fe:ce:3d:b7:24:53:d4:d6:
                    3e:b7:08:31:33:6b:18:84:37:04:97:3e:1e:91:f7:
                    5c:81:51:a2:a0:78:1a:f8:ef:da:62:8e:97:50:25:
                    c4:90:12:82:90:f4:6f:1f:a2:62:ae:53:b3:05:71:
                    8c:0b:7b:61:1c:a2:42:8a:99:3c:5d:e1:dd:8a:40:
                    19:9a:41:3a:29:f8:ea:ec:55:28:d5:a9:6e:a7:8f:
                    c3:2e:29:26:17:91:bf:9c:85:a0:f5:6b:ec:ea:4d:
                    ee:29:ab:12:b5:56:3e:98:89:72:63:db:03:1e:33:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:03:90:BA:EB:4B:57:BA:9D:87:52:FA:18:39:A5:63:DF:FB:F8:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:17:b1:55:b1:f1:b5:b5:aa:24:a2:23:41:86:64:a6:78:43:
         1c:80:d1:c0:b2:a3:06:29:41:53:a7:63:5b:e1:2a:7d:60:62:
         9e:74:3d:88:2d:cf:fc:cb:7d:3c:e1:e4:de:dd:41:ed:91:6d:
         23:a2:19:d0:5f:a2:89:b6:c0:ba:0a:61:90:af:10:ca:35:b9:
         87:12:54:c0:27:4f:7f:15:8c:3b:00:8a:e9:c0:e1:8b:9d:fd:
         29:16:e4:5f:42:5c:09:3a:83:0d:ed:45:8d:0a:39:09:8c:7c:
         55:93:a4:ef:a5:16:83:8a:32:09:7b:4b:ec:f2:47:e3:5c:7b:
         dc:c4:f0:1a:f0:60:98:09:c0:16:a1:06:84:25:ab:a9:af:42:
         cc:1b:90:a6:db:02:6d:bf:59:ab:3c:1b:e6:72:fa:14:67:3e:
         08:64:71:bf:06:7a:76:ca:b8:3e:f9:31:60:d8:f7:b6:86:90:
         ca:92:da:2d:51:31:67:f3:cf:c6:76:2f:63:af:69:b3:b7:dd:
         71:2f:21:5a:fb:c3:96:72:d8:d3:2e:40:2e:20:17:bd:6d:67:
         07:81:88:83:5f:04:1f:ac:35:1e:55:1c:47:ed:33:5f:4e:99:
         cd:04:e5:1c:ca:72:02:36:35:91:45:07:0a:af:88:4a:7a:5c:
         c1:03:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:24:04 2025 by rpki-client