Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3672964f-246b-3043-8b1d-ecab8942ff99.roa
File:                     3672964f-246b-3043-8b1d-ecab8942ff99.roa (raw, json)
Hash identifier:          tqwvj2Ag/s7WDACkASLvCJK/WQ0kh0eR7N4lksbsZUw=
Subject key identifier:   AB:12:E3:08:C5:59:3F:1F:AA:6B:58:16:79:76:85:A1:32:CB:AC:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1358A09DB090C68D87980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3672964f-246b-3043-8b1d-ecab8942ff99.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.74.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:35:8a:09:db:09:0c:68:d8:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=16a75d9d-666a-4121-a2d1-980935b931cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:2b:82:a6:ab:60:c8:ed:52:4d:0f:18:99:
                    18:68:06:6a:29:d5:50:e3:21:69:ed:bd:06:25:ed:
                    34:f1:b5:22:be:a8:52:d7:ee:10:74:df:48:57:df:
                    c3:9c:66:5d:4c:07:08:b5:36:7f:07:b4:c4:03:2e:
                    cd:ec:a0:04:dd:af:ed:75:1f:54:ae:6e:be:de:af:
                    60:44:aa:a1:fa:b7:0b:65:b6:f6:07:72:23:38:c8:
                    74:5c:eb:ef:cc:22:a9:e0:98:0e:0d:13:67:c1:18:
                    de:8e:8b:57:2b:01:46:31:ba:76:96:61:b9:1d:ea:
                    70:f8:12:34:9a:06:7d:bc:29:ca:4c:49:d9:d7:31:
                    a1:1a:7f:d1:8c:c7:de:e9:ed:3e:92:6f:20:27:4e:
                    f0:37:45:94:63:cf:45:7b:41:eb:8b:1a:da:40:68:
                    d1:00:7d:e7:dd:d7:d0:c6:21:25:76:aa:1e:c6:f4:
                    20:cb:33:6b:fe:f6:60:93:e3:40:0b:93:d1:91:de:
                    fa:12:93:81:0f:db:07:1d:18:f1:b1:4b:00:37:c5:
                    ea:39:fd:27:a2:91:5a:b3:d3:2a:b8:f3:d4:b4:6a:
                    d0:b0:17:eb:09:f1:db:ac:89:b6:87:20:20:6d:44:
                    f8:cd:5c:bf:0e:8d:97:82:a7:e9:94:58:da:94:d8:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:12:E3:08:C5:59:3F:1F:AA:6B:58:16:79:76:85:A1:32:CB:AC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3672964f-246b-3043-8b1d-ecab8942ff99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:5c:08:2e:42:34:b6:a7:4c:5b:d7:e9:d4:f6:65:32:1e:1d:
         4c:e7:4f:ca:08:6a:bc:d6:3f:37:24:2b:56:05:11:14:36:70:
         ea:06:43:83:b9:5d:80:3b:bb:70:a7:a7:1e:7e:de:ec:0a:72:
         cd:bb:52:fd:53:47:89:eb:35:e4:30:56:93:8c:23:be:04:ad:
         37:3c:8c:c7:bc:94:cc:22:42:bc:ba:1e:34:c6:fc:5c:5d:7e:
         cd:80:36:e8:cd:64:f7:0e:01:99:2e:3a:0d:1a:67:b0:83:1e:
         b5:08:fa:4c:1b:19:23:1b:ac:8f:fb:f0:0c:a7:8d:fc:ca:0e:
         e2:07:17:e2:ce:56:ad:fa:4d:39:8f:21:2a:06:4b:21:f2:d8:
         83:35:ff:94:83:19:74:b5:09:74:91:19:a3:cf:72:1f:9d:21:
         dd:ad:88:9d:69:70:9d:9a:33:8b:ab:dd:5c:39:fd:03:6b:04:
         23:a5:a4:e6:2f:c9:1e:db:d5:1d:ac:f4:84:ce:41:d3:0c:cf:
         74:c7:3b:ba:5a:b8:a0:15:1e:8e:52:a6:82:71:7b:79:34:1e:
         6a:48:b3:c2:f9:59:4c:d9:28:fb:b7:72:05:6e:36:49:7e:0e:
         33:14:96:ba:84:8c:7e:09:31:62:8f:19:c9:d5:48:2d:c6:53:
         a4:48:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:42:48 2025 by rpki-client