Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d103de64-7b71-3e93-85e4-951245800f48.roa
File:                     d103de64-7b71-3e93-85e4-951245800f48.roa (raw, json)
Hash identifier:          FUMwZTJBqP6p4uH0hQTDpL7CkFVFb8G9ALswonZmyBk=
Subject key identifier:   1D:DE:BC:78:06:58:5E:55:4C:4A:EB:FF:DA:B5:48:8A:FE:EE:F4:DE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF4ADD9B93AE488DC098E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d103de64-7b71-3e93-85e4-951245800f48.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397217
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:4a:dd:9b:93:ae:48:8d:c0:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=959a616f-3920-4730-8bad-f61cdc4b12ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:9e:9c:57:ad:c0:6f:9d:8d:b3:86:bb:28:
                    ca:90:e2:15:58:2c:b4:c9:20:88:db:b0:c0:8a:f0:
                    01:59:97:aa:d4:db:0c:4c:3b:db:b8:60:b3:5d:51:
                    c7:92:fa:3b:91:37:d7:cf:3b:34:f5:2f:ca:c1:cf:
                    16:0d:33:1f:dd:95:b7:fe:33:ea:f8:76:06:1d:d2:
                    bc:72:f3:02:ed:fe:69:e4:04:92:01:2d:ef:76:95:
                    41:4f:7d:d0:2d:9a:83:2b:b0:14:ff:95:3b:25:1e:
                    0d:82:68:a9:4c:60:92:4b:e3:0a:ce:d3:36:fc:e8:
                    b7:4d:dd:98:35:29:60:3b:a7:28:08:97:fb:3a:e6:
                    3f:e8:d8:42:6c:1a:88:19:07:74:fc:1a:e4:f9:60:
                    0f:d6:49:b3:38:e8:3a:2b:2c:f8:fa:f8:3e:c3:56:
                    ff:5a:c1:af:ae:68:ff:04:5d:fd:f5:62:f4:8f:01:
                    dc:d0:8d:20:65:3a:54:f0:2d:d8:57:2d:1f:0d:35:
                    61:92:39:9e:06:92:5a:3e:7e:ee:5b:0b:e2:cf:b8:
                    66:95:0c:f3:4e:ed:c0:8f:e6:c0:f0:73:d4:31:29:
                    9c:42:04:1d:7f:5f:d4:32:63:39:d9:ff:6a:be:4a:
                    bc:f5:07:4a:f9:9d:32:17:37:f3:5c:84:6a:7b:ee:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:BC:78:06:58:5E:55:4C:4A:EB:FF:DA:B5:48:8A:FE:EE:F4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d103de64-7b71-3e93-85e4-951245800f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:a0:a2:8f:db:ce:04:8e:cc:02:48:1f:07:2c:1b:bb:0f:
         99:36:87:0a:a8:29:05:51:85:cf:a0:6d:45:df:b2:95:2d:db:
         d0:09:d2:fa:63:22:29:57:1e:b0:8d:0e:4c:79:cc:6b:9b:43:
         c8:9d:a2:bb:96:ab:85:bd:73:1e:71:d0:8c:8b:a2:f6:94:b7:
         19:4f:ee:d0:b7:34:7a:cb:c2:75:33:5a:24:a1:ec:69:37:5e:
         ed:d9:0f:a6:49:de:1a:79:4a:5b:09:a3:b9:1d:32:00:32:78:
         40:6c:31:9e:45:d7:87:24:94:74:28:52:52:9f:e4:ee:57:15:
         dd:cf:25:15:6c:17:de:b3:e9:5a:7e:c5:e7:31:70:6e:28:32:
         6a:67:f7:9a:50:0c:42:f9:c4:05:af:f2:69:47:3f:65:b4:5f:
         cb:be:ec:61:ae:68:9f:96:ce:8a:40:2c:31:6b:b9:c5:d7:fe:
         f3:97:4b:c0:3d:47:01:f7:29:16:0c:82:3c:90:7e:fc:fa:6a:
         df:2d:55:59:18:2c:eb:f5:de:93:65:e5:6b:0f:d9:f6:ad:12:
         19:cb:d1:22:81:55:dc:89:b7:6e:b7:fc:b2:81:1b:fa:7f:01:
         1a:38:2a:e7:87:d3:3a:08:88:ca:b7:8b:98:8a:20:1d:ea:61:
         e1:21:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:16:05 2025 by rpki-client