Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d76c14bb-38ab-3fc8-b190-c232933ecb75.roa
File:                     d76c14bb-38ab-3fc8-b190-c232933ecb75.roa (raw, json)
Hash identifier:          UqDmsZpikV78a+EXzsUlEHQM8ywZL4dTM2pUI67epP8=
Subject key identifier:   FA:6A:55:A4:6D:8E:3C:25:72:4E:FF:A2:ED:C5:5D:74:8B:38:A1:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A086D79E9582B86798400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d76c14bb-38ab-3fc8-b190-c232933ecb75.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397229
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:08:6d:79:e9:58:2b:86:79:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=77e193db-e48f-44f4-90a2-67ead89acb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:c5:74:6d:bd:a2:90:c2:f4:94:c6:61:d5:
                    54:ad:da:90:03:a7:78:89:47:30:fd:c6:21:fa:59:
                    64:51:49:15:f0:f8:fa:a2:b1:28:bf:8c:8a:f3:b0:
                    27:c7:63:8b:48:e7:10:a4:cc:1b:66:d5:a0:f0:19:
                    7a:71:57:93:9d:f9:75:1c:f5:3c:1e:21:b9:bc:03:
                    cc:76:f2:79:a3:36:20:9f:0d:fc:34:53:a1:26:69:
                    c7:1f:ad:e5:c0:df:b0:6d:5e:7b:7a:cb:63:08:8b:
                    6e:6b:b8:4e:a9:1d:f2:84:45:86:64:84:19:5f:42:
                    01:f7:96:ee:4b:a2:53:05:e5:49:a2:4d:35:4f:59:
                    45:77:de:29:b0:53:f0:f3:83:cb:a6:55:25:6f:02:
                    84:91:31:b2:ce:76:a3:3e:07:73:32:74:dc:4e:9b:
                    63:82:1e:7a:3d:ed:f1:07:1e:d8:93:14:74:e2:74:
                    3a:0f:48:3c:c8:8a:e8:9d:e1:4a:cd:38:c4:9a:8e:
                    94:1f:5d:f9:56:91:c9:87:4b:ca:97:f4:a7:92:fc:
                    83:16:d3:7c:f2:c0:12:8c:4b:68:aa:84:b0:5b:3e:
                    ea:fe:5c:70:09:cc:19:fe:97:b2:b4:f1:6f:93:50:
                    70:74:b4:3e:37:ed:76:68:27:13:f6:ad:b3:05:4c:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6A:55:A4:6D:8E:3C:25:72:4E:FF:A2:ED:C5:5D:74:8B:38:A1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d76c14bb-38ab-3fc8-b190-c232933ecb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:e2:e3:f6:e8:d0:a7:71:c7:c0:43:9b:9b:41:9a:e7:17:
         89:46:7c:66:b5:5a:94:57:d5:72:f5:62:33:a2:64:0e:1f:2b:
         a1:27:85:f9:c8:4a:8d:f2:8f:75:1c:e7:54:f7:5b:db:ae:c0:
         96:ba:1e:b1:a2:32:8c:dc:77:75:47:eb:f5:96:c3:e6:50:71:
         15:92:f0:48:bd:df:c1:06:bd:2d:78:1d:e8:52:13:33:7f:ad:
         24:2b:f4:88:c4:fc:1b:d2:ff:be:b4:16:1f:bb:61:35:2f:3b:
         96:44:cf:54:2d:5f:9b:e2:b3:4b:ed:a2:4b:fd:42:61:4b:c6:
         3e:92:03:f3:ea:13:f7:ce:97:fa:6a:02:85:8d:b5:88:38:1d:
         af:a9:76:1f:bc:49:a1:45:e6:76:aa:2c:7a:fb:a9:16:18:29:
         c1:fc:5a:00:55:d5:c5:a1:e5:13:38:81:51:34:16:7c:79:da:
         e0:4e:f2:a6:79:20:98:33:51:fa:e3:56:ad:ed:dd:af:c4:0a:
         21:f6:0b:95:c0:32:0b:80:78:01:c7:7b:e4:47:fb:48:ba:a7:
         39:05:6d:d2:db:5f:88:ef:bd:41:2d:52:6d:69:7f:84:86:e8:
         ae:8a:84:2a:f0:43:12:28:07:f4:47:24:1b:2f:75:27:d5:f3:
         fb:5b:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:59:35 2025 by rpki-client