Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa
File:                     6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa (raw, json)
Hash identifier:          xBUG7nzq/HzEIR0yhUNU1F5sp+kqaPLYHzr4GjRIiAU=
Subject key identifier:   FC:49:38:BE:97:2D:CF:AA:FB:85:61:F6:67:D2:F5:35:14:31:0D:C7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20FD26DE6D9C75BEC2E080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397241
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:fd:26:de:6d:9c:75:be:c2:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=b9ac6468-4dc8-4c59-8f4e-e32086b8f413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:51:0d:c8:59:23:5a:ac:c5:f3:ca:11:57:
                    6f:49:92:ab:ae:38:82:74:c7:7b:f8:f7:06:c5:90:
                    13:ad:b4:0b:2c:00:43:96:3b:d9:f1:da:46:26:9a:
                    83:e4:08:87:a6:95:56:83:2c:af:c5:57:ba:16:d3:
                    65:49:b3:64:7b:0d:9a:6a:15:58:39:e0:c5:76:36:
                    41:2c:50:69:12:f0:4d:e6:d1:39:07:0b:60:c0:c0:
                    e9:0a:b6:c8:fc:12:c5:03:e5:1f:3e:61:b0:f6:60:
                    f0:02:3d:3a:4e:65:cd:11:a7:cd:7a:b2:f5:de:13:
                    59:43:ee:e3:b9:6f:61:aa:12:dc:69:b4:72:b8:9d:
                    9d:a0:36:d0:d5:4a:66:d7:38:46:d7:99:2a:fe:d2:
                    79:8e:b0:a6:56:69:a2:90:2a:7c:8e:2e:64:3d:a7:
                    26:61:d3:0f:76:19:4d:65:43:33:df:ca:0b:98:1a:
                    fb:ac:fd:d2:e8:e0:88:a8:0f:e2:cd:6e:19:58:81:
                    a7:38:71:50:4a:14:fd:34:db:a8:0a:26:bd:71:dc:
                    64:dc:1e:10:fa:cf:c4:57:05:33:00:2d:6d:ef:41:
                    f0:32:a8:13:6c:12:68:ff:f4:f2:85:20:6c:3c:56:
                    a5:4e:9e:2a:81:d4:2f:12:3f:f4:a6:b2:49:81:7a:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:49:38:BE:97:2D:CF:AA:FB:85:61:F6:67:D2:F5:35:14:31:0D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:7f:31:de:58:4f:0a:84:a0:d2:93:7c:c4:c7:d3:16:09:
         c2:b2:98:ad:f9:dc:de:00:9b:1f:3e:3a:20:81:f1:26:ec:97:
         2c:99:54:1a:a6:4c:ef:1e:bc:8f:20:3a:1f:cc:f0:bf:56:d6:
         eb:12:e2:34:c4:3b:df:e6:65:2c:ca:72:de:3a:24:65:b7:82:
         b0:23:26:ce:7b:af:1f:50:2d:a6:31:16:c5:9a:93:4a:96:cb:
         44:71:9c:6a:2f:da:0f:90:fa:32:b3:75:50:c4:cd:11:33:e2:
         34:1d:5f:16:02:4c:78:9d:6d:02:57:36:3a:f3:cc:90:ff:4e:
         ef:0c:ac:7e:61:53:ac:40:36:98:11:ba:cb:aa:f9:81:5e:a3:
         4a:a8:24:87:8e:c4:be:56:0e:46:ee:29:61:96:44:30:b8:61:
         25:56:d7:71:be:d7:18:1b:00:84:5e:f8:92:04:33:61:80:81:
         bf:8c:de:cc:fa:d7:a4:4e:33:a0:8c:3b:d9:97:4a:3c:87:b3:
         7e:d6:0f:14:aa:41:55:13:fb:2e:03:f3:63:b6:01:4e:96:d5:
         ee:94:57:27:19:d0:4c:7e:56:4b:9a:a4:0d:42:0b:58:b2:a6:
         25:94:3b:32:67:46:27:97:ee:06:50:f0:ff:24:40:f8:dc:27:
         7c:88:b0:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP0m3m2cdb7C4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
YjlhYzY0NjgtNGRjOC00YzU5LThmNGUtZTMyMDg2YjhmNDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWlRDchZI1qsxfPKEVdvSZKrrjiCdMd7+PcG
xZATrbQLLABDljvZ8dpGJpqD5AiHppVWgyyvxVe6FtNlSbNkew2aahVYOeDFdjZB
LFBpEvBN5tE5BwtgwMDpCrbI/BLFA+UfPmGw9mDwAj06TmXNEafNerL13hNZQ+7j
uW9hqhLcabRyuJ2doDbQ1Upm1zhG15kq/tJ5jrCmVmmikCp8ji5kPacmYdMPdhlN
ZUMz38oLmBr7rP3S6OCIqA/izW4ZWIGnOHFQShT9NNuoCia9cdxk3B4Q+s/EVwUz
AC1t70HwMqgTbBJo//TyhSBsPFalTp4qgdQvEj/0prJJgXoEjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxJOL6XLc+q+4Vh9mfS9TUUMQ3HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmU2NzAwY2ItMDRlMi0z
ZDIzLWIyNDAtYzhmM2RlZTRjNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABotfzHeWE8KhKDSk3zEx9MWCcKymK353N4Amx8+OiCB8SbslyyZVBqm
TO8evI8gOh/M8L9W1usS4jTEO9/mZSzKct46JGW3grAjJs57rx9QLaYxFsWak0qW
y0RxnGov2g+Q+jKzdVDEzREz4jQdXxYCTHidbQJXNjrzzJD/Tu8MrH5hU6xANpgR
usuq+YFeo0qoJIeOxL5WDkbuKWGWRDC4YSVW13G+1xgbAIRe+JIEM2GAgb+M3sz6
16ROM6CMO9mXSjyHs37WDxSqQVUT+y4D82O2AU6W1e6UVycZ0Ex+VkuapA1CC1iy
piWUOzJnRieX7gZQ8P8kQPjcJ3yIsOI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:23 2025 by rpki-client