Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/903ce770-fb52-37ef-9d65-17b0d21bfe00.roa
File:                     903ce770-fb52-37ef-9d65-17b0d21bfe00.roa (raw, json)
Hash identifier:          MCYxi4HrgaGPKUBrRefPf3wgMtMWkOmpHqBfvJiEXKc=
Subject key identifier:   47:90:2C:6C:F0:3D:08:6C:63:DB:5E:A0:94:5A:26:20:A0:FC:D0:FB
Certificate issuer:       /CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
Certificate serial:       010D0C9F43285849A61F47BC676703B817FC5F00
Authority key identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/903ce770-fb52-37ef-9d65-17b0d21bfe00.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     19189
IP address blocks:        74.214.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:47:bc:67:67:03:b8:17:fc:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=ec622323-c56d-4ac3-85f8-3f1bc2e8a934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:9c:61:db:8f:6c:ac:f4:0e:a3:d8:19:c9:
                    4a:8d:ac:6a:ca:de:d6:ba:81:7e:f0:64:1d:fe:65:
                    ad:3e:64:46:a4:69:ec:69:84:c5:cd:37:b9:99:95:
                    a4:c8:89:22:71:2b:5f:4b:e2:09:08:b9:d0:f3:77:
                    58:c6:e0:94:1c:6e:cc:a8:13:c4:24:eb:26:23:cb:
                    2f:c8:10:28:51:78:ac:44:c6:9f:70:19:7b:3a:fc:
                    22:49:e0:47:73:f7:f6:ed:4a:64:26:b0:1d:cf:25:
                    5e:9e:13:78:68:d7:d5:2c:97:7e:01:9a:8c:fa:e0:
                    d7:7e:84:69:74:59:c6:a9:d7:22:3a:40:06:88:6c:
                    53:e6:c2:5e:6a:dd:4b:06:5c:33:27:46:b4:f0:bf:
                    8f:6b:16:b0:ae:4c:e2:72:c8:0a:01:1b:2a:84:e8:
                    e3:44:2d:e2:7f:fc:7b:96:b6:18:73:e1:1c:9b:4d:
                    7b:29:eb:39:b0:b6:b5:c7:92:5f:81:73:2c:a9:4f:
                    e2:d2:46:2c:f8:54:50:e5:db:8c:fe:e3:32:17:0a:
                    0d:94:c6:f8:5e:85:7d:4f:8f:c3:ef:d4:31:68:12:
                    20:14:94:64:45:d3:94:9c:c5:ff:da:5f:5d:27:35:
                    96:05:64:4e:8a:1e:52:cd:8a:f6:d6:c1:0c:85:32:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:2C:6C:F0:3D:08:6C:63:DB:5E:A0:94:5A:26:20:A0:FC:D0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/903ce770-fb52-37ef-9d65-17b0d21bfe00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:89:94:6e:1c:f5:8d:49:ba:8e:e8:ab:8a:3e:60:ef:07:
         75:4d:d0:48:7c:b7:6b:4f:6b:34:87:1b:8b:b5:43:cd:cf:6b:
         b4:b7:fc:d8:63:71:e8:d6:79:05:23:9d:5b:99:80:df:dd:ee:
         88:44:56:19:33:7c:00:21:61:b0:28:da:60:8f:3f:ab:94:08:
         84:a3:8d:35:bd:b3:32:cd:9a:00:eb:31:56:30:17:d2:cf:10:
         21:6e:f7:90:fc:e3:4d:77:18:fd:ee:da:ba:53:f1:6f:ab:8d:
         12:5f:35:37:87:4b:53:b3:84:ec:56:20:e1:6b:f2:f1:b9:d4:
         77:6b:b8:7f:e2:ff:8e:be:fb:52:89:6a:00:04:82:f5:d6:bf:
         d0:4e:87:ef:30:bd:13:37:96:9f:4c:5b:29:5e:2e:34:72:ed:
         7d:ad:a7:6f:6f:fc:34:5e:0c:cb:0b:a7:34:51:73:52:8c:8c:
         13:54:62:22:0d:95:62:f8:cd:61:2e:d5:32:86:4e:28:fb:56:
         a9:a9:1b:d1:c8:f5:ab:90:43:e8:c7:0f:78:71:34:5b:36:f9:
         53:23:00:dc:bd:7d:ea:73:45:e4:0f:59:ba:ba:42:80:09:a1:
         44:ee:43:f7:4e:f7:46:65:f0:33:a2:98:08:29:ae:37:59:56:
         9d:3c:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:17:18 2025 by rpki-client