Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa
File:                     3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa (raw, json)
Hash identifier:          1HOXjzuWI1T0Z9+0Sh61mGTsPK1PAWxYP/NZf6HslRc=
Subject key identifier:   64:F9:72:1D:DF:0A:0A:E4:F7:FF:97:13:C0:77:A5:92:56:A7:37:F6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F4B508C9A2DF9C391A2A4900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa
Signing time:             Fri 21 Feb 2025 11:48:53 +0000
ROA not before:           Fri 21 Feb 2025 11:48:53 +0000
ROA not after:            Thu 22 May 2025 10:48:53 +0000
asID:                     30036
IP address blocks:        74.84.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:b5:08:c9:a2:df:9c:39:1a:2a:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 21 11:48:53 2025 GMT
            Not After : May 22 10:48:53 2025 GMT
        Subject: CN=94f654d3-d8a9-4ea2-80a8-76c5e5a1d2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:2d:2e:db:d6:52:98:52:89:5c:30:b2:01:
                    19:74:46:fb:17:a2:cc:e3:a5:61:57:58:97:fb:d0:
                    b8:f8:ce:84:7a:1e:49:d2:ca:09:bc:a5:b7:d7:c7:
                    63:9d:ec:d7:d9:35:d8:91:f1:dd:99:d7:11:b2:2e:
                    c1:d6:de:fd:b8:16:f7:f5:e5:c6:ab:80:41:c2:4c:
                    22:b6:22:4d:b1:10:58:82:67:16:cd:2e:b0:f6:9c:
                    54:ab:2d:53:75:ce:d9:1e:91:74:fd:dd:23:d3:db:
                    80:ed:09:2e:aa:a3:bc:a6:00:d3:19:03:72:c2:02:
                    77:45:87:69:e4:c5:66:69:76:f0:03:c2:b5:3c:57:
                    1a:32:2b:66:65:9a:8e:de:1b:13:4f:c3:36:c9:3c:
                    43:f9:fd:68:3a:5d:03:50:03:27:87:d2:bc:ba:a1:
                    7e:00:f6:52:25:6b:53:9f:df:65:d7:92:a2:48:8f:
                    d0:db:c3:f0:d8:8e:e3:78:38:bf:1a:9c:18:16:7c:
                    83:c4:f6:41:43:77:99:65:fc:00:03:35:2d:02:f2:
                    39:2c:1f:92:a3:61:11:b0:23:a6:35:cc:c3:56:3c:
                    93:3c:37:6e:f0:66:ca:6a:1d:40:74:54:c8:dc:f2:
                    c5:66:32:52:37:5f:03:66:b0:7e:5c:f6:06:cb:bd:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F9:72:1D:DF:0A:0A:E4:F7:FF:97:13:C0:77:A5:92:56:A7:37:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f3:9b:3d:0f:64:f1:ec:8c:0a:ab:8c:cb:f2:7f:c9:da:35:
         d1:ff:8e:10:b7:12:80:fc:cc:b5:fd:35:a7:98:61:d9:35:f8:
         fa:03:41:da:ff:62:e8:41:04:0f:fa:38:6a:f1:ab:c1:c9:ff:
         61:b7:37:f5:63:59:5c:50:f4:27:33:dc:19:bd:93:42:8c:46:
         01:1c:93:90:32:5d:17:9e:68:27:bb:5f:08:cc:90:6f:87:ad:
         52:37:21:85:46:97:3b:ca:89:c3:03:aa:6a:90:82:81:1c:bf:
         b7:cd:13:e0:a4:e2:5b:6c:4d:4f:85:52:5a:71:15:5a:1e:9d:
         67:53:ff:dc:72:43:cb:5c:56:b8:8a:a0:3a:7a:85:30:b1:5c:
         a3:13:01:90:f8:ad:79:b7:dd:a0:db:e6:a0:97:61:52:cf:27:
         3f:97:77:b2:20:37:3b:c5:39:19:4b:dd:9b:e3:46:03:a6:d9:
         5d:27:d1:51:d4:ab:6c:72:0f:7e:32:4a:8d:70:a3:d9:a8:fd:
         e6:78:3e:d9:a0:a5:f9:09:e7:79:98:99:ff:0d:16:c0:e1:98:
         c0:e0:a3:cd:b1:0c:14:77:90:f2:0f:6a:ab:f7:c8:d6:46:45:
         20:c0:c2:3b:a1:cb:c8:9f:eb:04:16:41:26:95:44:46:a6:b7:
         8a:d6:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:31 2025 by rpki-client