Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa
File:                     0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa (raw, json)
Hash identifier:          GGorbw+O/GDPHf7EyEZG2aZmPFTr+tvraFBifEYvlz0=
Subject key identifier:   1B:FF:F6:3B:BE:9C:D0:37:11:00:67:41:71:8E:8B:50:EE:73:9B:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF58122B39F56E02517DC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397240
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:58:12:2b:39:f5:6e:02:51:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=68ae0d11-b545-43d3-a309-973376ace7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:5c:4a:8c:90:23:4a:71:fe:8c:3b:b8:82:
                    d8:40:da:34:c9:6b:94:d9:c0:f7:c1:b2:28:5b:02:
                    94:0e:97:e1:e4:04:cc:8c:74:1d:73:6e:4f:ce:6f:
                    0b:e5:41:a3:ca:bf:77:bf:1a:b9:ab:b6:f1:6f:a9:
                    27:d5:0f:8b:e1:7e:1a:34:cc:16:60:bc:b0:f3:92:
                    cf:02:ea:d1:ef:6f:2f:7c:32:43:d8:70:cd:ff:ec:
                    f9:ef:dc:42:cf:70:34:a1:0d:f0:d8:a1:a3:a0:15:
                    35:2f:e2:17:66:61:7c:cb:e8:c4:e0:28:66:fc:22:
                    40:48:42:5d:d3:17:10:90:88:34:c6:55:2e:cc:d4:
                    d1:e9:6c:81:d7:cc:ba:2c:16:9e:fc:dd:1b:47:06:
                    58:1c:a6:36:91:4a:73:e0:6e:0c:30:be:a8:c0:36:
                    25:f6:51:af:09:0b:af:62:d5:8b:86:1a:d3:2f:60:
                    fe:85:96:f6:fd:e6:a3:9c:13:4c:91:54:6e:2f:a9:
                    52:ff:c7:70:ba:98:05:ad:d0:76:c3:2d:7a:cb:cd:
                    0d:86:43:84:1a:c7:e3:6a:59:3e:f3:c3:0e:e7:fa:
                    4f:0b:39:bf:0e:03:9c:ed:15:af:97:89:99:e5:14:
                    47:4c:51:9a:ea:f3:76:70:12:11:2c:c2:53:2f:96:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FF:F6:3B:BE:9C:D0:37:11:00:67:41:71:8E:8B:50:EE:73:9B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3a:72:3a:00:45:6d:7d:2d:d6:b4:42:ad:93:a2:d6:a4:0b:
         42:d7:f7:0b:fd:72:99:cd:4c:3d:06:a7:fb:ff:fc:80:c5:df:
         aa:10:5d:92:75:f8:d2:00:63:ba:ac:bc:75:6f:c3:6f:3a:ea:
         8c:c4:ce:b3:44:a9:07:de:7f:87:cc:53:cf:e3:b2:12:90:98:
         ff:c5:4e:cb:d0:20:b9:31:2c:66:c2:c9:50:b5:34:3b:0a:de:
         d3:5d:5d:75:6b:ff:da:3e:27:81:63:da:de:be:82:4e:12:12:
         91:3c:2b:ae:34:ce:2d:75:f9:81:62:6a:f0:cd:d7:30:38:bd:
         78:f4:6b:21:b9:4d:4c:dc:7f:ee:32:3d:03:9a:af:1d:74:fa:
         b9:37:42:7f:ee:68:09:6e:4d:99:0a:12:87:1f:a4:18:1e:1e:
         ef:68:e0:bb:65:92:3b:3a:75:eb:6b:56:e1:54:0b:db:82:ff:
         30:b5:00:69:10:4a:63:60:35:b7:dc:36:bb:18:24:79:e9:6c:
         eb:2d:d6:dd:20:09:22:28:08:b3:ab:2a:b0:29:79:fb:11:21:
         1b:1e:80:36:24:72:d8:f5:0e:47:df:8b:bd:1e:2e:c6:ca:ad:
         12:fd:2f:6d:85:58:fa:99:56:e5:1e:c3:c6:70:da:1a:42:cd:
         30:34:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:35:40 2025 by rpki-client