Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
File:                     59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa (raw, json)
Hash identifier:          NBIQ3zxV/e74qEKuqVbRRG4V3OgtzkLnC3SZRh1ZDbw=
Subject key identifier:   C7:BA:3E:23:46:47:91:BA:75:FC:30:D3:FB:CF:1A:2C:F4:5F:8A:2E
Certificate issuer:       /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial:       010D0C9F432858497DA47472BFECD9FB7CFBF1E8
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     53309
IP address blocks:        74.116.252.0/24 maxlen: 24
                          74.116.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:74:72:bf:ec:d9:fb:7c:fb:f1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c7377caa-b631-453b-8737-edbc334f741a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:af:d2:ec:89:dc:3f:55:fb:4a:81:60:5b:
                    ee:94:68:d9:ca:27:9a:d3:ef:e2:03:30:5f:4c:bd:
                    d1:60:af:47:3c:0e:08:ba:43:c4:8b:b9:d7:01:05:
                    ef:ad:b5:a1:1c:51:9d:a0:bc:84:0e:72:2c:0a:ef:
                    35:93:39:b0:cf:a0:19:31:77:a5:c7:90:32:10:f1:
                    07:c8:a5:96:c2:c2:02:0e:7b:d3:7a:25:e5:96:34:
                    28:70:d0:17:1f:23:d6:c0:d6:6f:b0:eb:ee:56:d6:
                    22:9f:c3:84:8b:34:8e:89:7d:5a:68:9a:ff:31:46:
                    76:d5:02:93:62:8d:f2:47:05:62:2d:11:84:12:d6:
                    84:d2:7c:98:db:cd:e4:db:b8:2e:c8:db:55:9b:33:
                    61:28:a4:05:11:4e:94:e9:de:d1:ed:70:0c:41:b7:
                    09:f4:88:82:1e:08:0c:fd:f2:07:34:b0:3f:06:12:
                    c8:85:ca:60:4b:73:ff:cb:00:78:7c:09:b7:0e:8a:
                    5c:3f:ed:d8:a6:cd:76:80:ab:ef:21:de:f6:fe:aa:
                    e9:31:75:c0:1c:89:1a:d1:b4:fa:aa:c3:6b:a5:4b:
                    e6:17:24:5d:a1:d4:91:0a:73:72:86:b8:89:3c:c7:
                    1b:5d:7d:3b:57:04:e2:e5:65:d0:85:d5:61:ed:80:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BA:3E:23:46:47:91:BA:75:FC:30:D3:FB:CF:1A:2C:F4:5F:8A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl

            X509v3 Authority Key Identifier:
                keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:5a:ee:31:45:93:8c:80:c1:4b:9f:06:ab:b9:0e:6d:55:
         e9:8b:05:a4:fe:33:7d:0b:ea:ed:1a:50:2d:4f:82:b8:5b:7f:
         47:78:ab:e2:d8:7e:13:cb:29:8a:ba:59:53:10:b3:d9:51:21:
         c6:3e:d2:82:90:8e:a1:44:a2:f2:ed:ef:93:a5:55:31:0d:77:
         dd:f8:05:34:1a:55:fd:15:18:4c:0d:7f:cd:1e:01:f3:00:24:
         d7:3a:86:f8:72:fb:e4:98:31:7e:03:bb:d2:f4:e0:27:ad:06:
         d1:47:91:a4:81:b5:e3:f9:c7:59:b5:75:09:42:24:20:8e:a7:
         72:b9:c2:41:9f:1a:12:24:a5:b8:be:90:c0:ec:83:6b:44:df:
         aa:da:6e:5e:12:33:6b:22:61:a0:f1:c7:44:52:be:93:ee:57:
         9e:7a:62:03:45:c5:42:d5:e7:f7:2c:d4:c8:32:95:e8:08:ed:
         16:1d:38:d9:1c:fa:9b:78:61:34:25:dc:3c:b2:fd:ab:65:74:
         bb:6f:d9:53:f5:50:d3:8b:65:eb:74:c8:8d:88:db:2c:44:18:
         5a:d5:b1:1b:3e:a5:bf:9e:f6:d9:36:40:c6:4c:63:25:b6:1e:
         cc:6a:23:bb:b2:3d:fb:53:d1:60:a6:02:ad:24:bf:bf:0a:e8:
         b5:2d:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:52 2025 by rpki-client