Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
File:                     74643a59-339d-31eb-989b-007a513d5754.roa (raw, json)
Hash identifier:          lnvLQWOaQu5dso2F+BwY97hiCR5WiC6K1c15+s8BoMI=
Subject key identifier:   FF:D1:EF:CA:A3:CA:0B:4D:DE:43:BC:7C:90:A1:8B:2C:48:EF:79:98
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F432858495C24475DF30642A43213D180
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:47:5d:f3:06:42:a4:32:13:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=61dd0e3e-1c90-4fe7-b0bd-f0da17ec4c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:d3:da:b3:84:cc:61:9f:29:32:7a:eb:39:
                    82:a9:e2:a2:dd:54:f0:89:1b:c3:38:28:de:ad:e7:
                    7b:48:cb:22:8b:7c:3c:b5:b5:99:2a:76:cf:95:e9:
                    a0:6c:da:86:fa:b1:30:c4:fb:4d:88:60:5d:d3:00:
                    e9:2f:61:bb:97:86:94:ab:38:a4:b8:8c:3b:91:cc:
                    01:6d:d4:37:9e:44:26:9b:f5:45:ba:a5:72:a2:af:
                    23:34:93:bb:34:8f:e7:0e:57:42:cb:25:44:5a:1c:
                    52:66:7a:89:c0:89:1c:99:b3:63:7e:25:e1:85:82:
                    f8:b0:dc:9c:b2:b2:94:41:36:03:f7:82:15:1a:e3:
                    0f:b0:50:62:c3:37:fa:cd:33:c6:4b:80:72:17:f3:
                    be:00:a8:d2:b5:8b:f7:b9:a5:7d:a5:a7:15:4d:de:
                    b3:cd:6b:39:e9:d2:91:0b:6b:01:a8:11:8a:1c:e4:
                    ea:08:a3:08:8f:81:6d:36:2e:2b:38:02:82:d6:2f:
                    1e:b1:09:7b:ef:32:b8:37:fb:86:21:55:ed:7b:4a:
                    e7:ce:e2:d5:3d:f3:67:b2:2e:86:9e:bc:36:ee:26:
                    a0:65:52:bb:9d:8a:4f:3a:fe:92:bf:37:0e:c1:f8:
                    a4:c8:43:50:34:b7:b4:9f:34:a6:11:7d:6d:22:b9:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D1:EF:CA:A3:CA:0B:4D:DE:43:BC:7C:90:A1:8B:2C:48:EF:79:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:29:50:e0:0b:f3:0b:0f:b7:20:24:e5:50:fc:4a:d4:ef:
         c7:b4:33:26:fa:6c:07:27:7d:6c:3e:fb:23:a3:5d:85:c4:34:
         40:f1:a9:57:db:0c:be:ac:2a:1e:b7:db:ba:05:62:8f:d9:88:
         fd:cc:4f:47:45:f2:d0:b2:68:c8:d5:6b:c6:21:5e:a4:6a:31:
         6b:77:b9:9b:06:39:84:9b:a6:bc:5b:e0:31:79:d4:83:8d:91:
         ba:9a:5e:eb:a5:4f:fb:07:da:39:f7:c4:8f:2c:17:b7:93:6a:
         72:3e:fc:74:92:27:4a:18:01:26:18:4a:a7:eb:66:4a:8a:43:
         f8:2d:dc:b6:e4:bd:50:0f:17:f6:fa:7d:fa:c6:eb:0d:72:ed:
         d0:0d:6a:58:d5:92:ae:21:1c:11:7b:a2:aa:46:82:02:e0:4b:
         c0:fa:69:7b:21:ed:06:ce:dc:fe:fe:7a:fd:e1:b9:0c:3e:9e:
         5d:ef:04:42:f4:86:54:2d:19:f3:c0:db:db:51:ca:26:e7:4d:
         2c:31:c3:88:fb:66:fb:1e:1d:06:22:99:05:85:95:df:a3:91:
         2c:d7:82:ba:62:c2:07:ae:2f:a6:b2:37:32:69:7a:b6:a1:2c:
         9b:e3:83:00:36:b8:7f:11:a2:21:fe:cb:ff:e5:aa:1c:7b:eb:
         13:14:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:11 2025 by rpki-client