Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/290f7c32-efbc-381f-9a92-206511f7c756.roa
File:                     290f7c32-efbc-381f-9a92-206511f7c756.roa (raw, json)
Hash identifier:          xMJptH0H9XS+6qABZLtuv/CQM53MQ3/SY61VgNErLGM=
Subject key identifier:   D6:D9:5A:A0:1F:F1:BC:66:7C:56:3B:31:8D:3A:17:FA:FE:29:5C:BE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF471572919B81FD17EC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/290f7c32-efbc-381f-9a92-206511f7c756.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397221
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:47:15:72:91:9b:81:fd:17:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=f1a2a753-5ae7-4b2e-addb-a37c005eb81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:83:4a:3f:cc:a6:08:4d:d9:d4:88:3d:43:11:
                    b2:fc:6b:e7:01:6c:2b:8f:49:19:73:c6:c1:96:33:
                    84:32:b0:8b:fb:90:94:ea:91:56:23:51:67:52:f4:
                    af:41:61:4d:f1:97:e7:3f:69:2f:3b:9a:f9:a6:16:
                    a7:1a:32:22:96:b9:93:a2:f3:88:dc:73:ef:17:60:
                    84:23:5f:b3:fc:cf:73:d7:04:b1:de:9f:a6:14:82:
                    50:15:4c:28:88:51:45:42:df:b9:1d:2b:b7:ff:d4:
                    0f:52:0e:7a:48:81:85:d1:80:18:6a:bc:81:bf:06:
                    70:5e:bd:82:f2:36:0b:d1:37:6c:30:14:12:1a:56:
                    d5:f7:d8:dc:60:0d:f3:9c:a9:27:f4:d0:8d:f8:41:
                    c6:a9:05:4d:55:e7:5b:94:6e:13:e1:0d:cf:d4:ca:
                    cd:46:5c:ab:64:af:de:d6:3b:42:c7:83:fd:9d:a4:
                    19:ad:2c:4b:5d:78:6f:2b:58:6b:da:32:3b:c6:ed:
                    8d:87:bd:98:9a:3f:d8:9c:64:8b:6a:0f:85:6a:60:
                    47:b2:1c:b7:9c:e4:ea:54:bb:10:9d:32:16:7b:69:
                    ce:5f:66:9f:7c:e2:15:77:ae:5b:2f:39:8b:49:7a:
                    a9:a3:0d:da:0f:78:af:64:0b:85:70:d4:22:ba:65:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:5A:A0:1F:F1:BC:66:7C:56:3B:31:8D:3A:17:FA:FE:29:5C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/290f7c32-efbc-381f-9a92-206511f7c756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:6a:26:3d:57:c9:88:50:32:33:51:72:fc:64:b8:46:45:
         e1:24:22:a1:94:43:4d:ab:35:b9:77:00:52:a5:d6:b9:85:f2:
         64:79:89:77:d9:9b:d3:2d:d2:92:6e:8c:81:ac:e6:f3:d9:78:
         5d:5f:d3:62:a7:b8:a4:4e:59:3e:2c:16:4a:68:4e:6d:eb:0e:
         fb:18:ef:f0:56:67:d0:69:7f:f9:df:40:7b:9a:ff:da:58:46:
         ac:d5:fe:d9:3b:0e:1c:0f:d8:2a:8c:42:d8:2f:2d:25:79:4f:
         a8:56:16:9c:3b:ec:59:89:44:f9:99:1e:04:8a:eb:4c:78:24:
         82:06:fe:71:b8:cb:b1:01:07:76:b1:2b:a4:17:1e:82:91:d5:
         d7:8b:0a:db:f0:3b:d0:fc:40:35:3d:01:a9:87:30:8a:09:5b:
         65:09:e2:79:96:a9:b7:9a:29:fb:a4:7c:11:2a:db:6a:bc:d0:
         3b:62:38:cf:8a:ab:e2:09:50:15:ec:c7:98:d1:21:33:98:68:
         8b:46:ff:c9:3b:21:c4:4b:3b:3c:b8:3c:16:79:29:90:0e:f5:
         25:08:07:af:30:61:1a:63:3b:00:5b:a8:2b:cb:f8:b6:ec:7b:
         6a:a7:ec:1f:a7:fa:37:c0:cf:05:51:06:44:67:be:37:fa:f5:
         25:f5:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:12:46 2025 by rpki-client