Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436e63f2-09f9-3cb0-ad35-8d3074e02710.roa
File:                     436e63f2-09f9-3cb0-ad35-8d3074e02710.roa (raw, json)
Hash identifier:          NXm2Akf06mcz14YPGMI09n2vOnMvLhtrZuceWJb7sgM=
Subject key identifier:   37:F0:B0:94:96:D8:9A:84:19:3C:9C:F3:0A:54:0D:E5:B4:82:E0:26
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF4A72D4F9C73DA6F31CC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436e63f2-09f9-3cb0-ad35-8d3074e02710.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     12008
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:4a:72:d4:f9:c7:3d:a6:f3:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=64bfb865-ed5f-40d4-a9dc-c0832fc61f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:fe:f5:74:f4:c6:e9:1a:91:7f:ce:2a:8c:
                    04:08:22:ca:77:58:61:72:df:e1:1b:a3:39:15:d6:
                    cd:a6:2f:b2:8a:1e:65:b9:b7:50:92:b4:ae:39:1d:
                    c7:d4:39:90:99:0b:bf:48:96:3f:11:2d:6a:96:cf:
                    17:9b:5c:8a:44:cc:db:f0:60:2d:6a:83:53:ae:0c:
                    52:5f:21:7a:f7:2d:37:89:12:1e:ea:40:59:61:96:
                    15:0a:42:73:1b:2d:39:ab:8b:00:f7:35:7f:18:84:
                    fa:f0:e5:94:53:40:25:c6:8f:b7:5a:38:46:65:00:
                    93:a5:7a:e9:e3:f8:cc:56:26:da:45:ed:56:2f:69:
                    de:ef:63:ed:ec:8e:9e:e4:e3:31:7a:0f:3e:31:42:
                    ea:b7:5a:14:72:2e:de:e5:34:8f:9f:3c:0b:8d:e7:
                    7f:9e:0e:53:f2:95:ba:2e:ba:58:6a:36:80:af:d5:
                    ca:f1:a1:5a:ea:ce:7e:0b:4a:bb:6c:a4:80:66:ed:
                    2d:e9:fe:2a:c9:5f:a2:8b:fa:0d:9e:99:54:62:ab:
                    50:18:eb:c0:67:36:0a:61:77:77:dd:b2:65:bd:b5:
                    12:f3:0b:d5:cd:c5:77:e6:f0:c1:d3:9b:8e:ed:c0:
                    0c:52:bd:6f:1c:6e:78:67:41:9f:46:5f:ad:e3:a2:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F0:B0:94:96:D8:9A:84:19:3C:9C:F3:0A:54:0D:E5:B4:82:E0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436e63f2-09f9-3cb0-ad35-8d3074e02710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:33:4f:93:ec:70:05:46:80:8a:16:a4:16:35:3b:3f:96:e2:
         99:68:a7:c7:00:cb:9f:7f:44:2e:a2:a9:b2:8d:59:d3:58:37:
         5d:6d:76:e4:06:bb:c8:3f:dd:3f:84:2c:8e:c1:09:ff:61:b9:
         11:c8:47:4c:11:06:a8:87:bc:75:fd:a6:f7:57:2a:90:f6:ca:
         ee:47:3b:de:be:30:a1:e1:9a:86:65:a4:4f:95:d7:b4:1b:89:
         69:3b:c6:b1:83:74:7e:81:40:99:2f:e3:2d:5b:14:41:4c:c6:
         87:b8:ef:23:ac:17:52:0e:ce:9e:f7:a0:af:86:b1:01:2f:eb:
         52:81:b5:3a:56:4a:0d:2d:90:f0:90:1b:89:96:69:7d:8a:c5:
         dc:f3:f1:f6:fa:46:8d:90:18:d4:ba:4f:d0:b7:60:cb:8b:ff:
         b6:51:fd:01:1b:56:90:28:34:6b:1d:88:3d:1b:87:d9:46:e3:
         b0:32:39:f5:d0:4e:19:46:fd:63:39:46:f5:b8:5b:99:32:0c:
         bb:6b:c6:1f:59:e7:c0:52:53:5a:35:e9:3d:0c:7c:96:7e:31:
         35:15:2d:3c:8a:19:3d:53:0c:04:9f:84:e8:e9:8b:94:9a:b8:
         e2:6b:53:f6:0b:db:8e:c6:7b:61:d0:5d:e0:21:1c:e3:9e:ce:
         d6:83:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:28 2025 by rpki-client