Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c02eb86e-8ca1-3767-bd26-00bbe94bb779.roa
File:                     c02eb86e-8ca1-3767-bd26-00bbe94bb779.roa (raw, json)
Hash identifier:          AZ5gwcuk2Dv5lu2pOebsU0k4tneoU/GMrCw0z9AHNpc=
Subject key identifier:   87:3B:09:87:74:D9:17:13:19:D5:2C:0E:01:9F:FA:85:B2:54:AB:13
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59FE4F43E362BA8A896020
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c02eb86e-8ca1-3767-bd26-00bbe94bb779.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397235
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:fe:4f:43:e3:62:ba:8a:89:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=8baee7b6-e451-4d83-92a5-d3183340d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:e0:6f:9d:72:7a:e1:f8:07:29:1b:32:ae:
                    aa:96:8d:de:4a:ab:9d:b3:5b:88:f6:29:3d:01:fe:
                    e5:6e:fe:db:23:de:83:bf:40:1f:fe:a3:83:cc:ed:
                    a2:d4:ce:c8:2a:22:39:45:a5:c6:09:7b:8f:85:c2:
                    94:4b:f5:63:1f:2e:7b:bd:5f:f5:b7:fa:65:92:cf:
                    5e:05:3a:4d:8b:80:94:8e:a4:a9:c2:0c:13:e9:83:
                    74:5e:af:d0:ba:af:99:1e:a7:54:ae:91:f5:6c:d5:
                    06:cf:9a:f6:8d:b0:4b:4c:88:ff:51:84:e5:92:f0:
                    70:f8:f4:66:46:f5:ba:20:99:86:be:97:33:69:cd:
                    9d:58:d2:e8:9f:3a:f4:c2:71:f4:48:64:c7:b3:eb:
                    6d:02:b2:1c:32:dd:19:c7:9a:0d:42:81:be:d2:d9:
                    15:9a:57:6a:4a:a4:b3:1c:68:d7:52:79:0f:a2:40:
                    53:78:0a:15:67:1d:7a:15:df:ee:35:f5:54:58:0b:
                    4c:86:de:56:e9:3b:5d:d0:e2:28:fc:3f:ba:4f:f4:
                    9d:38:17:24:26:77:ae:c7:6f:96:40:c9:08:65:c5:
                    7b:0f:67:f8:41:ff:c0:48:e2:ab:b6:78:65:4f:21:
                    dc:06:91:60:40:32:66:0b:74:df:22:e7:7e:f1:80:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:09:87:74:D9:17:13:19:D5:2C:0E:01:9F:FA:85:B2:54:AB:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c02eb86e-8ca1-3767-bd26-00bbe94bb779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:62:ad:be:ac:2f:14:65:74:aa:ef:86:87:f5:30:b1:26:d2:
         01:c2:36:a2:21:5d:15:f6:3d:fa:5e:cc:9f:b2:08:55:f9:10:
         63:35:ab:ca:54:3e:02:f3:eb:33:a8:3b:ea:b7:7b:39:6d:90:
         5e:6e:33:e0:ad:3d:c1:bc:01:8a:00:82:f3:3b:bd:3e:ce:3d:
         f7:d6:41:59:87:00:ec:97:dc:da:4e:1e:19:f7:be:d2:32:a0:
         5c:aa:08:10:9b:28:cc:9a:d5:5d:90:c1:d0:96:ff:50:08:71:
         eb:5c:87:f4:f9:67:21:db:64:d5:fb:a2:5a:02:50:5b:cf:f0:
         42:bb:fa:01:e4:4b:37:16:d5:dc:38:e7:2a:2f:2c:39:4d:59:
         0c:ac:c5:af:ef:2e:d7:85:fd:4d:f9:2a:ac:5e:ae:5d:7f:94:
         96:43:c0:c7:e6:18:b4:1d:4f:98:a0:d4:72:03:d0:90:d4:83:
         4b:00:8d:53:fe:5c:b5:cf:23:e5:ea:e6:dd:d9:c7:3b:2f:f2:
         42:f9:83:d1:6d:ec:7a:58:8d:39:8b:07:47:4a:12:79:d1:c9:
         87:d4:ae:7f:32:81:86:78:93:2c:1b:1a:56:4e:0b:41:86:e5:
         7f:47:c4:aa:f7:76:80:0b:e6:62:4d:a4:f7:a8:d3:63:3e:fe:
         6c:a5:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:04:26 2025 by rpki-client