Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d114f5-1b74-3bef-9f7f-87b0ceba09a2.roa
File:                     03d114f5-1b74-3bef-9f7f-87b0ceba09a2.roa (raw, json)
Hash identifier:          6so0D6E3RFGDGBQgKcAswVB94iIQCQ5NfApuVMynHR8=
Subject key identifier:   A9:5D:D7:0D:8C:D6:29:C2:D8:C3:48:D0:8E:D8:DC:57:3A:99:E3:A2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858489076008D4DE4F878D2B2846E
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d114f5-1b74-3bef-9f7f-87b0ceba09a2.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397228
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:00:8d:4d:e4:f8:78:d2:b2:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=37bcf734-e955-47ad-a878-bbea1995de5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:31:c4:44:28:7f:25:ec:3f:32:1a:d4:ac:
                    90:80:97:46:49:b2:bc:83:16:4a:ad:5e:f1:c2:0d:
                    e3:c7:c6:38:d7:7b:06:c1:f3:d2:38:70:cf:25:88:
                    f7:70:17:b4:97:18:69:9c:4a:a1:67:71:0e:f6:48:
                    a0:30:0d:4a:e0:72:2f:95:93:60:a7:8e:0e:4a:8b:
                    8e:05:0d:c0:53:8e:88:54:39:fe:d2:37:f4:b7:b0:
                    d5:fa:22:e5:1b:35:85:73:b8:46:e6:ce:4e:f8:e3:
                    06:fa:e3:7a:d0:8f:e3:6f:83:50:be:11:8a:0c:f8:
                    28:b5:fd:c8:a5:65:d6:8d:c4:99:c1:21:07:34:8f:
                    21:bc:7a:13:8c:7c:6f:e5:e3:68:dc:0f:0b:a3:c4:
                    34:44:9f:14:7f:8c:57:4c:cc:9c:b1:79:d8:96:32:
                    6b:84:31:07:95:78:32:61:4e:71:60:48:0f:9c:3b:
                    ae:07:e2:d3:11:ed:40:ef:33:c7:bf:3c:25:fe:99:
                    c2:be:30:08:bc:fb:72:49:bb:41:23:d9:b3:eb:f9:
                    6c:52:4a:49:01:65:61:24:6d:24:89:da:16:fd:5b:
                    7a:93:11:36:c4:14:57:fc:68:25:af:c8:33:9d:36:
                    e0:5c:26:13:68:c8:5a:fb:2d:97:d3:e5:5c:f6:8d:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5D:D7:0D:8C:D6:29:C2:D8:C3:48:D0:8E:D8:DC:57:3A:99:E3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d114f5-1b74-3bef-9f7f-87b0ceba09a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:7c:06:2d:dd:0b:cf:a5:e2:7a:ef:dd:dd:90:b2:e9:58:
         08:ad:cb:f2:00:dc:c9:bf:1c:12:17:35:83:3b:67:3b:d2:a5:
         0d:ee:90:9d:de:e0:93:20:75:e7:b2:76:24:87:70:13:2e:46:
         7a:d9:77:9b:4b:5a:5a:92:22:84:d3:44:73:6c:77:be:7d:e8:
         9a:ae:94:86:f4:f2:4f:24:72:c4:0d:10:ec:d9:42:76:db:9f:
         c5:88:39:ed:d2:ed:0f:b2:5c:11:d1:7b:fd:29:70:da:18:43:
         64:bb:80:81:1a:d0:3f:bf:18:4b:30:a0:03:be:a7:20:2a:8a:
         b0:3d:00:71:77:b8:e8:d5:c7:b6:0a:c0:88:c6:e3:d0:93:f0:
         89:f0:2c:06:7f:03:6a:0c:bf:5a:3c:c8:72:83:67:9d:d0:9c:
         a4:33:92:05:ad:93:90:e5:11:1a:f1:93:9c:77:62:e6:1c:53:
         e1:3a:48:94:e2:9d:47:6d:68:ac:d5:36:5e:4b:9a:48:fa:1a:
         bb:5e:6f:10:c7:c3:f5:4d:72:bc:d7:4f:f6:5d:cb:13:a4:67:
         f5:9e:2e:1f:f4:99:cb:98:af:69:95:3f:f1:58:39:45:13:d1:
         49:1b:b5:79:38:2c:93:9f:0f:be:44:ba:06:5b:d9:e2:2f:d4:
         bc:35:7a:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgCNTeT4eNKyhG4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MzdiY2Y3MzQtZTk1NS00N2FkLWE4NzgtYmJlYTE5OTVkZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7kxxEQofyXsPzIa1KyQgJdGSbK8gxZKrV7x
wg3jx8Y413sGwfPSOHDPJYj3cBe0lxhpnEqhZ3EO9kigMA1K4HIvlZNgp44OSouO
BQ3AU46IVDn+0jf0t7DV+iLlGzWFc7hG5s5O+OMG+uN60I/jb4NQvhGKDPgotf3I
pWXWjcSZwSEHNI8hvHoTjHxv5eNo3A8Lo8Q0RJ8Uf4xXTMycsXnYljJrhDEHlXgy
YU5xYEgPnDuuB+LTEe1A7zPHvzwl/pnCvjAIvPtySbtBI9mz6/lsUkpJAWVhJG0k
idoW/Vt6kxE2xBRX/Gglr8gznTbgXCYTaMha+y2X0+Vc9o24PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKld1w2M1inC2MNI0I7Y3Fc6meOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDNkMTE0ZjUtMWI3NC0z
YmVmLTlmN2YtODdiMGNlYmEwOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc7fAYt3QvPpeJ6793dkLLpWAity/IA3Mm/HBIXNYM7ZzvSpQ3ukJ3e
4JMgdeeydiSHcBMuRnrZd5tLWlqSIoTTRHNsd7596JqulIb08k8kcsQNEOzZQnbb
n8WIOe3S7Q+yXBHRe/0pcNoYQ2S7gIEa0D+/GEswoAO+pyAqirA9AHF3uOjVx7YK
wIjG49CT8InwLAZ/A2oMv1o8yHKDZ53QnKQzkgWtk5DlERrxk5x3YuYcU+E6SJTi
nUdtaKzVNl5Lmkj6GrtebxDHw/VNcrzXT/ZdyxOkZ/WeLh/0mcuYr2mVP/FYOUUT
0UkbtXk4LJOfD75EugZb2eIv1Lw1ejA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:39 2025 by rpki-client