Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2957b6af-fefa-33f9-a309-1517c06a19f6.roa
File:                     2957b6af-fefa-33f9-a309-1517c06a19f6.roa (raw, json)
Hash identifier:          XuioYmXbCkMf6WRqswZoAaPFm/LKWHzHeHUX0qvFzvA=
Subject key identifier:   8F:D7:F7:1C:17:15:BE:33:AF:3D:11:E8:8A:43:86:8F:76:56:44:96
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF437815FE991708CE4580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2957b6af-fefa-33f9-a309-1517c06a19f6.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397227
IP address blocks:        204.74.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:43:78:15:fe:99:17:08:ce:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=6f8b8980-f99f-4680-8081-cac1dbc2c7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:01:49:1b:ef:90:79:a4:ec:a9:69:d4:15:
                    3c:e7:ac:19:95:5b:2f:4c:1e:2b:26:82:ba:db:ed:
                    1f:60:02:50:b9:26:34:7b:db:7f:1f:c6:24:51:76:
                    8d:e3:52:7b:7c:de:12:76:c5:b9:1f:91:c2:ee:47:
                    0a:af:98:7b:2a:09:de:c6:12:58:70:57:1d:84:03:
                    a1:1c:19:85:a1:16:2c:3d:04:8a:e9:b7:44:12:46:
                    74:a1:a2:8e:ba:32:35:60:7d:d1:cf:6c:0c:41:cf:
                    23:53:e9:a9:2d:f7:53:6b:b6:96:1e:68:ae:45:b9:
                    25:9d:e7:47:5d:aa:2c:09:d1:36:36:81:bf:51:a1:
                    6f:0f:7c:af:da:c5:e0:c6:e4:c1:17:8a:69:cb:69:
                    61:fc:42:f7:e2:6e:15:d8:14:0d:5e:d0:38:41:6a:
                    15:27:f2:a3:0d:9f:18:c6:ac:1c:0e:bb:8d:0f:a8:
                    15:ee:40:1e:68:43:e2:13:dd:45:ed:13:36:d3:2a:
                    ad:ad:bd:d7:40:b8:31:ea:dd:ae:23:e2:85:8e:55:
                    9c:96:3e:5f:cc:2a:7a:67:a8:99:e6:d7:90:d7:7d:
                    79:4f:d9:d8:bf:20:61:a6:25:c6:24:36:df:a4:c2:
                    dd:a3:83:78:47:0c:88:3f:2a:85:a1:c8:45:fc:bf:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D7:F7:1C:17:15:BE:33:AF:3D:11:E8:8A:43:86:8F:76:56:44:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2957b6af-fefa-33f9-a309-1517c06a19f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:46:74:e8:9e:25:60:e4:6c:90:18:bc:7b:43:5e:51:36:05:
         17:21:71:92:dc:37:a5:5b:c7:46:60:f5:ff:05:ec:34:df:75:
         e9:89:96:0d:88:f2:be:1b:d7:f3:d1:d3:0e:78:4d:96:ef:2b:
         07:21:d7:6a:9a:d7:54:3f:b1:f4:57:72:29:8e:e0:34:b1:7e:
         c1:83:f7:0c:04:21:6b:84:a2:46:55:30:73:da:58:fe:36:c0:
         a4:89:d1:f0:0a:1c:c1:04:cc:65:8f:96:e5:6f:63:74:19:4d:
         09:3e:7b:ad:68:02:45:2b:4f:ab:c6:b6:e7:d2:58:40:cb:c7:
         94:fd:6f:2d:cd:f3:5e:6a:98:c9:65:52:1b:e2:cd:57:41:c2:
         dd:69:99:61:ff:73:71:e3:05:fa:1e:6f:3d:44:bf:ab:cd:50:
         ca:47:5e:02:af:c7:af:da:89:f3:af:27:a1:be:b8:39:69:b8:
         46:3f:e9:73:5e:0d:50:ac:8c:68:8c:a3:b4:55:4f:1c:b2:48:
         51:1c:2c:a6:48:24:b0:6d:aa:d1:33:2e:f8:24:e6:b7:b3:13:
         f5:95:ea:9b:3c:87:78:e7:49:4d:0b:5c:2d:94:7d:ec:6e:17:
         aa:f7:d9:2c:aa:4d:52:c2:a7:03:40:48:29:c0:18:2f:fe:48:
         51:64:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:49 2025 by rpki-client