Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2ca5064-8e65-3811-9e99-9d5821b84f9e.roa
File:                     a2ca5064-8e65-3811-9e99-9d5821b84f9e.roa (raw, json)
Hash identifier:          r4mbBNe4dkUbLSd9goR0xdRsR8hx8QXa9r9v//0f4O8=
Subject key identifier:   31:D0:81:74:C3:E5:97:2C:5A:01:08:13:0C:8F:20:22:1B:94:B3:9B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20F3CC61A7D74EBE7D87B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2ca5064-8e65-3811-9e99-9d5821b84f9e.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397213
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:f3:cc:61:a7:d7:4e:be:7d:87:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=5464080f-d4cf-4686-aefe-90e84ad9682b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:8a:2e:7e:b7:08:6c:6e:d3:f1:61:c6:fb:
                    6b:ff:30:f9:fd:06:3d:d8:32:ca:da:73:6d:bf:95:
                    fd:35:ac:12:97:c1:0d:ee:7d:1e:01:92:30:79:c6:
                    b0:f0:c8:b4:11:4d:83:73:6b:42:24:1b:72:4d:02:
                    16:16:d6:c4:ac:68:59:9b:1b:1b:1d:ba:bd:76:e5:
                    57:2a:45:e7:d2:0b:d0:51:63:9b:ab:8f:03:45:e5:
                    5d:19:7c:4a:ac:79:27:4b:2e:be:fa:c2:73:80:86:
                    49:ad:12:ff:4f:e9:5d:04:9b:02:b2:0c:01:c9:99:
                    5e:c4:a4:28:13:5b:8c:a8:f2:8f:11:b6:33:d4:3f:
                    25:db:ea:70:7a:7d:3b:15:23:ce:00:88:1f:56:7c:
                    46:f4:2d:71:82:4a:75:78:0e:4d:77:ad:63:ed:51:
                    6a:be:9c:11:97:27:18:09:2a:f7:ac:b2:66:5b:fa:
                    49:e7:d8:9a:60:4e:7d:7b:0a:7d:43:3e:5b:48:f9:
                    73:da:de:05:98:b1:d8:26:74:dd:9c:2a:f1:c4:b8:
                    8a:61:63:8e:e5:4e:ae:d4:3b:1d:3b:29:b9:2b:2c:
                    f4:2f:92:d7:e8:60:b6:f9:07:d7:af:90:ea:2f:21:
                    e9:f0:11:7f:6b:e1:98:be:61:d9:18:47:ee:a1:ee:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D0:81:74:C3:E5:97:2C:5A:01:08:13:0C:8F:20:22:1B:94:B3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2ca5064-8e65-3811-9e99-9d5821b84f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:20:77:a5:e0:86:93:dd:e4:7f:38:5e:40:05:e9:40:c4:
         ad:7b:b8:58:7b:c3:3e:a3:21:2f:18:d1:9e:dd:b3:a8:3b:67:
         e2:50:04:2a:d7:d4:33:dc:60:38:53:59:4a:92:cb:da:fc:06:
         55:b1:ba:c7:98:bb:79:1c:fb:52:da:8c:e3:a1:c9:52:42:b8:
         39:88:5b:a8:ea:0c:fe:6d:f1:e1:a6:0d:5b:73:e6:49:53:a4:
         66:ad:7b:bf:f5:d5:25:6e:67:9d:fc:52:56:d0:31:8e:96:87:
         e2:43:9c:01:8f:4f:63:72:cc:db:2e:dc:2a:a1:59:8a:41:43:
         ee:b1:f1:45:ef:cb:a7:e5:ad:80:d6:0a:c9:74:f4:98:07:b7:
         91:f5:3b:32:51:75:5a:40:5e:cc:97:10:6b:cf:8e:f9:22:3e:
         a9:97:58:36:83:c0:bb:38:5b:cf:46:ed:a9:db:9e:b2:f3:b2:
         25:81:44:40:2b:98:78:85:73:eb:2d:28:9d:fe:4c:49:73:62:
         78:4f:f5:a4:94:f9:a8:cb:d9:9a:55:f0:e6:8c:fa:97:90:f3:
         86:68:e7:b8:d4:d0:12:4d:02:09:fc:29:a2:fb:0d:55:71:fe:
         2b:dd:c5:07:b1:6a:88:05:fa:c8:f2:49:dd:95:e4:a4:9f:aa:
         16:70:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:45 2025 by rpki-client