Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa
File:                     8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa (raw, json)
Hash identifier:          uTgDS1bsmMNvqcYSSGpRBZ8Kwa0hnK2L7me9ZOb4aAQ=
Subject key identifier:   F7:AA:8B:4E:90:C4:10:33:AC:E1:51:2F:39:7A:20:87:87:35:07:B7
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584957F3F8FAE136DB50363EFB70
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        74.112.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f8:fa:e1:36:db:50:36:3e:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=cc136e0d-2e4b-4572-9cb0-7bc78d210009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:a2:25:31:36:09:ad:0c:a4:0c:db:e0:3b:
                    76:7a:87:24:1d:fd:0e:55:e6:f5:6c:cc:59:26:9b:
                    38:7e:60:31:14:36:53:d7:d9:e9:7d:54:cb:64:4f:
                    82:0d:70:c0:31:9a:0a:c4:d9:d6:33:b5:9a:8a:17:
                    1f:fc:40:2a:59:fb:d6:67:16:a4:63:cd:e1:60:0c:
                    60:cd:34:fb:26:84:d5:54:d5:f8:d0:6e:27:cf:27:
                    b7:92:fd:33:a2:6b:b2:f5:92:9e:ff:c9:ea:d1:c4:
                    42:1e:0e:65:04:ad:b5:a7:1a:89:0a:8c:84:63:e2:
                    78:aa:b6:62:7d:fb:85:d2:2d:cc:b5:24:73:64:69:
                    c0:83:df:6b:3d:3d:c4:c1:25:24:5e:e3:15:ad:75:
                    2b:99:46:e6:e9:e2:fd:33:df:f0:e7:93:cd:4e:80:
                    32:51:2d:b6:b1:9e:2a:f2:7d:58:14:e3:51:5f:9b:
                    1a:95:24:68:ab:9d:f4:e4:a1:08:29:69:ed:fe:e9:
                    a6:89:2f:6e:ae:df:08:37:26:35:70:19:32:7f:d2:
                    bd:06:22:fc:5c:88:a0:de:83:ee:7b:0d:35:70:54:
                    e9:4c:8f:a6:09:c6:04:ec:86:4a:9d:c6:d2:23:53:
                    84:d5:e2:2e:c4:8c:ee:00:a4:e6:90:fe:fd:a6:88:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:8B:4E:90:C4:10:33:AC:E1:51:2F:39:7A:20:87:87:35:07:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:79:88:13:4b:2d:25:54:6a:0f:ab:97:6b:d3:87:b3:6a:
         5d:b4:ec:eb:df:a5:e9:e8:59:40:81:b6:27:1c:f1:39:fa:32:
         11:07:af:0a:27:35:d6:31:ae:2e:53:25:70:b2:50:e3:84:2d:
         03:de:59:b5:76:06:8f:32:a6:db:ca:14:79:af:a3:54:a8:d6:
         27:c3:68:af:1c:f7:2b:a3:4f:92:51:22:7d:14:a8:bc:f0:79:
         5f:ef:fd:24:23:87:ea:09:4f:c6:a7:c3:78:f9:39:09:77:3d:
         17:99:85:aa:e0:f6:25:a3:b5:e4:b7:75:c2:b1:07:54:a3:64:
         24:b4:98:5d:6e:fb:a4:2d:8b:b3:23:97:65:27:4c:9d:d3:2b:
         83:e4:3a:fb:d8:fa:d9:4e:ae:ed:2a:3d:d6:7e:33:09:ad:d0:
         03:d7:aa:96:33:83:5b:c0:1d:2c:e2:c2:f8:a8:55:42:67:1b:
         15:3c:f7:39:cb:d5:f8:0e:56:6c:44:12:01:46:04:41:d1:77:
         3c:ca:6a:b4:d1:d1:7e:83:6c:de:e5:9f:0e:64:1e:03:a5:18:
         80:b1:a9:05:53:e9:24:d7:1d:d3:45:63:96:63:df:cc:7a:e9:
         cd:19:ac:e2:1d:fc:03:88:7e:e3:c8:8f:94:bc:ab:eb:e6:ec:
         80:b4:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:15:58 2025 by rpki-client