Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/58188d45-c0c5-3c27-a76c-dcea21339342.roa
File:                     58188d45-c0c5-3c27-a76c-dcea21339342.roa (raw, json)
Hash identifier:          nMudKEYKky/2V6xSY+LQQSJqk/e65rR0XN5xpGVWneI=
Subject key identifier:   FC:E8:DE:57:02:44:A1:6E:BB:DE:F5:9C:2A:51:BE:46:1D:F0:A3:35
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858491AA6B9A50F4117AB8371B680
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/58188d45-c0c5-3c27-a76c-dcea21339342.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     394708
IP address blocks:        74.126.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b9:a5:0f:41:17:ab:83:71:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=4927f1b6-4615-463d-8a51-6c1cf2f58d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3d:40:e9:2f:46:89:9d:a7:8b:ca:6a:98:27:
                    e8:d3:51:07:e5:67:cf:07:34:01:e6:97:8c:d8:dd:
                    b3:5d:71:83:94:0e:f7:5f:f7:05:56:77:42:da:6f:
                    bd:b4:5f:fb:45:44:24:c5:50:0d:dc:71:01:41:33:
                    a8:e2:b5:50:f7:a7:b6:e8:6d:ba:ef:84:2c:59:ad:
                    22:04:e9:24:e1:63:9f:f5:19:12:65:ff:5a:b9:95:
                    55:96:72:fc:2c:d6:d2:cf:e6:83:2d:e1:93:7a:39:
                    90:d7:6a:0e:3a:7d:15:dc:cc:0d:c3:5c:8f:3d:c6:
                    aa:ee:ef:1c:51:01:fc:ee:1b:b0:f6:83:48:3f:21:
                    f7:fa:60:eb:50:8f:93:8e:86:7f:e6:49:cb:0e:c2:
                    e1:4c:be:04:cd:2c:15:ed:ed:e0:87:c7:57:03:37:
                    ac:97:e7:43:8e:19:09:c1:52:86:c6:88:06:db:e3:
                    3e:e3:4a:d1:62:8f:28:55:15:5e:2a:fc:a7:40:24:
                    8f:be:de:1e:0b:5b:7f:51:f6:89:d5:aa:88:4f:2d:
                    52:d0:92:bd:f8:be:3e:12:d8:54:b5:43:e6:17:7c:
                    5a:2d:37:4e:7b:bc:bd:ef:fb:7c:b6:26:14:d7:60:
                    61:e0:ac:57:01:82:f5:98:23:9d:01:0e:53:33:e3:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E8:DE:57:02:44:A1:6E:BB:DE:F5:9C:2A:51:BE:46:1D:F0:A3:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/58188d45-c0c5-3c27-a76c-dcea21339342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:50:b8:57:d7:a2:63:a1:09:b8:19:41:13:3e:88:4f:6e:
         ac:0a:23:8c:c0:e8:ec:21:bb:77:87:89:27:43:da:d1:bf:ab:
         6e:a4:89:15:fe:62:52:39:d1:e7:3e:03:c4:83:57:44:d5:8a:
         fd:cd:80:63:54:ae:ba:fa:93:77:8d:60:32:bb:fe:38:02:c7:
         c1:50:07:c3:6f:83:97:aa:af:30:ac:19:77:e1:6f:7c:61:4b:
         a0:84:a5:d4:83:34:a7:17:46:c6:5d:00:3d:fe:ba:7b:d5:34:
         dd:c5:81:14:a1:78:80:2e:e8:11:7a:26:a7:02:6d:5a:bd:b9:
         81:30:0e:05:ff:4d:57:31:c8:a7:72:0f:7d:02:01:7f:fe:ed:
         40:34:94:ef:f3:b2:08:b0:b4:89:59:16:53:dc:db:26:9e:eb:
         92:1c:da:34:11:df:a3:35:9f:97:ae:09:4d:55:82:bf:9e:f6:
         fa:fa:7d:8f:b3:76:11:8e:22:57:10:7e:06:5f:4c:15:82:ab:
         8c:22:c0:4d:9c:20:43:09:a1:f9:43:b5:cb:f8:1a:05:d7:80:
         90:f3:e6:3f:10:18:62:0b:1d:51:51:53:61:16:fd:37:c9:05:
         9d:1a:f4:db:5d:34:45:0e:b5:2e:cf:db:ef:80:cb:9b:85:ad:
         39:07:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:09 2025 by rpki-client