Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/427dea9f-8179-37b5-b322-410fc6ea4521.roa
File:                     427dea9f-8179-37b5-b322-410fc6ea4521.roa (raw, json)
Hash identifier:          BfUWcSLv5O+A/AC6SYhYaJ/KyCPRawHbt3M+J6Gt3w4=
Subject key identifier:   D1:09:4F:04:DB:D6:28:85:23:CC:51:B5:90:C3:0F:70:79:F4:CA:4D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F39DADFCB1B3FFF28400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/427dea9f-8179-37b5-b322-410fc6ea4521.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397224
IP address blocks:        204.74.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f3:9d:ad:fc:b1:b3:ff:f2:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=2fa85cb5-e3ca-47f9-8601-d2903e0578e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:1e:86:83:0e:fc:95:92:1b:6e:e5:2a:07:
                    c0:3b:53:c9:34:2f:ab:d8:f0:e1:c1:be:0f:9f:42:
                    cf:00:a0:e5:c3:cf:44:1c:21:39:05:d4:88:b9:d6:
                    b8:ea:ff:97:0c:cc:99:a8:70:91:e9:97:b1:38:9b:
                    fe:c9:92:8c:0c:95:a0:7d:a0:43:ac:67:7a:15:ec:
                    fe:5d:f4:b4:2d:e5:1b:6e:9d:96:e8:11:b5:79:9c:
                    e1:3b:a4:51:ef:7b:18:ea:77:7c:4d:29:35:b4:b3:
                    32:3c:21:1f:d5:0e:b1:37:ae:b4:8f:41:48:4c:23:
                    92:23:56:6e:69:1a:dd:81:d5:79:d6:1f:2b:24:8f:
                    63:ad:f0:ca:34:79:1b:86:3f:99:5b:74:68:06:b6:
                    00:f0:6f:03:4d:cc:5f:14:77:32:65:1b:58:72:5f:
                    b2:b1:1f:db:4e:f4:6c:c7:d2:3b:ff:d7:3e:cd:b7:
                    d0:ca:bc:7c:9c:e8:00:9a:d3:11:31:78:91:d8:e7:
                    31:9d:db:08:d7:61:43:bc:f9:63:e9:88:4e:78:2e:
                    4c:b6:8a:54:3d:c6:cb:8f:5e:2e:e4:df:f1:ac:fe:
                    32:f1:20:99:db:51:49:c2:a8:a3:35:bb:09:16:5c:
                    17:6e:af:80:19:76:6a:c6:e0:9e:c1:14:2b:7f:51:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:09:4F:04:DB:D6:28:85:23:CC:51:B5:90:C3:0F:70:79:F4:CA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/427dea9f-8179-37b5-b322-410fc6ea4521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:b0:b0:f1:c3:25:b2:4d:2e:ef:26:6d:a7:58:b5:fe:92:
         0e:3f:6b:4a:10:ef:d8:a8:bc:ce:af:22:3a:b2:e8:30:c7:33:
         6d:52:67:10:96:89:c3:90:79:d1:99:30:cf:2d:eb:5e:2d:07:
         d1:de:0f:04:a2:1b:b1:23:9c:95:78:01:b1:53:a5:cb:dd:4f:
         4e:af:59:48:8b:ad:aa:56:8b:46:e6:f9:0f:79:19:6d:25:c8:
         07:85:39:9a:86:b3:32:78:6d:56:3a:fa:d2:0a:0b:17:0e:7c:
         bf:e3:e0:d6:9e:fb:47:01:8f:bf:37:4c:e8:5e:3b:11:5d:d4:
         ae:32:16:00:9f:ef:10:aa:b4:f5:9d:4e:69:43:f4:3f:74:9e:
         31:9d:0e:f2:06:03:d3:20:b2:87:54:68:ea:c1:48:a2:ed:95:
         27:39:54:f9:30:76:fb:3a:64:82:df:ca:de:44:43:db:90:1d:
         06:4f:2e:2c:59:46:86:fc:3e:e2:87:ef:9e:92:68:ef:9c:ae:
         d8:10:e4:00:3e:00:ee:ad:6b:24:86:c1:73:99:07:83:ef:17:
         08:4f:31:7f:7a:61:7f:2d:aa:70:49:55:72:58:19:a3:22:f4:
         10:44:97:07:6f:1b:a6:b4:d0:40:35:06:a5:95:2b:5e:74:3b:
         52:86:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:18 2025 by rpki-client