Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa
File:                     8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa (raw, json)
Hash identifier:          948qCSAnqqvNpbw+Z4B+WgP77JLTDY0FJEDlZNT0td8=
Subject key identifier:   8C:0D:56:F7:B6:CD:25:DA:00:AA:6B:EB:69:BE:B4:C7:39:99:35:BC
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F43285849CE9A461F5F8FE859C0186980
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     7782
IP address blocks:        74.124.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:46:1f:5f:8f:e8:59:c0:18:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=74f0498d-9a13-488b-a7f9-8bbd7248ed56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:5b:d8:69:61:b3:2b:ad:a7:26:4e:39:52:
                    45:af:f2:03:02:ae:46:09:13:f5:0f:91:a4:40:48:
                    b5:a2:64:8b:ef:b0:3e:95:bc:05:69:9b:75:45:97:
                    27:f3:d2:be:93:c3:08:dc:f3:bb:a1:3d:63:74:1b:
                    26:98:9f:de:25:9b:6c:90:43:7e:af:7c:85:48:7e:
                    62:43:6e:ce:81:06:26:f9:45:b5:de:fd:56:0d:84:
                    94:34:14:09:98:88:48:8d:c9:72:70:04:c8:45:a3:
                    fb:8c:fa:a2:67:4f:f3:25:83:02:ab:36:bc:e6:2f:
                    02:f2:1f:da:3c:68:80:c0:f4:7d:35:83:ae:9c:5a:
                    69:74:4d:d7:fc:dd:6b:bc:ee:57:df:a8:ee:e8:1e:
                    cb:89:7f:42:4f:b1:66:ae:43:9c:2e:5d:03:b7:68:
                    92:d5:62:eb:c2:64:56:af:6f:da:25:02:11:6b:d6:
                    fc:1e:84:b2:2d:47:c5:79:a6:df:d9:8e:76:d8:b0:
                    7b:cf:bc:fa:b1:ec:39:3c:b4:2d:87:d8:95:08:4d:
                    41:ee:79:ef:79:3f:b5:70:00:dd:1f:7a:91:f7:54:
                    ba:3e:f2:34:b3:08:16:94:7a:b8:bd:05:b9:df:e6:
                    a7:20:2e:47:26:da:cc:02:6f:47:7a:e6:48:f7:36:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0D:56:F7:B6:CD:25:DA:00:AA:6B:EB:69:BE:B4:C7:39:99:35:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:bd:03:24:6c:8b:8e:b0:78:75:2f:16:c6:43:3c:fc:62:
         4c:b9:92:ab:a0:7b:6f:23:b3:cd:b4:d7:4a:3a:65:7f:ea:f9:
         52:c1:7b:43:6f:4f:a0:c4:8f:e0:81:6e:4d:a0:62:72:bc:44:
         c9:8e:c1:97:ca:72:16:b4:6f:e8:ef:1b:d5:3f:22:3e:2f:19:
         4c:ed:50:86:bc:65:9f:63:b8:ef:6f:7b:f3:a6:70:c2:c7:81:
         43:6e:a4:80:7f:d7:11:da:40:d5:cc:67:a3:b5:96:fa:56:55:
         99:82:b4:56:c2:ca:2a:fa:07:da:df:73:fa:97:14:f0:27:ff:
         8f:88:63:2e:05:8a:71:4f:49:8b:8d:b1:88:6f:6a:03:94:7d:
         19:af:cf:e1:7b:5f:cc:18:d1:96:d7:63:4a:f3:d3:22:0e:df:
         67:d8:ac:b8:34:e9:b8:94:2f:6b:05:71:2a:a2:77:f5:e5:3f:
         38:fd:89:82:b2:e4:74:1b:99:cf:e3:9c:30:d0:1e:84:bc:df:
         02:64:e9:bf:f3:a9:52:ad:27:f0:15:d3:70:0c:fd:17:6f:08:
         13:77:d9:23:fa:cb:d6:5e:95:12:2a:ae:55:51:7a:97:84:01:
         dd:36:c4:29:64:9c:34:6a:68:fa:c4:e2:ea:1a:cc:4d:b3:f6:
         fb:54:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:27 2025 by rpki-client