Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa
File:                     4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa (raw, json)
Hash identifier:          USuR6fYWQCUJkGTdRdmHPYXNPjWDUtbGTPHD5WC1SN0=
Subject key identifier:   54:76:2E:D1:3A:0B:07:E1:63:2D:92:DC:A6:6B:77:A3:BA:8A:09:79
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A99655285D8A1041A20DDB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397233
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:55:28:5d:8a:10:41:a2:0d:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=9296d3a2-f0ad-482f-b5a6-a9ca2e2fa02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:d8:95:77:dd:cb:6f:d4:65:33:4b:c9:77:
                    ec:53:e2:79:9c:2e:a0:37:8c:b9:87:13:de:71:09:
                    d4:1b:f2:8f:43:98:01:bd:40:24:66:b0:1b:53:4a:
                    aa:28:c1:2c:02:52:40:d4:be:97:ea:76:0c:cf:46:
                    e9:51:b3:67:1f:ad:ae:f1:bb:71:83:e9:59:24:04:
                    b8:46:32:94:21:d6:5e:01:46:53:77:59:35:63:7d:
                    9d:76:e2:55:2d:c2:9a:c1:f2:8d:68:61:e1:61:95:
                    1d:fe:3c:56:98:0b:9d:bd:b1:05:e1:e9:2e:ec:37:
                    4a:1b:64:cd:0d:ef:7d:12:17:6f:04:c9:ee:ee:0a:
                    f3:cc:01:ac:1a:0c:6e:a4:a0:ce:c3:4b:07:c5:52:
                    f9:01:3f:75:06:56:47:fe:44:43:4a:a9:93:37:e6:
                    4e:c3:55:53:c8:12:76:19:2e:0b:22:1c:d8:e9:56:
                    67:9a:9e:5a:b8:ce:18:47:68:c3:2a:cc:6b:32:8a:
                    83:56:00:b6:10:24:87:f6:4a:f2:fb:06:63:93:05:
                    75:16:f0:f9:4f:53:37:57:29:e9:ab:7b:37:75:2b:
                    19:19:65:78:0c:18:da:3d:85:c0:0f:45:6d:42:92:
                    c4:1f:4e:f5:63:df:0f:89:36:6e:ea:08:1f:ce:11:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:76:2E:D1:3A:0B:07:E1:63:2D:92:DC:A6:6B:77:A3:BA:8A:09:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:4d:2e:cc:86:73:ac:31:ed:8b:89:f6:46:eb:e3:ff:92:
         c3:a1:81:77:64:02:80:31:69:68:b7:71:d8:39:ff:75:09:7b:
         f3:fb:ef:c9:4d:5b:55:4c:0e:5d:8a:47:76:ae:39:77:d9:63:
         25:92:64:27:51:96:a2:42:39:43:0f:4e:bf:d7:23:43:94:e6:
         26:71:73:0d:ed:d4:9c:e5:46:3d:c3:85:60:1d:db:36:99:25:
         04:fb:d0:1d:ec:3c:27:e6:e1:9b:cc:ad:35:83:d3:d7:c8:4d:
         a5:c3:b0:a5:52:9d:f5:06:39:22:1f:d0:6c:9d:43:84:ef:c4:
         5a:ca:d4:b4:16:c7:fd:e6:1b:1b:14:73:d3:71:e9:05:be:ca:
         12:99:17:26:e5:1c:8f:4a:c0:5e:7c:11:ce:b1:67:19:7d:1d:
         0c:dc:0b:ff:25:5e:ce:2b:9d:98:e8:c0:c1:6c:90:21:ed:1a:
         6c:93:f5:a8:75:10:e9:f3:d8:50:79:6f:86:b3:d3:e9:b0:c6:
         9f:1d:1d:6b:5e:8f:06:a0:0d:95:e3:b6:c1:2e:ee:ac:b1:f6:
         6f:81:bb:70:67:ee:9a:a0:15:1c:99:c6:18:8b:cd:fb:79:fd:
         55:dd:11:14:46:16:ea:66:4b:5d:6c:0a:a3:e1:02:41:96:ae:
         47:62:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:55 2025 by rpki-client