Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cd754c63-ee26-3381-9ca3-74675c3e6876.roa
File:                     cd754c63-ee26-3381-9ca3-74675c3e6876.roa (raw, json)
Hash identifier:          eYDZazq60fPSnzRbxaURlhy59jhlY1PXtK60tJM0K4M=
Subject key identifier:   28:84:6B:E2:02:43:F3:23:2D:BE:F5:17:DC:F4:74:5A:14:06:9F:85
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858492184026D529BD40EA0012F40
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cd754c63-ee26-3381-9ca3-74675c3e6876.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     393871
IP address blocks:        69.74.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:02:6d:52:9b:d4:0e:a0:01:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=3b5ad434-3645-46aa-ae7c-e5118f991c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:a4:85:40:bb:9e:9b:8e:e0:35:ef:0f:d5:
                    e3:48:52:88:ca:44:a9:5d:7c:18:46:da:ae:73:fe:
                    d7:90:ea:26:e3:42:b1:f0:74:ef:d7:01:e3:02:7c:
                    94:a7:dc:f5:e8:fe:a8:7b:30:be:89:b0:dd:3f:fe:
                    44:25:e8:5c:ba:96:a8:49:ed:fd:02:e8:42:5b:46:
                    b2:d8:2b:8d:82:5b:b1:63:8d:00:e4:eb:36:cd:74:
                    ab:d1:5d:f2:84:70:1c:7f:a4:b5:3d:17:7c:c5:f4:
                    94:38:0b:f7:5f:1b:0d:99:26:68:e7:f2:f2:92:6f:
                    f5:f5:95:8e:64:4f:aa:5b:55:24:28:30:20:e0:14:
                    c0:e1:ce:91:15:06:92:21:82:ed:be:6a:fa:5d:eb:
                    0b:af:a3:bb:32:a5:23:8d:c3:17:b2:fa:90:61:d3:
                    e5:7b:0a:03:b4:6a:70:ed:4f:74:1f:da:ea:d8:7e:
                    21:98:60:79:c8:7d:16:ec:7e:a2:d5:90:66:2a:e0:
                    e9:22:e1:27:bc:1d:8f:1f:84:13:a5:27:43:58:30:
                    e3:d9:0a:26:73:ff:e0:0d:6d:4d:78:f7:cc:07:c0:
                    2e:68:c4:34:3a:e5:cf:9a:1e:cb:5c:be:0f:3b:36:
                    e7:bc:c1:07:a4:3d:06:4c:bd:cc:e0:0c:3b:b2:1e:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:6B:E2:02:43:F3:23:2D:BE:F5:17:DC:F4:74:5A:14:06:9F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cd754c63-ee26-3381-9ca3-74675c3e6876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:75:30:87:1d:57:e5:3c:17:d6:70:cd:32:76:45:ba:53:
         e0:85:6a:2c:e4:ba:60:3b:1d:58:76:91:5f:bd:ca:d5:67:cb:
         1e:8e:e4:66:a7:8e:40:dc:65:6a:05:7b:52:90:6c:fa:45:ee:
         8b:fc:5d:de:ef:b5:97:a6:39:ac:b2:d8:75:25:2d:26:a7:52:
         f7:af:8c:43:a2:82:a9:ce:61:59:c5:01:71:a5:5e:be:40:07:
         45:c7:a7:40:53:ba:39:35:90:76:90:bc:0e:15:e5:b2:5d:8b:
         11:7d:6c:b7:cc:a2:fc:c6:d5:bf:7b:33:d8:d5:8b:d8:f6:3b:
         92:d0:66:1e:ad:1e:ed:5c:a8:d0:0d:0b:29:f5:da:2a:ec:46:
         da:dc:9e:2b:f6:e2:da:ad:46:c1:16:01:60:29:50:06:1f:b3:
         0b:b0:ed:79:4d:cf:c1:89:e3:b7:13:bb:79:b6:0c:2c:41:5e:
         e8:fe:b8:6b:61:73:ec:35:f4:a2:66:b7:1c:d1:1a:37:dd:68:
         93:a6:ba:38:c0:bc:f5:0b:d7:88:9a:f8:46:b1:25:49:7c:a0:
         f2:8c:15:0d:c2:48:44:4e:f5:1b:46:db:29:ca:e3:61:b3:f7:
         b2:b8:4f:d8:df:5f:31:77:3c:1b:5c:58:ad:1f:32:17:75:c3:
         44:27:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:00 2025 by rpki-client