Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3ffa7a0-3838-319c-8f36-002f75097f39.roa
File:                     e3ffa7a0-3838-319c-8f36-002f75097f39.roa (raw, json)
Hash identifier:          VcIsZG1FRv2XMKMb4ZmU6mVBU1CpDveFLxz3kGHbnoA=
Subject key identifier:   90:15:75:51:9F:B8:4E:5E:C0:5C:29:26:18:C5:12:89:8D:3B:2B:E4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF4226568FD8EB2F963600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3ffa7a0-3838-319c-8f36-002f75097f39.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397237
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:42:26:56:8f:d8:eb:2f:96:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=38d98790-7f40-4895-b243-f5dad6a82c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:d5:fe:b5:52:af:c4:58:14:c5:78:84:de:
                    ee:78:01:96:52:9e:58:78:15:a4:ff:66:34:91:83:
                    9a:51:83:1d:d2:bc:4d:87:da:52:1a:7f:a1:73:7b:
                    f3:00:ec:2f:dd:ca:68:93:f0:a1:c5:cc:24:54:c6:
                    de:76:a0:7b:b8:02:a2:d4:80:93:bc:e9:70:20:01:
                    2a:dc:36:71:d5:5c:39:c7:e5:09:44:a5:d4:5d:7e:
                    2d:25:06:39:a5:e6:b1:15:a4:d7:04:a4:99:83:b5:
                    dc:0b:2d:2a:42:41:e1:84:9c:73:be:d6:22:db:bb:
                    85:9d:b1:e2:61:07:e7:20:2d:18:f4:e8:92:31:d8:
                    65:bb:0c:ec:9a:bd:ca:6b:67:e3:6b:f2:b1:37:83:
                    26:0b:3e:66:a0:a5:41:6f:ec:67:14:c5:f9:93:e3:
                    90:42:60:e5:6d:50:b4:af:44:f3:89:f6:50:2b:6d:
                    e2:a9:6d:65:52:6e:20:0f:68:eb:0f:ec:c2:c8:f3:
                    3f:2b:c9:00:58:14:16:58:de:9a:1e:04:cd:ee:79:
                    3d:d2:5a:3f:73:2b:be:c4:d4:db:91:13:4d:c6:66:
                    3b:ef:a9:ab:8b:7b:ff:20:af:36:e0:ee:47:ee:b8:
                    b4:82:97:98:eb:2d:25:ba:32:db:bf:a4:8e:1c:bd:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:15:75:51:9F:B8:4E:5E:C0:5C:29:26:18:C5:12:89:8D:3B:2B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3ffa7a0-3838-319c-8f36-002f75097f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:f1:67:7d:3b:63:6d:09:ad:17:98:df:e1:50:c7:68:92:
         5e:d3:5f:88:19:80:35:83:a9:ac:71:9a:e8:a7:32:80:d6:f2:
         ed:7e:2f:f8:1e:a0:9e:ce:eb:c5:50:6c:b9:0c:a3:87:80:a5:
         05:6b:97:e3:d4:77:99:37:65:fc:5c:29:2a:d6:d3:b2:ed:93:
         56:6b:0c:c1:80:00:d7:a5:53:8d:ed:5d:a4:ca:bd:95:8f:02:
         d1:11:60:b9:4b:fe:f3:19:98:0d:f1:10:a0:2a:3e:6b:66:27:
         dc:80:6c:f2:ae:03:c2:0b:00:57:aa:71:57:75:5b:03:d4:71:
         a6:1f:67:df:7b:81:f7:11:2d:ac:35:43:19:12:85:e5:c0:23:
         af:ca:35:2a:58:7f:3e:83:ef:2c:d1:d1:63:a9:6f:08:cb:91:
         ab:33:4f:30:cf:64:0f:a0:9a:ae:18:f5:bf:4d:e0:06:c5:59:
         96:d7:92:65:a2:f2:ff:fd:37:63:46:4e:e9:29:3f:92:b2:2e:
         36:60:c3:94:4b:9e:d4:8b:d9:70:31:81:9c:29:79:6f:8b:7a:
         29:06:fa:62:a5:e2:20:9f:22:0a:4f:de:69:1f:56:38:6f:34:
         d2:9f:89:6e:1a:15:28:15:24:ce:03:ab:cc:68:ef:bd:a4:35:
         28:a9:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:14 2025 by rpki-client