Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b740caab-b718-32fd-b084-2c8aa6819522.roa
File:                     b740caab-b718-32fd-b084-2c8aa6819522.roa (raw, json)
Hash identifier:          /bhtHgJrbmnl/QTY9VVHjNRtcs14yOtrOrBO5qk2akI=
Subject key identifier:   2D:71:5F:6B:34:28:16:A5:5B:08:CF:FE:46:A4:59:48:F0:2F:33:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F52261A24B9EA67F8900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b740caab-b718-32fd-b084-2c8aa6819522.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397215
IP address blocks:        204.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f5:22:61:a2:4b:9e:a6:7f:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=52130858-ebf5-45e9-85bc-8e8c4e23a9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:36:2f:d7:ed:45:12:85:a1:3d:f0:d0:59:
                    7d:b7:ac:03:7e:5b:dd:70:7f:0d:73:8a:eb:06:1d:
                    81:2a:6f:b0:34:75:8d:c6:95:18:8f:c2:81:49:5a:
                    e7:4c:57:c7:96:0b:bf:89:f4:fe:95:7f:47:cf:af:
                    42:55:f6:90:87:cb:fa:68:18:1d:0d:44:f3:f1:71:
                    dc:e5:f0:65:21:e5:b8:d3:eb:64:0b:d4:cd:42:c9:
                    bb:e5:8b:c3:c9:c1:e9:5c:d7:47:29:3e:53:35:07:
                    34:72:9a:a5:e5:7e:f8:b4:0e:d0:cb:11:24:c4:39:
                    66:4b:2d:8c:c6:e3:fc:3c:8f:76:e6:80:f0:d4:0f:
                    b5:ec:7c:76:b8:1b:f2:41:46:c5:6a:ec:79:1e:b8:
                    d8:30:ea:56:5c:6d:9a:77:24:b6:73:9e:82:7e:f2:
                    6a:13:4a:a2:bf:11:e7:e5:c8:bb:d3:45:16:e3:26:
                    9a:2b:73:dc:a9:fa:51:cf:44:a0:2a:e0:9f:0c:0c:
                    ed:d0:94:13:59:a8:b1:f8:89:91:f1:63:9c:f3:2f:
                    41:07:27:61:46:04:aa:4b:2b:39:b8:24:10:45:5e:
                    54:13:eb:c7:06:75:32:b3:92:d0:b2:2f:77:c8:1f:
                    e4:4f:49:4b:0b:f5:53:8a:55:17:41:00:eb:7f:54:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:71:5F:6B:34:28:16:A5:5B:08:CF:FE:46:A4:59:48:F0:2F:33:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b740caab-b718-32fd-b084-2c8aa6819522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:b0:48:4d:d1:36:53:c0:a9:04:b6:3c:72:00:af:dc:85:
         a8:33:dd:f2:33:ae:69:7a:86:99:58:1d:aa:77:c0:27:b2:98:
         21:df:37:3a:71:f5:60:f6:92:75:0c:ab:5c:01:7d:80:70:87:
         26:42:02:4a:7d:25:31:04:1f:3c:59:67:e1:4c:6f:bd:40:6f:
         fe:59:8d:47:8a:24:36:90:8c:f7:ad:30:2c:6a:fb:0a:98:14:
         97:53:4f:9c:5f:d3:bc:c3:8b:6c:91:36:04:13:27:ad:5d:19:
         4e:46:ce:bc:f6:32:bb:f6:74:3d:fd:69:02:2b:a5:ec:30:e5:
         e7:1e:ca:d5:bf:5f:20:9d:3f:73:67:17:e1:a3:30:ac:af:8b:
         bf:f6:60:8b:97:f1:f9:59:66:b2:9d:7d:6a:a7:fd:2d:a9:35:
         1b:61:ea:af:4c:2d:22:50:4c:ba:8f:8a:f1:24:98:41:69:9e:
         af:85:d3:75:2c:6f:cd:26:71:07:f3:a0:b0:fe:e6:1b:af:bd:
         47:24:c3:7d:0f:2e:62:bd:13:d5:3c:d6:14:da:4a:2c:7e:f6:
         c5:5c:bf:db:d3:6f:dd:ad:30:68:a6:e3:be:33:77:12:df:62:
         40:d6:05:65:00:b1:06:69:17:16:cf:16:70:80:13:66:1d:3e:
         72:3e:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:28 2025 by rpki-client