Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/77cea748-a9f9-3925-960c-e0cee6c334b0.roa
File:                     77cea748-a9f9-3925-960c-e0cee6c334b0.roa (raw, json)
Hash identifier:          wwlyp8HN5D3DE7KqMxKcp+qdZ4fUa5rnxXTZVaJ+468=
Subject key identifier:   DB:A3:82:62:AA:1E:FF:39:28:13:57:A6:F7:D6:B0:A5:E6:41:07:6B
Certificate issuer:       /CN=c0aed97d-7073-4206-b05c-18a84d3f256d
Certificate serial:       010D0C9F43285849287E67754A995EDB39F6D500
Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/77cea748-a9f9-3925-960c-e0cee6c334b0.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     27647
IP address blocks:        74.115.48.0/22 maxlen: 24
                          199.34.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:67:75:4a:99:5e:db:39:f6:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=e21c353b-b5c9-4a5d-b871-c76ca3312d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:65:0e:47:de:13:b5:af:de:b3:b0:1a:d0:
                    57:4b:35:a7:d3:1d:45:6f:06:13:65:8d:3e:9e:f8:
                    18:e3:04:f7:e9:b9:e3:b6:05:14:2b:5d:d8:67:c5:
                    2a:7d:81:80:8f:24:db:25:5d:df:26:19:3b:87:8d:
                    ea:46:34:d1:cf:a3:f0:54:10:1f:4b:c2:70:d7:67:
                    e3:f9:b6:c5:a7:b9:e2:a7:1a:4e:57:b4:4c:8e:07:
                    2b:15:e6:c9:32:14:f5:a3:52:af:ac:f1:5a:47:04:
                    68:d5:e9:2f:ad:42:87:63:4a:2d:e3:ac:df:28:fc:
                    7b:e2:43:b7:5f:11:db:07:4c:39:00:54:03:8a:5d:
                    b4:68:47:b0:a3:04:6a:45:be:98:89:e6:2f:e8:24:
                    a0:dd:23:7a:10:d2:d9:49:f8:c2:d3:47:47:bc:cd:
                    d7:f8:fa:53:98:aa:b4:65:40:12:38:12:92:b5:d7:
                    22:49:9f:82:16:11:25:1b:49:a1:ab:18:90:03:20:
                    b9:f6:f5:06:54:5d:ac:2a:99:9a:47:ca:ff:62:79:
                    f0:c3:55:fb:f8:9e:ed:94:5d:f8:cf:8c:ed:29:d3:
                    52:a3:14:31:cc:68:78:91:97:cc:4c:0c:38:2d:ec:
                    06:d2:78:ab:80:38:be:2b:6c:84:58:34:de:09:76:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:82:62:AA:1E:FF:39:28:13:57:A6:F7:D6:B0:A5:E6:41:07:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/77cea748-a9f9-3925-960c-e0cee6c334b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl

            X509v3 Authority Key Identifier:
                keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.48.0/22
                  199.34.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:86:7b:f3:ae:a0:3e:c0:3c:70:f1:ce:ac:1a:5f:f5:65:46:
         8d:1c:a0:61:11:5f:15:e2:f9:cf:9f:18:d4:be:d9:9b:9c:3e:
         34:d5:17:0b:88:c1:c0:10:e5:cc:c7:9e:6d:74:5a:da:a8:a8:
         28:58:41:0c:54:df:d4:9a:c6:a9:e8:4b:e6:17:3e:cc:28:ad:
         b4:e9:98:e8:95:e2:50:6a:0f:ce:78:20:c2:3b:69:fd:d6:b9:
         61:3a:8e:cb:a9:58:6c:f9:11:6d:93:1d:22:9a:2d:f4:70:3d:
         a5:e8:4c:99:8a:48:8c:10:47:ef:04:90:8c:c1:b5:30:ba:82:
         9d:6a:cd:95:16:45:67:38:7e:63:65:3d:aa:12:57:74:88:ad:
         a9:97:30:65:e0:89:c1:bd:ed:c9:e9:c2:69:f4:6e:c2:8f:6f:
         f5:01:96:ea:36:34:e1:37:bd:96:56:6d:93:56:9d:b5:46:e9:
         1d:61:70:1b:50:0b:04:f5:6a:69:c4:3c:9f:9a:27:99:45:b0:
         c1:78:54:02:f3:88:70:99:88:ce:96:c8:b4:39:00:61:7d:ae:
         b3:cc:ac:8c:5b:c5:21:09:e2:c6:7a:93:43:77:e0:70:d2:02:
         cc:79:76:8f:51:fa:07:80:28:8a:a6:1c:d5:9e:54:dc:72:37:
         6a:ff:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:32:02 2025 by rpki-client