Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/74e601c7-f10d-336e-9997-162594b86f79.roa
File:                     74e601c7-f10d-336e-9997-162594b86f79.roa (raw, json)
Hash identifier:          /x9dX6jiQvhDPHpbEfuh1rJdTEhOll/84aHFcgn9dRg=
Subject key identifier:   FC:03:93:CF:32:3D:F3:CD:9C:19:EA:39:E6:01:D4:9C:EC:D1:34:9C
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F432858497279B104F7ADEBF166FFA300
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/74e601c7-f10d-336e-9997-162594b86f79.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     1299
IP address blocks:        204.156.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b1:04:f7:ad:eb:f1:66:ff:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=f0f7207c-a3c6-4a07-b580-8a3bb7d99ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:97:0b:ec:a0:9b:97:90:6e:cc:f7:ef:43:ec:
                    6e:de:52:94:dd:2b:dd:8f:26:e3:00:bb:79:99:08:
                    46:ce:4b:54:9b:78:9d:b8:d9:f6:c9:b8:9e:d5:77:
                    c4:5b:31:e0:2d:2f:44:b0:de:b4:0e:56:8c:72:f5:
                    9c:23:6a:43:6b:ff:57:71:76:4d:ee:ae:e9:58:b3:
                    2d:aa:06:83:77:f6:5d:a7:48:ba:44:27:42:82:08:
                    0d:6f:07:b1:36:31:07:0c:52:29:09:6f:f3:40:60:
                    6b:93:77:a6:54:be:30:fa:03:e6:6e:f0:9b:d6:0a:
                    1d:49:7e:c0:43:3c:08:bb:dc:c8:9d:0e:02:b2:6e:
                    ad:57:d5:c3:6e:24:b2:bc:b1:48:95:77:02:46:81:
                    62:e5:f3:bd:68:6e:a4:71:94:98:99:fc:40:c6:9d:
                    02:fe:d1:b2:65:ee:c3:66:f5:ec:1c:e7:c6:43:a3:
                    42:b0:c7:e5:75:5d:2d:f6:e3:cb:0c:71:38:81:cf:
                    87:10:09:96:60:1f:42:a5:0e:df:9e:fb:4a:0a:39:
                    31:6c:0a:d2:64:12:25:ca:76:10:70:4d:20:01:41:
                    9c:59:18:29:84:0c:bc:e1:75:2b:1d:52:d2:44:b7:
                    7d:b5:02:f8:20:80:3a:a1:70:c6:e8:e4:44:2b:cb:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:03:93:CF:32:3D:F3:CD:9C:19:EA:39:E6:01:D4:9C:EC:D1:34:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/74e601c7-f10d-336e-9997-162594b86f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:13:e7:c0:9a:93:25:b2:a6:71:08:5b:36:0c:bb:f3:5e:
         c0:4f:8f:f1:ec:a7:38:ba:bd:78:85:51:0d:9e:78:78:f2:55:
         0f:99:ae:2d:ae:f2:fa:af:f9:6b:e3:be:f1:97:6b:63:ab:c2:
         67:00:8c:80:b5:55:40:0c:84:0c:33:21:6b:c6:c9:2e:fb:a7:
         a8:e9:c4:3f:48:b5:a1:8b:6f:41:8d:94:6c:1f:6c:f6:c5:e2:
         6a:ec:a1:f8:73:44:eb:10:49:17:58:cc:b3:ea:1f:7d:40:7d:
         47:f4:df:d1:cc:79:c8:f5:b7:29:75:8f:5e:09:25:be:d9:b9:
         21:e6:bc:c8:bb:d7:ea:1e:c2:f0:f6:7f:a2:8e:6b:08:7e:3c:
         aa:ef:d3:5e:d6:f6:d8:49:d9:d5:62:e0:71:19:91:d2:6c:45:
         2c:41:42:d1:3e:ed:a7:54:d9:db:8a:15:5e:e0:09:e2:06:5b:
         a5:c8:a6:c0:c2:4f:70:dc:c2:36:0f:c3:4e:35:a9:f6:5f:7e:
         0e:ac:b9:5f:0d:0e:6f:40:00:94:4d:a6:d1:4e:fb:b4:74:15:
         29:86:dc:ef:df:28:ae:9c:d9:c3:d0:c8:ea:9a:8f:5f:9f:d7:
         e0:12:32:26:a5:6d:47:5c:6a:df:0f:f5:88:68:41:21:c7:b5:
         a5:a3:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:30:14 2025 by rpki-client