Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa
File:                     1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa (raw, json)
Hash identifier:          jBXXI2GkvjIbwPK9+Rgv9RjtqFiP8jE6Cn2Hmk+BJwc=
Subject key identifier:   04:3B:C7:25:6D:1F:BF:3E:AE:A9:40:FB:EF:67:41:84:44:30:A8:5A
Certificate issuer:       /CN=3f915079-cb02-4279-8f5b-48fa6683491f
Certificate serial:       010D0C9F43285848DD3BAEA9D2456659ECAAA180
Authority key identifier: 07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        69.67.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:ae:a9:d2:45:66:59:ec:aa:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f915079-cb02-4279-8f5b-48fa6683491f
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=84f7bad2-91c6-4d71-abc4-9b41f0308ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:46:d7:e0:75:3c:2b:21:06:6e:7a:06:7c:
                    7c:2f:87:69:9e:6c:a1:2e:f4:d0:dd:69:6d:97:43:
                    31:ef:73:6e:3f:93:5f:ea:cd:4e:3a:70:bc:e3:b3:
                    ba:67:f6:f9:0c:83:8d:a0:83:d8:a5:96:50:b2:8a:
                    90:74:7f:c2:c8:3b:db:fe:fa:3c:53:e3:3e:98:71:
                    3b:9f:24:00:07:a1:2e:4c:bc:71:a3:da:53:90:38:
                    cb:10:68:ee:04:aa:21:0c:4b:2e:61:9d:02:b6:f4:
                    2c:0e:28:da:96:47:c7:22:be:3a:27:41:78:95:b8:
                    c1:95:c3:eb:87:54:07:4a:c9:95:2c:d7:06:27:90:
                    13:39:e7:e6:c1:37:47:4a:88:99:2f:6e:17:ea:d3:
                    d3:bc:ef:15:87:ad:1f:f3:69:0d:6d:13:b1:71:9f:
                    6e:07:a6:90:f1:9a:c0:64:55:3b:9a:07:c9:d0:93:
                    bd:c4:cd:29:40:e2:1a:7f:5d:a9:be:3d:33:42:ce:
                    1d:1d:b5:60:14:55:af:e5:1a:cb:22:d2:2a:ab:c0:
                    1a:33:c2:61:a9:39:f4:30:b5:61:ae:66:e4:17:ff:
                    31:79:43:9c:60:4a:92:3d:e3:7c:3f:f9:29:9d:2f:
                    c2:a2:06:44:1e:b2:e1:b5:9b:85:11:63:87:30:af:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:C7:25:6D:1F:BF:3E:AE:A9:40:FB:EF:67:41:84:44:30:A8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl

            X509v3 Authority Key Identifier:
                keyid:07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c3:21:9c:91:ae:e5:57:2a:cc:58:8c:01:88:f2:02:5e:9d:
         ea:21:fe:94:e3:fb:6b:25:22:66:19:f2:48:b0:da:7b:6f:ef:
         20:1c:ff:cc:93:84:a9:13:b9:da:c9:9e:6d:f4:88:ad:93:a0:
         69:34:62:25:1b:e8:3b:bd:d7:d5:f4:f8:7a:4d:23:9a:09:17:
         ec:8c:dd:38:6c:c3:77:98:d5:82:81:4f:c1:6d:50:eb:7c:4d:
         b0:ce:89:97:ca:df:38:0f:eb:b2:96:73:4e:f6:97:4c:ed:bc:
         ec:c3:9a:78:1c:65:e1:c8:fd:2e:36:da:a0:f5:7f:d0:99:c5:
         b9:b7:09:63:d1:5c:28:c1:e6:ed:f0:aa:3f:f7:39:ba:aa:e9:
         58:9d:ad:34:16:3b:73:81:36:b2:6f:28:e1:fd:8d:57:6a:21:
         79:c3:d2:f9:50:3d:34:23:1e:57:91:45:98:7a:04:e7:c2:b6:
         89:e9:f4:b8:78:6b:d4:57:07:94:04:f4:5e:e4:79:95:21:1f:
         99:e4:d2:e2:3c:7c:d9:b7:a5:77:88:6c:24:82:c0:11:82:fc:
         a5:da:a0:da:54:b0:76:66:6c:85:c4:89:e6:ec:8a:de:9e:84:
         e6:b5:e3:19:71:00:2d:f3:9b:25:2f:51:7c:ff:d5:58:20:2b:
         a2:52:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:58 2025 by rpki-client