Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c531718c-075d-38f8-a9d1-ada537ca5f6d.roa
File:                     c531718c-075d-38f8-a9d1-ada537ca5f6d.roa (raw, json)
Hash identifier:          dQx0F4FeZPerFyVI0qBFn9OcpR2qiwxsZvEZiA4iQpE=
Subject key identifier:   71:1A:6D:DD:67:29:FF:3F:8E:69:94:D8:8A:94:5E:AC:D0:D5:0F:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849A61F45B731D7E4CDC27B21C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c531718c-075d-38f8-a9d1-ada537ca5f6d.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     22677
IP address blocks:        68.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:45:b7:31:d7:e4:cd:c2:7b:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=bc83bb7f-e549-4c7d-a9fd-a8911cd01777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:12:55:17:f1:98:a5:5b:06:fa:49:96:02:
                    8f:bb:b9:33:97:54:3f:50:2e:78:37:2b:5c:77:3e:
                    f2:1b:e3:97:a4:e2:89:36:ba:84:0c:cf:1f:91:28:
                    37:6b:8c:96:fb:88:9d:13:b5:7f:43:52:36:97:27:
                    25:65:94:88:00:48:26:9c:71:2e:b1:a5:26:f4:f0:
                    b1:e6:bf:86:5d:af:0c:58:65:02:9a:ed:36:b2:12:
                    46:fa:ff:57:af:8a:36:50:39:e4:01:ae:e0:ee:a4:
                    ce:1d:b4:29:4e:c7:a6:9b:e8:79:5b:cb:4e:b3:ea:
                    be:f6:b1:33:20:85:1e:27:ef:a3:c5:ae:4a:a8:8a:
                    e5:47:fa:43:39:9d:0c:37:84:c6:6a:7d:2e:28:a1:
                    ab:bc:38:9f:78:ea:e9:51:8a:15:5b:68:56:77:4f:
                    70:fd:8a:9a:74:1a:6f:21:7e:d2:64:07:bb:4d:5f:
                    e0:f8:d2:5b:e0:4a:ba:97:11:a7:dc:39:61:aa:fd:
                    71:f4:f4:f8:9b:8d:1d:56:a3:d4:03:36:0d:94:2f:
                    6b:7c:02:cc:cc:c8:f5:cc:dd:aa:58:7c:c6:14:e7:
                    20:97:01:d2:4e:3b:e6:6d:d8:fb:3a:f0:55:e5:30:
                    7e:73:eb:b9:78:47:cc:ff:a5:f8:36:14:2b:db:f4:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:6D:DD:67:29:FF:3F:8E:69:94:D8:8A:94:5E:AC:D0:D5:0F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c531718c-075d-38f8-a9d1-ada537ca5f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:47:6c:f5:c1:64:4d:45:b3:f8:04:9c:9d:cf:61:1a:8f:e4:
         06:8e:2e:d6:6e:04:fc:02:c8:f3:1d:27:3c:6c:13:e5:ff:d0:
         b0:41:32:b5:19:fc:aa:e4:b1:8b:52:27:21:99:ea:de:56:22:
         c5:ef:d5:61:e8:6e:0f:9a:06:92:0b:04:c6:5c:af:2d:56:98:
         d2:87:b3:fe:97:70:9a:18:78:96:92:04:5e:54:b0:3a:5b:56:
         45:11:a2:1b:47:5b:c7:d0:a4:97:c1:6b:5a:c6:07:88:57:d5:
         27:c9:8c:10:2e:13:2f:49:56:fd:b2:55:63:f0:4c:a3:0d:de:
         99:9d:b5:60:dc:af:c6:fa:f7:17:59:43:22:67:7e:01:eb:fc:
         01:c6:b6:f2:f1:fd:85:09:1b:fc:fd:4e:02:7f:22:1f:cb:37:
         0d:37:9d:f4:5d:14:3d:40:73:33:02:0c:45:08:d4:22:d6:d7:
         07:41:5f:b2:73:89:e3:5f:fe:5a:6b:23:dc:6b:10:03:3d:de:
         99:c1:af:b8:cc:ac:0f:3e:02:20:b1:7e:07:13:3e:42:11:15:
         48:b1:b0:bd:2f:06:1b:26:56:a0:eb:c3:86:2a:46:c5:94:a1:
         25:bc:8c:ea:5b:79:9c:d3:8a:af:39:5d:5b:73:c6:df:d7:90:
         95:a4:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:48:32 2025 by rpki-client