Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/fa91644c-daaa-350f-b926-7f9adf0e0c50.roa
File:                     fa91644c-daaa-350f-b926-7f9adf0e0c50.roa (raw, json)
Hash identifier:          hjF9cvh88CFRDMq1rVPnrkoUgm6h7bR2gJ7RB9aVlRA=
Subject key identifier:   4A:2E:D0:1A:5F:00:03:41:5E:5C:F4:F1:6D:D1:87:DF:E8:31:DA:55
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285848E16BE65412B3E9B5DEAA1870
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/fa91644c-daaa-350f-b926-7f9adf0e0c50.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     42
IP address blocks:        74.80.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e6:54:12:b3:e9:b5:de:aa:18:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=ef43f9d7-d230-4910-9a1b-fb4d970fbed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:f4:34:b6:3b:48:7b:d9:c6:0e:b1:fe:55:
                    be:d9:63:ec:ff:e1:f2:ab:99:72:65:2d:d2:f2:02:
                    cb:d6:5b:fb:4d:bd:ee:20:46:c9:ec:01:c7:fd:3d:
                    ad:08:30:36:3a:ce:ee:1e:01:1f:25:34:67:30:9a:
                    3f:e0:a5:ae:39:08:78:46:e7:9d:0e:47:a2:5f:34:
                    9b:22:ff:cd:f6:8c:d7:ce:a8:1b:2f:ee:52:6b:69:
                    51:7c:fa:c7:eb:6c:98:ad:36:a5:7a:06:bb:ab:32:
                    e0:aa:4c:b5:ad:ca:e2:53:8a:86:26:18:4e:ef:52:
                    13:f9:37:6d:f8:45:f8:59:17:38:46:94:79:16:0d:
                    f7:f2:72:66:c5:e6:09:48:1d:92:9d:17:19:d6:63:
                    45:ab:db:a8:e6:ae:c2:90:c8:70:50:36:92:0a:5f:
                    0b:31:7f:0c:74:8b:ff:0c:e5:2a:bf:88:01:f2:86:
                    7d:3f:4a:6a:43:30:22:30:8c:97:b4:c6:e7:25:a8:
                    ad:cb:2c:52:5e:29:69:a2:b5:84:6d:ab:8d:6d:d6:
                    34:a4:63:81:6d:92:5a:36:d9:18:d2:8e:9c:a1:81:
                    27:b5:03:ba:02:8f:fb:40:62:6e:73:20:24:77:19:
                    f3:1a:d6:ae:c4:e7:f7:ba:a0:83:d0:72:ef:8d:2c:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:D0:1A:5F:00:03:41:5E:5C:F4:F1:6D:D1:87:DF:E8:31:DA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/fa91644c-daaa-350f-b926-7f9adf0e0c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:b8:c1:ad:1e:0a:45:0f:82:4a:6c:8e:2b:b7:a5:70:1b:
         e7:93:44:f7:d9:31:3e:ac:ca:21:c1:7e:68:b2:8a:c1:8a:99:
         1f:5b:92:ab:40:6a:3a:1c:ac:bd:63:ea:5a:c2:31:ac:e6:51:
         0e:f0:93:9a:c0:b9:c6:4f:a2:6d:d7:cb:54:be:d2:82:eb:78:
         ad:12:cc:0d:1f:5d:a7:1c:8a:9f:0f:8d:0b:ca:c7:b0:e2:61:
         0a:e6:c2:60:b4:d8:85:57:6f:53:e7:89:97:53:f9:e4:3e:10:
         68:b6:c5:4d:ca:28:15:f9:22:3a:33:8b:b6:d4:9b:09:75:ba:
         ca:7e:ad:d1:ec:6a:38:f2:3d:7b:2b:89:da:b5:19:73:bc:1f:
         cb:8c:da:e4:48:a0:c4:ca:56:9b:49:b9:8a:d6:bb:1c:6a:d4:
         88:92:53:22:b5:cc:1e:be:1f:29:47:d2:df:8b:ad:ba:40:89:
         66:db:84:f2:87:e8:29:6d:46:db:05:39:30:0a:01:fb:9e:6c:
         fa:f0:bb:f4:1c:3c:a7:87:1a:b2:c9:cc:9f:39:a7:5f:f8:6c:
         1b:fc:47:e8:fe:d0:c4:2e:d6:bb:ff:a9:7a:2b:e7:56:7d:32:
         54:9a:bd:3a:9e:d4:0b:b1:f9:e7:b2:57:c8:11:16:01:73:ed:
         c1:64:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:13 2025 by rpki-client