Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a0ba0087-bce6-3707-93f0-de56bd90ff74.roa
File:                     a0ba0087-bce6-3707-93f0-de56bd90ff74.roa (raw, json)
Hash identifier:          S8WXEb0jChLz4aZJTEvvFFTYeK3OsQdcaCVdaZYRaTk=
Subject key identifier:   23:AF:DF:C1:56:88:28:2A:DB:24:03:48:C9:61:10:A0:9F:4B:A5:A1
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584957F3FF37691B61608ED89A00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a0ba0087-bce6-3707-93f0-de56bd90ff74.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        74.121.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:ff:37:69:1b:61:60:8e:d8:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=b8836168-254b-40c7-9140-ae0f5d479ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:5e:c2:47:ea:5b:33:2d:f0:ff:7a:96:eb:
                    62:38:98:68:69:1f:26:b2:57:6e:23:2a:df:c0:f7:
                    6f:03:bd:08:4c:03:b8:eb:49:73:7b:7f:e1:9a:c5:
                    81:5a:c4:d7:3c:14:9a:70:7c:ba:31:23:d7:34:72:
                    15:1b:c9:3f:ef:27:6f:67:4c:a3:b1:46:62:8d:83:
                    10:05:cb:f7:e4:d6:b8:c6:ac:3b:10:b9:42:2a:ab:
                    aa:98:21:1e:45:90:5d:aa:26:31:64:b3:7e:5a:38:
                    1a:6f:8c:3a:77:45:5f:08:35:10:3a:0e:2e:02:80:
                    81:34:1f:7b:42:ca:b5:cf:35:f2:68:ef:b0:52:ae:
                    fc:de:85:8d:d7:4a:fe:02:1f:63:52:3d:aa:58:74:
                    1c:38:a7:82:c4:9a:2f:9f:02:62:c2:3b:15:92:af:
                    13:47:66:89:11:5e:93:26:ff:8f:00:11:7c:68:4d:
                    41:6b:8b:c3:27:ab:31:96:34:d8:e7:bd:12:39:bd:
                    1f:12:f3:53:4d:ce:01:5e:ad:3c:b7:93:0c:ee:ae:
                    c7:ac:36:1f:b0:43:82:1a:a4:4b:2b:bf:65:1c:a3:
                    4d:c5:60:e1:76:09:1f:a7:02:9f:25:ba:7f:59:0f:
                    09:94:38:b2:a7:68:27:e6:72:38:f8:c0:96:d1:23:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AF:DF:C1:56:88:28:2A:DB:24:03:48:C9:61:10:A0:9F:4B:A5:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a0ba0087-bce6-3707-93f0-de56bd90ff74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:29:4f:65:ed:39:9a:44:58:54:9e:39:f2:1c:0c:14:d8:eb:
         7a:eb:bc:2b:ba:bc:56:af:3f:30:97:05:50:a6:61:81:ef:03:
         6d:c7:24:2d:3d:01:37:c0:77:bd:42:96:24:e8:bf:72:b4:ed:
         8b:78:1e:3d:c7:55:11:7b:58:00:36:0d:e5:53:41:bc:e6:9f:
         2e:60:87:e2:3b:c3:91:ab:d7:82:33:aa:41:c1:77:f0:c2:60:
         38:04:25:0a:36:1c:19:11:61:6d:95:40:64:29:79:fd:f0:e5:
         c5:39:71:ac:72:8f:09:cc:c2:bb:48:e4:27:61:0c:97:bb:52:
         86:a7:52:06:56:0a:3b:e8:8e:dd:10:1b:30:a0:c8:8c:7a:97:
         79:26:eb:2f:66:2d:39:88:ae:f7:87:93:dc:32:f4:a2:0b:35:
         cc:db:ef:12:cf:51:df:ee:35:26:74:13:5a:ff:9c:05:65:ba:
         16:78:eb:d9:6c:b7:3c:2b:f3:f6:74:c8:54:d7:8f:3f:c3:d6:
         f3:46:0f:34:3c:1e:50:cf:2a:73:c1:d7:5c:65:18:70:f4:48:
         f5:fe:a6:3f:b9:ab:59:9a:f0:58:95:80:db:70:fa:c3:8a:46:
         76:34:ca:52:87:25:d3:7d:de:2c:1f:15:2f:22:3f:d0:87:83:
         bd:fe:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:09 2025 by rpki-client