Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3193f837-4614-3e6b-af35-3f78ea642341.roa
File:                     3193f837-4614-3e6b-af35-3f78ea642341.roa (raw, json)
Hash identifier:          75kxUtlqMlXjRN/WszVfbdrsL19mm46jXh+JxyJW9wk=
Subject key identifier:   E3:C9:09:6A:DC:05:B3:BC:8B:48:3B:9D:81:E2:E6:76:47:56:6A:CF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F87579898CA8EADA8500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3193f837-4614-3e6b-af35-3f78ea642341.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397235
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f8:75:79:89:8c:a8:ea:da:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=1e4693ce-5af6-4663-ba3a-6c9b65101ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:87:37:c1:14:d6:14:ff:a5:1c:5b:19:5c:
                    48:34:67:78:ec:68:39:74:75:50:41:56:6b:4f:b5:
                    9e:5d:bd:28:bb:3d:f0:6e:ef:0b:a3:7c:48:26:ca:
                    3a:56:88:07:a7:f1:b9:6c:71:7f:54:8d:47:92:1b:
                    46:65:06:1a:1a:1d:3f:45:36:9a:18:e9:c1:a1:4d:
                    03:f1:9f:7e:86:9f:ff:af:22:8a:5c:b4:ce:89:e0:
                    65:1d:92:0e:d1:60:bd:8e:88:e0:a3:46:27:a7:66:
                    5b:14:7d:bc:3a:a5:32:2c:25:81:ac:be:7c:78:46:
                    78:96:7a:d2:1a:3e:3d:ce:37:a4:ff:b3:86:1f:a2:
                    62:1e:60:7b:0c:97:b2:43:bb:56:08:6b:5a:4b:c4:
                    fb:53:43:69:a7:8f:ce:df:79:26:4e:d4:18:99:ba:
                    ee:fd:fb:45:d4:89:c1:41:f5:ee:f3:8f:c6:a8:e9:
                    12:ec:74:89:c5:18:c9:6e:2f:f8:67:db:30:57:64:
                    e6:6e:5e:b5:fc:8a:13:fb:20:af:c7:5a:19:87:36:
                    7e:67:39:40:c1:1f:06:f2:38:73:a4:80:a8:a7:98:
                    d4:c8:0f:83:ac:e8:72:63:75:05:2e:39:03:48:bc:
                    23:e3:36:3c:7c:b7:81:b8:b9:a4:64:4f:29:63:51:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:09:6A:DC:05:B3:BC:8B:48:3B:9D:81:E2:E6:76:47:56:6A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3193f837-4614-3e6b-af35-3f78ea642341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:65:3b:0a:5f:75:74:0c:f5:41:36:f6:aa:6f:e5:c0:fb:8c:
         9d:bc:1b:2b:b4:3f:49:55:25:84:16:e5:f4:6b:f8:1f:ac:07:
         25:9a:5f:82:f6:a3:07:36:45:7f:3b:c5:47:d8:1e:e0:a7:3b:
         63:5d:d9:a0:b6:3e:17:4e:b9:97:9c:83:26:a4:99:8b:44:d0:
         08:cd:58:50:e9:1c:9d:58:ba:4a:14:c5:29:ac:80:4f:d7:c4:
         74:37:03:75:0f:50:4b:92:47:98:89:38:4a:4c:37:45:a8:c1:
         3d:00:be:a4:65:c6:4b:e7:a3:f4:f7:21:d2:33:bd:6f:fa:ca:
         78:29:1b:d3:83:cc:e1:9d:5e:8e:f8:01:ba:5f:04:69:a3:e8:
         b3:12:6c:23:dc:e7:08:c9:f0:ef:93:30:8c:b4:08:64:14:06:
         00:eb:23:1a:11:73:4c:04:3b:ce:f4:65:a0:6c:ca:dd:96:22:
         84:f6:d6:5d:66:8e:0e:52:e2:95:61:ac:75:34:dc:40:61:aa:
         28:1e:a0:59:71:c5:b0:06:dd:06:9b:2b:f3:40:ba:61:d7:d8:
         1b:b5:1b:35:48:ab:ea:9b:7b:24:37:41:bb:e0:8f:67:6e:86:
         ec:ba:42:97:8e:f4:57:71:04:c8:97:70:77:0c:3d:4b:e2:08:
         63:37:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:07 2025 by rpki-client