Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
File:                     faadd0a3-a993-3496-8f98-a98da5a4e705.roa (raw, json)
Hash identifier:          m6ea1/MNKaGgCpSD8knR+AV2f55hMKOJv/Ze+/faxuA=
Subject key identifier:   0F:25:F5:5A:B6:10:2C:6F:9F:E5:A8:A4:F3:AB:74:31:C2:75:CC:7B
Certificate issuer:       /CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
Certificate serial:       010D0C9F432858482A8FE01F0CF637AA7368053A
Authority key identifier: D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     35350
IP address blocks:        198.74.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:e0:1f:0c:f6:37:aa:73:68:05:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=ff4d7e31-190a-44c2-8d0c-6ec98c1ced12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:b0:e4:e3:a4:96:5f:fb:5e:60:d0:c1:14:
                    1c:7b:08:89:25:0c:c4:0c:a8:0a:c0:a1:f9:f2:53:
                    27:3c:55:4d:4f:2a:19:bc:fa:f9:c9:1c:c6:84:78:
                    41:b3:69:b3:55:14:6a:9b:11:92:bc:d9:0e:07:6b:
                    0e:c6:47:77:d9:20:85:c6:b6:b6:fd:28:f5:79:51:
                    cc:55:fb:01:6f:85:37:99:06:90:84:2b:20:e7:38:
                    d6:ea:7d:05:25:fb:b7:a7:dd:73:b3:5b:bc:7f:fb:
                    95:9c:c4:e3:75:92:cc:73:b9:d3:ff:41:20:b2:12:
                    1a:37:c8:25:f1:cf:ce:1e:8d:77:3b:ab:24:b4:18:
                    61:f3:8e:24:64:a1:74:76:14:04:2d:58:7f:18:ae:
                    7e:5b:3f:23:d1:b1:ed:d4:dc:46:e4:12:50:9c:12:
                    7f:0b:82:e3:13:2b:14:ed:cf:ba:43:e1:b4:72:fa:
                    14:aa:64:9f:9d:66:80:3c:c3:2d:c8:46:07:a2:54:
                    91:e5:df:3a:3b:39:bf:bb:d2:e7:cb:ad:a2:86:d4:
                    4c:4f:d5:32:86:06:da:9f:79:94:53:ae:f3:88:c1:
                    95:f5:87:68:62:93:da:40:e4:a6:10:d9:96:51:57:
                    a1:c2:2c:b3:36:33:ea:35:79:bb:dd:a8:89:08:aa:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:25:F5:5A:B6:10:2C:6F:9F:E5:A8:A4:F3:AB:74:31:C2:75:CC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl

            X509v3 Authority Key Identifier:
                keyid:D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:28:cb:9b:de:00:81:20:88:23:19:c0:98:7a:fa:01:11:cc:
         9c:30:3a:39:75:51:6a:0e:b9:bd:ff:19:6f:db:c3:42:92:49:
         fc:7b:95:7f:8b:25:3a:55:05:9f:6b:50:d3:10:30:84:02:43:
         36:69:cf:68:dd:2b:aa:1e:d6:fe:4f:a4:5e:09:60:32:5b:f8:
         e6:c4:d6:4b:a2:fa:8d:0b:71:4a:be:31:ac:2f:ec:57:3b:9c:
         a6:58:a2:30:9d:8c:95:51:a4:66:ce:49:97:79:b0:1c:70:73:
         45:b7:ab:55:24:37:7c:b3:29:3d:97:8a:0f:25:83:f1:5d:32:
         72:fa:6e:d0:93:a4:a8:e6:16:ba:18:47:f6:54:96:05:1e:28:
         68:5c:50:f3:01:4e:3f:e6:a8:ba:e5:89:6c:be:f3:ce:4f:5c:
         74:4d:12:f8:ca:ec:7d:5a:65:0a:2a:a9:07:6c:02:aa:a7:b1:
         e5:df:37:5e:03:e2:67:92:73:77:8d:a5:2e:cc:14:36:bd:5e:
         17:42:8b:e3:d9:1b:91:29:db:e5:20:05:99:42:3e:54:75:04:
         71:1d:8e:8e:ae:36:1b:80:6b:9c:ba:72:64:74:09:67:69:05:
         97:97:44:0f:61:51:49:37:c2:7f:5a:f6:9c:64:25:0f:00:71:
         57:26:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:40 2025 by rpki-client