Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
File:                     6e3468c4-90ed-3c55-9272-bfaed0242e22.roa (raw, json)
Hash identifier:          fQhlZVbZjBQK3fKc50EUzPi+WQrtsQdrKvSIox8Dwss=
Subject key identifier:   50:1A:5D:A4:17:3D:E4:06:25:B9:4C:20:65:39:E5:DD:60:9C:4A:73
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F432858494CC94CED4BF31A7B15439348
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     19229
IP address blocks:        171.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4c:ed:4b:f3:1a:7b:15:43:93:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=4f75f68a-d512-473b-8564-f1a64276b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:9a:84:f6:f9:42:d8:62:a6:4e:55:33:77:
                    8f:44:84:90:2f:19:aa:45:55:0c:ef:de:6b:64:cd:
                    47:c7:1c:37:16:4f:ea:c8:e6:29:0c:f9:4b:a7:c2:
                    1a:c6:b6:4f:6f:0b:26:12:3a:1a:65:fd:ce:1c:04:
                    94:0b:06:7c:0a:2d:48:af:df:3d:77:59:46:17:20:
                    7c:79:27:c8:cc:22:b1:f9:d7:2e:5d:9e:ff:65:91:
                    a1:42:0b:86:f8:c5:62:e5:1f:ae:a2:ab:9c:38:5e:
                    57:0e:fa:fe:93:09:e4:79:b6:82:63:24:3a:57:ad:
                    20:1d:7c:5b:d2:25:73:af:9f:a0:8a:2f:a7:6d:23:
                    66:d2:22:30:61:d9:94:bb:86:85:a9:d6:df:08:be:
                    83:29:a4:11:c4:97:64:57:89:6e:4f:9c:c9:e2:56:
                    b9:2c:84:25:38:2b:e7:c4:ee:f4:12:41:a4:ec:cb:
                    1c:d8:c8:32:13:8f:5d:9f:66:04:17:d4:4e:bf:22:
                    1e:6d:b0:d8:90:1f:82:ec:cb:3c:72:0f:ed:3d:3e:
                    b2:a4:73:49:4e:60:78:2d:a2:73:87:89:3a:2b:b6:
                    10:d5:3b:58:b6:7d:4b:56:3e:18:97:9c:6e:49:b7:
                    bc:db:f7:06:88:db:d1:7c:07:c8:83:fe:d7:3d:be:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1A:5D:A4:17:3D:E4:06:25:B9:4C:20:65:39:E5:DD:60:9C:4A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:47:46:8d:17:d1:76:f6:1a:3b:1b:cc:3e:00:b2:af:9b:
         44:dd:3e:23:1a:2b:fe:ac:dd:ed:59:53:44:52:3a:d4:13:c2:
         e1:a8:c8:1c:0a:2a:d9:44:20:cf:df:5c:1d:d8:77:61:f5:f6:
         34:23:72:42:4b:8d:2d:d1:6e:04:83:44:21:6c:7f:53:55:a1:
         5b:86:7e:9d:20:5b:2b:4c:38:54:31:fc:65:52:2e:9d:a2:26:
         dc:a0:9b:5a:ec:2c:c8:19:d1:21:21:4d:2c:93:c1:67:a8:11:
         1d:32:a1:c3:ec:ee:48:cb:d0:bb:f8:d0:cf:f0:78:12:25:62:
         e0:94:07:0d:02:44:b4:0f:f4:c3:e4:1f:c5:eb:74:0d:c5:20:
         8e:81:7d:d1:38:6e:06:3b:d9:05:30:cc:5c:ca:61:4e:5d:6c:
         5e:a9:44:49:ee:27:f6:5d:1e:d5:15:ce:a5:06:79:c4:a6:95:
         2f:2a:b4:a1:ea:eb:4f:79:09:ad:8a:c9:e0:ad:a8:18:bc:45:
         be:a7:3d:3c:2b:ba:5f:41:cf:7f:a8:f9:fd:aa:4b:85:5e:62:
         48:56:bd:de:34:31:85:3d:9d:1f:8e:6a:7d:7d:0e:fa:69:c7:
         d8:29:cc:62:be:7c:b6:c6:a0:59:2c:9f:09:5a:e5:0a:cb:40:
         07:62:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:35 2025 by rpki-client