Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/53970191-b31e-348d-bc85-3f5b8945ab6c.roa
File:                     53970191-b31e-348d-bc85-3f5b8945ab6c.roa (raw, json)
Hash identifier:          q42E76bvyc30jmWsPWTfbbf4VBgcFU1BIreDBI4OsME=
Subject key identifier:   1F:E9:05:A3:0D:4D:4C:36:05:17:D5:ED:3F:EB:70:E8:BC:B4:2C:71
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F432858487755E20BE4E0DF55DA23D4D8
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/53970191-b31e-348d-bc85-3f5b8945ab6c.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     11290
IP address blocks:        74.210.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e2:0b:e4:e0:df:55:da:23:d4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=7ba3d1ba-f48a-4656-ac13-d837ecd2dd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:74:e5:e0:9d:62:38:f7:7d:9a:8b:aa:69:
                    ff:7d:38:31:38:d9:86:03:f1:77:cb:47:b2:86:96:
                    af:42:f7:65:d0:b4:6b:f8:ca:fe:b4:72:b6:10:62:
                    d2:e1:19:eb:8a:0f:e8:11:bf:45:47:5b:2d:3b:09:
                    ec:36:02:cb:17:9f:41:63:87:7a:1d:b1:85:92:49:
                    45:46:56:b0:6e:74:79:88:23:22:34:b9:95:17:e2:
                    ef:ae:27:4d:5b:04:1e:e6:76:0b:7c:24:d9:37:a7:
                    0b:02:ae:ec:0a:21:24:36:ea:41:85:d2:19:b7:a9:
                    9b:ec:4d:89:6b:a1:71:9b:b6:bd:e6:c4:fc:ed:7f:
                    54:00:ee:3d:ca:a0:46:86:87:84:38:f6:aa:7d:3d:
                    16:14:47:04:4d:c1:24:46:c9:b3:21:e0:75:d2:01:
                    40:35:d1:7a:93:69:6a:8c:bb:4d:39:59:49:63:a2:
                    f3:b6:b2:6f:bf:b0:d5:47:dc:c6:4f:fb:1a:a3:76:
                    8e:4c:2e:38:8b:06:8a:1b:37:f0:e7:4d:69:a7:1e:
                    5f:20:28:c5:98:7c:09:d7:5e:e3:d4:98:d3:e6:d6:
                    01:ea:45:02:5c:e3:84:57:13:88:f5:b7:23:4a:36:
                    b7:88:1a:ec:fe:d6:be:cf:fe:d7:89:62:5c:f3:97:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:05:A3:0D:4D:4C:36:05:17:D5:ED:3F:EB:70:E8:BC:B4:2C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/53970191-b31e-348d-bc85-3f5b8945ab6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.210.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:ca:d9:99:64:60:8a:a9:24:7a:47:a4:8c:55:bf:2b:7f:
         61:94:13:b7:69:cb:8e:42:cc:8e:a7:f1:b4:b4:39:64:17:8f:
         0f:12:86:a6:90:7f:55:bb:b4:a0:05:b4:0e:33:da:ec:4d:bc:
         00:05:fb:b1:3f:cc:4b:95:91:ce:db:8e:6d:84:e2:94:28:c6:
         7d:7e:26:45:76:6d:d2:a4:0d:3e:9a:be:9f:65:ad:16:e3:01:
         97:68:7c:b4:23:26:1a:a9:4b:60:3c:93:61:25:cd:39:bc:f1:
         11:06:b7:27:37:0d:fd:8e:8e:d0:2e:27:ec:a6:5d:a5:aa:e7:
         99:20:69:d0:37:b5:de:f4:27:b8:e0:eb:f3:08:9d:9e:5f:71:
         f0:20:76:39:8b:6c:0d:7e:c0:64:d1:83:a5:47:62:99:db:1c:
         a2:a4:b9:d9:5e:b8:a1:5e:4d:46:82:37:45:ca:ba:68:1a:38:
         d1:c8:3d:99:62:69:5d:56:75:97:85:c4:6e:1b:59:d9:dd:0b:
         31:b2:f7:0b:0b:67:59:3c:39:5f:db:17:1e:69:88:c0:8e:f6:
         c2:3b:68:1a:af:96:dd:c5:2c:7c:04:45:ea:29:fd:8c:c2:5b:
         e9:27:3a:80:02:c8:91:e0:7b:e5:39:d2:ac:0d:1f:b1:91:88:
         7e:04:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:20:14 2025 by rpki-client