Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa
File:                     d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa (raw, json)
Hash identifier:          sTHIuKI7AlgtcaT7uKEKrmVEKXVvTMgAzojTzXG/OZ0=
Subject key identifier:   9D:A8:18:64:52:E6:7A:22:A4:80:FE:00:A1:F5:24:D4:DF:11:68:FC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849E4EFBEFB395EDE793CA84E80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     834
IP address blocks:        74.49.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:be:fb:39:5e:de:79:3c:a8:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=93680eca-6345-4328-81cb-5c3116c34103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:1c:d3:5f:30:d1:db:67:ff:36:ef:96:41:
                    d7:30:a6:42:24:f1:19:ba:2e:73:58:05:c7:54:23:
                    69:48:29:29:4a:d1:f4:75:a2:cb:15:78:2b:4c:38:
                    f0:1d:5b:5f:c4:7a:5f:44:a4:01:55:4a:4d:b0:95:
                    49:40:57:c0:4f:a3:52:c2:00:49:f3:61:05:e8:69:
                    4c:8a:7b:84:10:69:36:99:ec:32:90:a3:bc:56:43:
                    cc:90:b8:7e:68:3b:9e:46:8f:c8:a5:8b:46:ad:2e:
                    6d:a9:ba:18:e0:fc:e9:90:a8:9e:a6:cd:4d:d4:fe:
                    ef:a3:cc:3a:ff:86:61:54:77:f9:b0:ef:74:d1:87:
                    ec:ad:11:ae:50:f0:b0:ba:7c:2e:3e:5b:db:6f:5f:
                    f4:70:cf:dd:1f:1c:5e:47:14:66:7b:aa:6f:ec:e0:
                    fb:50:0a:59:41:18:23:0a:7e:76:57:a9:6c:5c:77:
                    b0:ae:9f:7e:d9:b2:7e:1e:ee:d3:4f:9b:1f:6e:6f:
                    c4:d8:b0:ef:78:80:da:3f:0d:b5:69:73:45:2b:71:
                    fa:30:c3:5a:b3:9e:cb:66:45:ab:05:a2:d9:b5:62:
                    db:1a:7b:70:77:e3:85:f2:54:44:a2:6b:9e:11:8a:
                    3c:ea:7c:57:c8:c0:19:ad:b4:1e:2d:57:4d:75:9d:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A8:18:64:52:E6:7A:22:A4:80:FE:00:A1:F5:24:D4:DF:11:68:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:99:e9:0a:7b:90:44:a3:f1:a3:44:7e:aa:c6:b6:dc:7d:09:
         19:8c:8e:b6:67:85:a7:f5:a8:66:da:c4:9a:86:3a:b2:ca:a2:
         26:e3:52:40:08:16:a8:b7:7b:95:6c:4d:8a:ca:d1:8d:ad:a9:
         33:29:b6:75:0c:e9:fe:38:bc:71:bf:48:ed:66:9b:d5:48:bd:
         72:b5:e8:99:a6:68:e6:93:8c:ab:7e:31:74:fb:98:79:fb:86:
         f7:b1:b6:36:65:75:4a:52:43:b0:f5:88:96:00:40:b7:cd:75:
         01:5a:19:70:55:b8:d9:ae:ff:54:28:f8:46:83:94:a9:7b:12:
         a9:13:2d:ab:f4:d9:93:88:38:08:5e:e7:7c:3b:f9:59:17:97:
         72:83:5c:a1:8d:e1:94:f9:db:52:d6:57:72:2f:7c:a9:fd:ad:
         38:c6:9b:9d:64:14:e8:b9:f3:ab:dd:df:36:1e:bd:b6:c4:c5:
         e5:10:8c:c7:79:58:f8:aa:12:3c:d2:c2:b7:f3:f6:a8:bf:38:
         d0:27:aa:3b:ac:2c:b1:51:f4:fc:73:94:7e:da:89:a5:bb:e7:
         0a:bc:ef:89:e0:b3:b2:2f:0d:bb:17:72:a3:f2:3a:d2:c2:29:
         fc:b0:96:f9:d3:7d:28:34:66:23:33:94:5d:5a:bc:57:de:23:
         ea:06:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:04:12 2025 by rpki-client