Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/bec2738a-2eee-3775-b4e1-182c7db79ca4.roa
File:                     bec2738a-2eee-3775-b4e1-182c7db79ca4.roa (raw, json)
Hash identifier:          o0d72ObaFZ2a54BoP//1sWvoF5YBHt8j4jbi2bXGWik=
Subject key identifier:   32:A9:2C:82:1E:14:56:21:BF:9C:16:3A:6E:9B:C8:76:4F:40:3D:6B
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285848DA70FC1DC095B59AD7F509C0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/bec2738a-2eee-3775-b4e1-182c7db79ca4.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     174
IP address blocks:        207.174.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fc:1d:c0:95:b5:9a:d7:f5:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=038318f5-284f-4139-b6b3-d5468156f114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:ea:56:b7:3a:85:47:bb:aa:52:5a:29:65:
                    c8:eb:b0:1d:6c:09:89:e5:c2:65:e2:3b:25:ea:df:
                    33:af:b9:df:fc:8d:1a:c7:5a:df:12:58:99:6a:c8:
                    72:81:46:50:ed:68:0c:b5:18:36:68:79:b4:64:7d:
                    61:f7:90:db:68:02:cd:7d:ce:a6:b9:f2:96:25:2d:
                    2a:52:74:7d:5e:6f:b8:30:3f:9f:3a:54:ff:25:16:
                    fb:5f:99:7b:15:a9:98:93:4a:68:ed:dc:a7:c4:0f:
                    70:9d:d1:26:59:6c:24:d6:71:0d:0a:d3:10:2c:82:
                    2e:76:f7:c3:68:5d:63:c4:da:10:03:f4:49:40:3a:
                    97:94:a3:28:82:73:e6:d9:d3:c3:28:c5:4e:f8:11:
                    39:e8:e8:08:25:03:f6:02:66:39:45:f6:ab:9d:ab:
                    33:9d:22:c9:5a:c1:d4:92:47:4b:c6:2a:eb:51:4c:
                    ed:87:69:32:51:54:48:33:62:25:1a:7a:8d:fe:44:
                    5a:8c:83:d1:2a:1f:9b:95:48:5f:a9:31:ca:bd:01:
                    70:75:35:d0:95:8a:82:d8:98:22:ef:df:4b:b2:48:
                    03:a9:ef:a5:7e:c2:21:6a:58:b1:3c:2a:0c:9e:5b:
                    ae:1a:c8:f6:89:a9:b6:e9:51:0e:c3:14:45:c4:d4:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A9:2C:82:1E:14:56:21:BF:9C:16:3A:6E:9B:C8:76:4F:40:3D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/bec2738a-2eee-3775-b4e1-182c7db79ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0d:92:f2:88:9a:47:c4:38:a9:30:33:46:55:6e:3a:15:d8:
         8a:30:03:02:d0:de:3d:3f:b0:28:21:a1:10:c7:0a:60:96:07:
         61:6a:90:e4:b2:a4:e2:4a:31:2b:33:a0:e6:b7:35:4d:d2:ec:
         ce:6d:68:82:e1:ea:88:ec:b6:59:f9:58:1a:2c:72:d2:fd:bb:
         7a:b9:b9:05:ef:66:f7:37:e2:45:19:63:a3:9a:8e:17:b8:3b:
         1f:cc:0e:fd:7e:21:1a:5f:b2:ff:47:0d:70:a6:c1:42:aa:35:
         66:31:f6:49:40:f8:4f:56:e7:10:0e:91:c7:63:06:fc:e5:1a:
         41:50:a8:09:f7:a9:88:58:4b:1e:32:3b:d0:e8:38:71:20:51:
         aa:95:1c:db:3f:5b:56:c4:82:e4:59:17:80:7b:2f:fb:4a:1d:
         3a:35:82:e7:8b:53:7e:98:b0:96:08:2a:b0:62:98:8b:fd:39:
         7b:bf:dd:2d:3c:d4:fd:f2:02:b2:2e:e9:3c:22:52:25:c8:e2:
         01:52:f1:3b:b3:16:45:9c:7c:1e:30:a0:9a:7b:fb:47:66:a7:
         b9:a9:5e:77:e2:df:76:ea:14:1d:70:a8:e3:38:07:56:f7:26:
         e3:72:00:06:e9:71:bc:10:b4:49:1a:65:8a:66:c4:ce:a7:d3:
         c2:31:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:57 2025 by rpki-client