Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dbee2720-2742-3db4-82ac-7143936b41de.roa
File:                     dbee2720-2742-3db4-82ac-7143936b41de.roa (raw, json)
Hash identifier:          lRw+1+X4sWmdFOre1NYV9Eu0UsJTwtNm+a7ltbDY/EU=
Subject key identifier:   A2:10:2F:F5:D2:8F:1B:F6:8F:85:51:1F:6B:AD:DB:41:C6:A8:80:C7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F4734352D36917153680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dbee2720-2742-3db4-82ac-7143936b41de.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397237
IP address blocks:        204.74.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f4:73:43:52:d3:69:17:15:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=7e9ebf0d-a456-47d9-9cf4-f5c54d00e4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:03:f2:e6:0e:b5:8e:c8:bd:b4:77:3c:4d:
                    48:61:52:18:c1:b4:f9:fc:64:ef:fd:da:e0:14:9a:
                    ba:35:d9:bd:7e:e0:45:fc:4a:95:af:94:5e:b9:e5:
                    a2:58:36:88:e7:27:07:74:3d:34:e9:9f:76:42:5f:
                    d9:97:81:36:8d:6d:85:dc:a2:8a:86:53:70:c6:d6:
                    22:1c:85:d4:64:23:6c:3f:19:16:8a:06:06:03:00:
                    10:be:a9:7e:3e:8b:e0:3c:ce:0d:22:ba:20:68:fb:
                    7f:78:70:64:33:c8:1f:fd:bb:6c:94:f6:75:a4:8c:
                    09:d2:31:96:59:84:00:b2:d5:26:c4:05:7c:58:d7:
                    fa:9d:01:50:b9:8f:45:30:bc:c8:64:a0:6b:cb:08:
                    3b:a5:91:78:a2:6a:de:96:6b:15:3d:9c:e4:7e:d0:
                    98:c5:dd:8d:32:81:14:d0:ac:1c:fd:95:2b:b8:41:
                    28:ac:4c:21:e5:76:7d:92:b4:c5:c0:c0:ca:89:c7:
                    80:39:55:bb:4c:22:b2:b8:56:0c:35:f6:5e:ac:dd:
                    d9:32:19:9f:bc:0f:16:e2:aa:81:81:15:32:fb:29:
                    da:3f:e3:f9:43:dc:50:b4:cd:94:34:2f:e6:5e:39:
                    ed:d2:75:72:27:a2:90:c0:84:ab:eb:d4:a1:d6:f2:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:10:2F:F5:D2:8F:1B:F6:8F:85:51:1F:6B:AD:DB:41:C6:A8:80:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dbee2720-2742-3db4-82ac-7143936b41de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:44:e0:ae:5b:a8:77:8b:5f:a9:11:5d:f6:7a:7a:6a:74:22:
         80:45:d9:b7:dd:dc:14:ae:d5:8c:b6:f1:30:21:0d:85:16:bc:
         65:6e:a2:33:4a:ec:d3:e1:e8:4f:a1:14:91:81:fe:b3:0a:11:
         e9:0d:6c:7b:3b:1f:b6:e5:74:a6:d5:4b:aa:79:74:c0:7e:05:
         bf:21:46:9b:2e:44:ca:62:b9:80:ab:4f:31:2f:a4:ce:d8:8a:
         5a:50:12:a9:a3:aa:73:fa:f1:f7:83:f9:c6:16:be:9e:47:67:
         43:e2:1f:b8:31:20:de:36:ac:8d:07:1a:9c:63:af:60:27:a2:
         aa:d9:62:c1:ea:2c:b3:94:a4:e1:50:eb:ac:27:a5:aa:02:11:
         49:05:8f:b7:38:75:38:d7:2e:43:e3:60:e1:cb:dd:54:5a:63:
         bc:83:5b:b5:b5:50:3e:12:42:e3:b7:d4:95:3f:e7:d9:5e:c3:
         b2:b1:cf:ee:e7:e4:be:3b:97:76:74:42:50:3d:ce:d6:60:2a:
         f7:7b:06:16:da:42:a4:96:77:bf:62:f0:7d:e4:1d:c0:2d:09:
         05:c0:92:94:80:fe:8c:18:01:2d:b8:ed:04:2b:48:b6:7b:e9:
         ad:15:82:48:ed:bd:68:85:0e:a5:0e:06:05:57:a2:35:e8:4e:
         01:5a:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:25 2025 by rpki-client