Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e14b8f5-491f-3170-b973-10bf15e38aa6.roa
File:                     2e14b8f5-491f-3170-b973-10bf15e38aa6.roa (raw, json)
Hash identifier:          e+hW30vZhTE3THSBdg1w4ua8nOF8M6J1jlKNEUa9pSI=
Subject key identifier:   52:E7:34:41:37:D1:B0:D8:EC:34:78:C3:C0:A5:84:35:92:7A:22:CB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF419961406D8F9AFB4B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e14b8f5-491f-3170-b973-10bf15e38aa6.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397228
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:41:99:61:40:6d:8f:9a:fb:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=b636f04b-c476-42f3-b158-079bd19cbeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:90:c4:0a:c5:b9:a4:78:37:65:f7:52:28:
                    b2:d0:89:b6:d4:de:12:e7:9c:d7:eb:ca:be:17:93:
                    61:27:d0:83:db:9a:66:16:64:0c:02:66:5d:b3:95:
                    32:ed:ab:53:35:4a:70:15:2f:d8:0a:d5:5d:0f:4d:
                    46:c9:5f:bd:75:24:db:c6:1f:c1:fd:b3:ab:b0:53:
                    58:85:9b:97:fa:ae:49:8a:bb:40:a0:b9:55:dc:ed:
                    21:6b:44:9d:b2:7f:07:71:15:b9:c6:75:69:8d:4e:
                    f8:3f:9a:ca:ea:95:03:b5:bc:2c:8a:30:59:d6:06:
                    1e:94:f0:34:b2:9a:ef:28:1b:b1:f5:a4:00:80:1c:
                    00:da:e1:f8:a7:2c:5c:ff:35:bd:d6:9c:55:2a:89:
                    ee:67:86:0e:43:50:fa:bd:22:8a:a8:c4:67:07:05:
                    ce:1e:87:ed:f5:1b:0e:6f:aa:bb:2a:34:84:44:95:
                    5f:a7:de:93:01:a0:a1:b9:37:73:4d:b6:b9:58:ac:
                    07:bc:85:6c:de:04:c8:3e:69:44:fa:92:20:bb:64:
                    d1:12:15:0d:eb:ec:20:49:cf:70:42:84:0a:eb:8c:
                    13:2f:a9:18:b8:16:87:1e:70:d9:a5:29:9f:87:c5:
                    98:75:32:f1:37:c6:a2:12:00:c8:9e:10:be:ee:35:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:34:41:37:D1:B0:D8:EC:34:78:C3:C0:A5:84:35:92:7A:22:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e14b8f5-491f-3170-b973-10bf15e38aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:45:51:d4:a4:3d:20:ec:96:04:29:51:a8:ed:7f:68:df:7a:
         28:ca:e0:53:83:d9:49:0c:03:c9:47:57:7a:43:44:be:16:23:
         59:a0:33:7f:14:9b:ca:6a:89:98:30:e7:96:f7:37:b3:59:c7:
         8f:6e:98:20:70:91:6c:5b:c3:21:93:a8:17:be:7a:9c:09:f9:
         04:e3:77:12:a0:d0:81:7c:0d:d2:fc:cf:e2:f2:d6:25:19:41:
         16:92:98:66:34:a0:e0:61:15:c4:15:47:15:14:dd:e6:c1:68:
         d1:78:7a:56:97:6b:80:85:b6:81:54:65:93:d6:94:70:6c:76:
         99:fe:5e:52:04:12:8b:fb:73:42:2f:c9:a3:d1:e2:fa:87:79:
         1e:ac:16:b8:50:c7:5d:5c:da:eb:5f:43:ce:38:d9:6c:f6:1d:
         2d:05:61:7a:61:c1:a7:57:bc:ff:21:7e:05:0a:61:c3:98:71:
         6c:4a:be:7c:e5:ee:f1:79:a8:b7:a2:a2:a3:14:4e:bf:f1:30:
         6c:26:56:d9:b5:e9:3c:f3:b6:62:20:56:db:e1:23:65:d4:2c:
         3f:88:22:2c:2f:d8:42:2d:66:ad:56:42:a4:fb:66:47:05:97:
         97:94:7a:09:e6:82:9f:cb:eb:1a:53:c0:87:98:ec:e6:9c:1b:
         22:7c:bb:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz0GZYUBtj5r7S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
YjYzNmYwNGItYzQ3Ni00MmYzLWIxNTgtMDc5YmQxOWNiZWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2WQxArFuaR4N2X3Uiiy0Im21N4S55zX68q+
F5NhJ9CD25pmFmQMAmZds5Uy7atTNUpwFS/YCtVdD01GyV+9dSTbxh/B/bOrsFNY
hZuX+q5JirtAoLlV3O0ha0Sdsn8HcRW5xnVpjU74P5rK6pUDtbwsijBZ1gYelPA0
sprvKBux9aQAgBwA2uH4pyxc/zW91pxVKonuZ4YOQ1D6vSKKqMRnBwXOHoft9RsO
b6q7KjSERJVfp96TAaChuTdzTba5WKwHvIVs3gTIPmlE+pIgu2TREhUN6+wgSc9w
QoQK64wTL6kYuBaHHnDZpSmfh8WYdTLxN8aiEgDInhC+7jWHnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLnNEE30bDY7DR4w8ClhDWSeiLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmUxNGI4ZjUtNDkxZi0z
MTcwLWI5NzMtMTBiZjE1ZTM4YWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNFUdSkPSDslgQpUajtf2jfeijK4FOD2UkMA8lHV3pDRL4WI1mgM38U
m8pqiZgw55b3N7NZx49umCBwkWxbwyGTqBe+epwJ+QTjdxKg0IF8DdL8z+Ly1iUZ
QRaSmGY0oOBhFcQVRxUU3ebBaNF4elaXa4CFtoFUZZPWlHBsdpn+XlIEEov7c0Iv
yaPR4vqHeR6sFrhQx11c2utfQ8442Wz2HS0FYXphwadXvP8hfgUKYcOYcWxKvnzl
7vF5qLeioqMUTr/xMGwmVtm16TzztmIgVtvhI2XULD+IIiwv2EItZq1WQqT7ZkcF
l5eUegnmgp/L6xpTwIeY7OacGyJ8u0g=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:50:46 2025 by rpki-client