Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa
File:                     5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa (raw, json)
Hash identifier:          TRkkFFavSvj6d7EoEDXEL9DL4EDQ4MQ24ELwe9sF95Y=
Subject key identifier:   82:19:2C:6C:C3:FF:C4:23:5A:85:06:76:2C:7F:CE:F6:92:0A:B7:10
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285849A61F3E5BF0D61BED5CB6C380
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     54994
IP address blocks:        174.35.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3e:5b:f0:d6:1b:ed:5c:b6:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=24518996-7f2b-437a-a031-e3296fb2c084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:3c:22:d9:fc:ec:00:49:f2:e7:bd:8a:f3:
                    9f:78:6e:37:7a:03:0b:b5:96:0f:6e:dc:52:7a:ee:
                    0e:d8:72:a4:2f:cf:be:b3:eb:7a:6e:8a:cb:fb:9c:
                    d9:f9:27:c7:4c:74:2c:00:3d:d9:29:dd:a3:c0:11:
                    c2:de:7f:37:74:6e:69:84:6e:58:1c:a9:95:ea:18:
                    1d:8a:eb:96:58:44:07:67:86:7a:dd:7a:5c:78:0a:
                    9f:0f:a1:28:df:39:61:8d:f3:fd:fd:f9:14:2d:8c:
                    82:01:06:06:1a:95:ce:db:cd:22:1d:db:33:b8:ae:
                    03:8c:b5:4e:ad:79:d3:ae:af:33:5f:85:a5:3b:1d:
                    71:df:5b:fb:92:cc:c2:96:32:65:ee:6c:da:a1:9f:
                    fd:55:08:c8:d7:7d:9a:30:93:6b:aa:5c:f4:41:40:
                    8c:aa:51:15:73:3f:d6:95:3b:01:73:85:4b:ec:e1:
                    1b:34:d5:cf:49:8f:4c:b9:81:1b:96:48:97:ed:d2:
                    fb:1d:6f:08:36:a7:94:cb:8f:92:e6:f5:33:7b:3d:
                    29:e3:24:e8:20:51:5e:fc:4d:aa:a5:73:c5:6a:4b:
                    76:9c:9e:4a:c6:f4:ee:6a:e3:0e:52:bf:81:3e:e0:
                    d1:eb:05:a7:18:09:2f:1a:14:7e:15:ff:ef:73:64:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:2C:6C:C3:FF:C4:23:5A:85:06:76:2C:7F:CE:F6:92:0A:B7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:60:68:ee:03:b2:ed:e3:ed:1b:7d:ba:1b:05:96:b1:b1:2b:
         16:95:4b:cb:54:13:26:f1:ef:f2:02:c2:04:ef:f5:c1:dd:75:
         3b:d6:57:fa:e2:21:4c:93:b9:4b:49:34:9c:c7:9c:4f:6f:f1:
         9b:8c:d8:8e:4d:43:00:c7:b9:6d:43:50:49:8a:8f:85:7f:2b:
         4c:1c:54:4c:ea:0e:b7:e3:21:89:21:50:d7:0d:c3:48:8d:46:
         36:10:ca:05:ce:b5:cc:01:87:40:89:91:71:fc:9b:44:75:ae:
         b8:d0:fe:a6:a8:2f:f0:e5:44:06:45:ee:52:4c:00:09:98:ad:
         fa:eb:06:d8:dd:97:29:41:26:07:39:95:55:8f:91:26:c2:a9:
         5e:1d:fe:57:fa:28:59:db:6a:04:46:a1:e9:d6:34:99:62:96:
         d2:92:4c:64:db:76:c1:42:29:e6:99:75:cc:29:fe:46:a0:21:
         4f:ce:33:ad:16:28:5d:5b:2a:be:52:96:c9:6a:da:1c:4a:fd:
         6d:62:8a:7c:76:37:d7:75:4c:4f:5b:be:b2:e1:db:3c:6f:a3:
         31:4e:23:d1:6c:2e:14:e2:7a:b3:b8:fc:69:33:ef:63:38:87:
         0a:13:52:b2:4d:b2:11:71:4b:1e:0c:5c:f0:21:0d:27:41:a2:
         41:be:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:52:37 2025 by rpki-client