Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/24f87785-ddd7-34bd-823f-b42caf9b86d4.roa
File:                     24f87785-ddd7-34bd-823f-b42caf9b86d4.roa (raw, json)
Hash identifier:          JS+VNc9eLV0hAFlfFijSLlvMlmZpfgdZb5RQmjqoiIM=
Subject key identifier:   44:80:A9:6A:40:69:73:00:09:5D:62:1D:8D:D3:5A:63:9A:E6:70:38
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF56AE01E953F607216F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/24f87785-ddd7-34bd-823f-b42caf9b86d4.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397218
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:56:ae:01:e9:53:f6:07:21:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=eceac599-2ae6-496b-92fb-ee855efe64f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:ef:82:09:f7:ad:96:64:ee:c9:c3:6a:6e:
                    62:22:78:17:ae:2c:8c:6d:d9:89:76:ce:4e:ed:c9:
                    74:b7:44:13:35:78:81:78:95:55:95:a9:43:46:b0:
                    cd:1f:58:66:a4:12:a8:50:54:7a:ef:c1:99:ed:6b:
                    c5:d0:8b:70:4a:ee:2b:e2:6f:86:58:0d:71:77:75:
                    4c:13:ed:cc:0e:9b:27:7c:f5:73:e1:8f:38:47:97:
                    be:2b:e8:21:b2:ae:28:59:4c:ad:3c:e4:bf:53:ca:
                    ed:d0:58:93:2c:02:02:88:7c:b0:12:bd:17:77:4b:
                    cc:c4:37:1b:42:9c:26:f1:79:79:da:82:88:f5:45:
                    5f:57:5b:96:2f:4e:70:0f:11:07:da:cb:45:f5:4c:
                    06:1d:49:ab:b9:42:5f:60:73:e7:3e:79:fb:9a:94:
                    2b:47:ee:51:c1:e2:23:ae:6d:ab:fe:79:67:17:31:
                    55:aa:f2:a0:a1:cd:66:04:0e:15:7d:96:79:6a:3c:
                    aa:3c:28:ae:22:21:cd:59:5a:70:84:44:62:72:89:
                    36:2d:c7:45:f1:73:92:a8:91:f6:1c:1c:ea:83:33:
                    7c:3a:e5:3a:3f:6e:51:82:03:4a:8b:11:24:c3:21:
                    b3:6f:f3:6e:2c:cf:b6:3b:e4:fd:6e:8a:d1:a0:51:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:A9:6A:40:69:73:00:09:5D:62:1D:8D:D3:5A:63:9A:E6:70:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/24f87785-ddd7-34bd-823f-b42caf9b86d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:10:21:93:02:79:4e:94:23:03:f4:66:89:57:4c:be:71:
         57:e9:f3:ee:45:72:62:29:e4:59:eb:c7:6f:76:c9:56:5a:0b:
         83:1a:9a:21:41:2e:ce:58:bf:7e:39:71:39:4d:6e:fb:6f:e2:
         f8:14:f8:42:cf:ac:1a:9d:7e:8d:62:ea:1b:e4:c4:a0:8c:e1:
         26:33:31:fb:93:34:12:62:64:2e:60:82:15:f8:2f:c6:74:0a:
         e6:3e:e2:41:e0:64:b2:2c:4f:87:b9:44:15:9d:99:eb:77:88:
         48:c1:48:4a:65:b9:d0:ff:9c:b7:78:15:9e:74:80:6c:50:b2:
         63:c7:b7:78:94:84:e7:43:bf:2f:76:30:5a:53:cd:82:89:ae:
         c6:d1:99:f6:35:2a:d7:c2:c9:54:7e:d1:08:31:2b:4b:76:1f:
         45:7d:5b:1c:27:2d:3c:e4:7c:f8:63:98:7e:4f:74:0d:7d:af:
         c6:f4:f5:69:12:48:cd:32:cc:c9:21:cc:3a:a3:fd:63:be:b5:
         a6:66:71:cd:f2:1f:96:0c:9f:88:1b:b5:f0:be:ab:5d:0b:7c:
         89:53:54:be:60:cf:8a:c9:7d:26:d3:58:95:11:54:61:ce:83:
         a7:88:a9:87:6e:68:20:c1:8b:f6:c4:4d:14:46:5a:56:d5:9a:
         5e:b1:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:03:30 2025 by rpki-client