Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07eefb8b-1285-3a7e-be07-c5a1670268b8.roa
File:                     07eefb8b-1285-3a7e-be07-c5a1670268b8.roa (raw, json)
Hash identifier:          Z7S7qjArrxHx4YmIfOVsJoGRa2BYx8s+ebYkUyfWeEQ=
Subject key identifier:   E1:FC:02:91:16:AA:E4:E3:96:63:98:2E:28:9B:0E:62:0F:17:BC:3A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A08F2D47A6D60A8352980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07eefb8b-1285-3a7e-be07-c5a1670268b8.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397238
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:08:f2:d4:7a:6d:60:a8:35:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=d8e99f17-e9c6-4168-92cc-c0bf9e55f7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8f:44:f6:28:e5:9b:de:f9:4b:8a:02:96:8b:
                    07:23:ff:08:5d:f9:5e:b1:22:b3:30:ed:e8:4c:06:
                    20:58:0d:73:6a:67:dc:b9:f4:36:fb:f9:09:77:d4:
                    96:f2:bb:98:01:e3:6c:ce:45:41:22:f7:40:f8:86:
                    fb:d2:41:ae:45:f8:1a:d3:f2:ca:61:b6:7e:65:a4:
                    eb:01:8b:9a:0c:da:67:8a:9f:23:2e:7b:bc:00:ac:
                    cb:d0:5b:b0:7e:56:38:dc:d7:b9:5b:64:ab:a9:9a:
                    0a:82:23:f5:c8:81:44:d4:9c:1c:d3:a6:ae:5e:bf:
                    dc:0b:d5:2a:f2:b6:d8:37:c4:27:53:84:81:7f:1d:
                    01:54:5d:fd:ad:5b:dd:91:50:be:27:68:fb:b3:44:
                    ee:45:6b:a6:d9:2c:75:2f:6f:81:06:b3:39:1e:63:
                    99:eb:f6:22:f5:de:3e:c2:3d:a5:a7:92:c0:13:fa:
                    87:bb:9d:7c:e9:3c:40:94:65:11:af:ae:91:77:fc:
                    1f:95:03:dd:98:09:20:2a:ba:f0:03:b8:6a:53:3f:
                    0c:6d:cb:96:1a:66:44:50:be:05:8b:2b:1e:46:f8:
                    bb:5f:ac:d6:30:60:6f:ae:99:3a:c0:f9:fe:f9:b7:
                    27:3a:c9:33:06:9e:b9:bc:6c:13:b5:86:07:10:06:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FC:02:91:16:AA:E4:E3:96:63:98:2E:28:9B:0E:62:0F:17:BC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07eefb8b-1285-3a7e-be07-c5a1670268b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:c4:0c:cb:42:a3:c2:4d:76:80:82:54:a3:0e:50:27:41:
         df:55:40:57:28:47:f6:1e:8c:72:2c:6e:4f:a3:c6:da:e2:e4:
         2f:3e:d8:56:c1:41:0f:6e:36:b1:1b:83:50:08:95:a5:2d:81:
         4b:81:be:80:cc:f8:63:f9:2d:36:02:b9:fb:e3:1b:6e:93:70:
         87:c6:47:33:b7:0b:ba:e5:7d:77:53:29:f1:90:67:03:a1:bc:
         93:48:4a:ae:a4:1f:69:45:c4:7b:41:65:e2:b5:b4:03:da:e2:
         e2:c2:83:33:78:7c:38:aa:9a:d0:f4:12:61:78:20:59:e9:99:
         17:c7:0c:c8:6e:b8:5e:02:98:ba:eb:73:ca:2b:4d:72:23:4a:
         26:39:5d:b5:74:a4:16:fe:63:93:87:4d:91:9f:7b:31:02:a3:
         19:cb:9a:99:ce:08:99:99:ec:00:b5:5e:e1:11:8a:35:a3:fa:
         29:3e:01:6b:35:c8:c5:db:ef:39:27:5b:c1:b0:89:20:74:ff:
         48:2d:01:12:a1:93:7c:8f:15:0f:9b:f2:44:be:cd:ff:86:2c:
         37:07:b0:21:1e:b6:93:b7:9f:ff:92:50:f2:a5:40:a6:0d:18:
         1c:b9:8c:8f:68:3c:6a:35:04:57:90:69:00:23:fb:36:e0:1c:
         b3:c5:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:37 2025 by rpki-client