Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/b74a141e-dddc-3958-a63a-446a5705b54e.roa
File:                     b74a141e-dddc-3958-a63a-446a5705b54e.roa (raw, json)
Hash identifier:          NLMF+nWH2PuxTAqebTN3RqPDuOQNVXZvZUsg58wDOV8=
Subject key identifier:   46:44:CB:9F:D8:74:3A:C5:E6:34:56:7B:78:CA:21:C6:B6:93:2D:8A
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847C8D9EACD85BE07E4E01C1C60
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/b74a141e-dddc-3958-a63a-446a5705b54e.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     46241
IP address blocks:        204.25.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:ea:cd:85:be:07:e4:e0:1c:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=9df1b06c-6ae9-46bb-9fae-b18a22cdc112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:a0:aa:4f:06:d9:71:19:19:10:ae:68:ee:
                    2d:1a:4b:ca:b3:7f:c0:66:d4:6c:19:27:54:58:d0:
                    93:8f:53:33:9d:04:64:01:4b:43:8f:3c:cb:ea:d8:
                    12:d1:dd:08:29:fb:f4:67:d8:41:01:9c:ed:3b:ca:
                    a0:c4:80:e5:16:5c:48:47:39:36:b1:44:c8:9d:a9:
                    53:d5:08:82:3b:0d:35:10:81:d6:f6:b9:bf:e9:7e:
                    bd:c2:8b:62:ed:4c:b1:a5:e0:00:78:7b:6c:25:5f:
                    bc:2d:c7:28:7b:6f:0b:1c:33:11:43:25:76:2c:40:
                    60:9d:06:fd:57:33:e0:83:cb:ee:c1:2e:e4:84:96:
                    ee:d7:a7:a5:25:17:aa:b6:af:27:44:10:ef:a5:a8:
                    7f:a3:fc:42:b8:f8:64:23:03:f0:d9:fd:5d:be:60:
                    c6:d8:c8:4b:95:46:0f:3b:f8:44:ed:e1:7b:37:a3:
                    53:8c:91:af:e7:2e:36:3b:9f:78:c1:d1:3a:f1:f6:
                    3c:23:c8:54:a2:f6:49:51:8b:ae:c8:6b:ea:58:c6:
                    cf:79:70:31:f7:81:de:4b:aa:b1:86:73:cb:78:9c:
                    b1:ef:88:e7:52:5f:1a:31:95:42:82:f4:a6:13:97:
                    e7:32:fb:2a:4d:bb:b5:cf:a4:a3:f6:12:6d:de:85:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:44:CB:9F:D8:74:3A:C5:E6:34:56:7B:78:CA:21:C6:B6:93:2D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/b74a141e-dddc-3958-a63a-446a5705b54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:79:68:24:3d:ef:39:d0:cb:63:bc:ae:33:6f:bc:24:1c:68:
         39:74:35:cc:4f:e4:51:f9:bd:a9:1c:b5:6b:99:0c:73:dc:0b:
         f0:5a:df:7b:08:3c:3e:70:59:b3:14:dd:06:d1:b0:0c:df:37:
         ef:b6:0a:34:7c:89:c9:49:f5:79:7b:bc:73:cd:5f:de:66:04:
         6b:fb:d7:5b:29:9f:3c:9b:9a:aa:48:87:c8:e4:e6:95:36:61:
         8d:d7:59:72:36:21:41:25:8f:86:5e:90:72:de:09:8a:65:d9:
         c7:16:b0:ef:71:c8:bb:16:23:37:f6:d8:7c:ef:f4:c7:e1:c1:
         c4:a1:b5:20:ae:67:72:22:84:e1:27:8a:e1:8f:71:d8:54:ed:
         24:9a:1d:61:cb:d5:f0:75:d8:f4:ef:21:e9:cf:53:43:d3:0a:
         1a:61:ee:8c:ad:e4:2f:e3:2a:ac:43:c4:c2:6d:9f:58:25:4e:
         ce:9d:3c:2d:aa:d6:5a:1c:77:3a:4c:f6:16:45:92:5f:63:e0:
         5b:48:6a:7c:c0:91:92:3b:64:3e:0c:6b:a9:c7:43:a8:b5:24:
         6a:6f:e0:fc:e9:97:08:3c:98:51:0e:fd:da:d0:ba:35:05:0e:
         1d:22:51:fa:8e:25:1c:8d:42:dc:4c:d6:61:0d:ae:90:91:0b:
         2e:b2:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:03 2024 by rpki-client on console-ams.rpki-client.org