Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de9222bd-8e79-375d-930b-853b22abeb40.roa
File:                     de9222bd-8e79-375d-930b-853b22abeb40.roa (raw, json)
Hash identifier:          ESxgXYllWt2eMopLvkHRm+MLv0KZsXhz0YmEBAj843M=
Subject key identifier:   39:E5:94:58:F4:BF:DD:DA:D6:23:25:92:8B:FC:A7:63:B0:F9:7E:BF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF18F4EF758DE0378B5800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de9222bd-8e79-375d-930b-853b22abeb40.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397238
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:18:f4:ef:75:8d:e0:37:8b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=323b8379-1049-45f8-bd8a-ccddaaa8616a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:17:80:7b:31:2c:29:c9:d5:48:5f:d1:b0:
                    17:50:f7:99:be:0d:89:f8:35:71:76:d1:ca:8f:07:
                    73:90:83:3f:05:c0:3e:f8:54:a5:a1:f7:f5:99:c4:
                    57:74:ef:7b:f4:5c:00:2d:18:0d:8f:48:3b:76:4e:
                    9b:69:0c:f3:7e:75:c1:14:b4:f0:0b:9f:35:1d:10:
                    e6:a1:b6:14:33:0d:52:f2:52:5f:dc:1a:69:7d:91:
                    c2:d3:f2:08:13:61:fa:e3:7a:7d:55:16:ca:c9:95:
                    77:0a:5c:2b:7b:45:7e:09:12:7b:97:39:0d:9f:b8:
                    ba:ed:a7:77:d6:b9:d8:6f:71:d8:63:76:4c:a3:4d:
                    77:3c:39:15:f3:58:16:ef:4d:f6:6a:ec:f0:ce:b2:
                    ec:34:45:b6:ac:36:09:cf:60:04:90:a2:4e:6d:9b:
                    3e:11:13:57:7e:8b:00:6f:ae:60:dc:66:19:a9:71:
                    6f:bb:e6:28:fd:8a:72:ce:8e:67:56:08:b5:64:4d:
                    ce:3b:01:9d:8f:7c:da:97:d6:80:ad:ce:1a:aa:a3:
                    55:43:6d:3c:ef:02:af:66:59:1b:af:52:f0:fb:d1:
                    ec:62:97:4b:25:35:63:5e:bc:7e:0d:8c:8f:77:07:
                    79:b7:f0:46:2e:91:74:ca:6b:55:14:b5:fd:26:f1:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:94:58:F4:BF:DD:DA:D6:23:25:92:8B:FC:A7:63:B0:F9:7E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de9222bd-8e79-375d-930b-853b22abeb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:77:5c:0d:83:09:7c:0a:0b:91:68:9b:fb:06:12:2d:3e:
         a9:3f:9b:f8:5a:9a:1d:1a:c5:13:1a:d8:4f:18:74:e1:49:14:
         02:a4:d5:7d:79:3d:41:57:18:1f:ff:0d:b1:83:84:34:85:23:
         8d:07:94:09:04:c8:d6:1a:b8:a1:35:25:4e:9a:53:0c:f8:00:
         a4:53:29:de:6f:f2:c8:65:02:14:99:43:92:9a:6a:85:c3:d4:
         4e:de:ca:df:82:75:5b:9c:48:bc:3e:0b:0a:51:b6:04:d3:48:
         a6:12:6e:15:07:a7:05:68:2c:32:dc:ee:3b:0f:8d:0a:90:70:
         08:f2:41:c4:66:9d:2a:0c:8b:af:a8:72:22:91:7e:e1:5a:27:
         50:99:e8:4a:f9:38:a1:f0:0c:e1:74:7a:b6:12:b4:e6:69:9e:
         6f:07:d9:f0:93:d9:29:5a:d6:83:92:4a:b7:11:82:e1:e8:8c:
         4d:7a:87:b1:16:90:83:d6:40:cb:e4:45:2f:4f:7b:a9:9d:a4:
         4f:41:13:e3:2a:eb:98:51:9f:3e:eb:af:db:69:ce:2f:64:d0:
         41:ea:99:7d:a0:cd:b8:b7:33:b0:b9:08:c5:3a:7c:5a:b2:01:
         8a:a2:63:58:29:b3:a4:3e:b8:e3:1c:98:f8:e0:78:20:e6:7d:
         57:03:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:54 2025 by rpki-client