Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/23704262-f3a1-3531-92c9-5b09423aa45a.roa
File:                     23704262-f3a1-3531-92c9-5b09423aa45a.roa (raw, json)
Hash identifier:          Ctvye9SSRfqC6cITQcFArysrerZmPff3e6Khf1Et4Us=
Subject key identifier:   01:D7:B0:08:76:CC:A3:C8:31:27:0E:F8:B6:04:3F:68:80:C1:5E:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D089B0477C5B4B974E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/23704262-f3a1-3531-92c9-5b09423aa45a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        74.87.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d0:89:b0:47:7c:5b:4b:97:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=da95c7e1-898e-4938-857e-ace807e6affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:d2:ce:17:fd:4d:1e:41:64:29:6f:54:8a:
                    03:d4:4f:0a:ae:c1:0c:6f:fe:2e:40:51:a3:00:ad:
                    67:2e:bd:47:01:7f:aa:36:f3:4a:2f:52:9c:ea:d1:
                    d5:69:7a:e6:d6:f4:34:c1:99:4a:de:af:86:a8:a2:
                    70:f5:0c:b6:c6:12:03:ba:8f:39:14:e1:8d:de:85:
                    62:8a:d1:19:9b:44:bc:23:ca:20:cf:9a:9d:35:2a:
                    cc:c1:20:1e:83:21:96:d7:60:7a:f6:a6:c4:19:8e:
                    de:6c:74:1e:79:21:bf:61:67:b1:a8:c0:e6:98:9e:
                    9f:40:11:61:f0:1b:a7:7e:d5:23:10:98:08:69:2d:
                    af:41:be:19:5b:ce:6b:2e:10:93:d4:3d:d9:4a:81:
                    8d:bb:02:73:29:34:b8:90:98:ed:e9:89:c1:6d:af:
                    a6:7c:3c:a1:4a:fd:43:51:7d:38:55:47:2c:6f:43:
                    ec:5e:e2:48:b6:93:4b:02:d2:2d:c3:95:0b:aa:81:
                    98:03:a8:ed:67:d1:f9:00:95:c8:e0:5a:1c:1a:63:
                    af:71:10:3b:ea:20:f3:b8:bf:15:48:6a:05:ae:f8:
                    e4:7c:de:76:b5:74:be:49:63:44:27:7d:c6:8b:5c:
                    da:e8:7e:17:d9:92:d7:18:e1:4a:c5:4a:58:07:a0:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D7:B0:08:76:CC:A3:C8:31:27:0E:F8:B6:04:3F:68:80:C1:5E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/23704262-f3a1-3531-92c9-5b09423aa45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:5f:ec:ae:a0:02:62:49:c8:cf:b5:c3:42:d9:2b:2c:23:
         aa:d9:6e:55:e8:a5:38:b7:e7:25:ce:25:a2:4b:7b:19:0b:57:
         ba:6c:92:7f:fe:80:c7:04:f1:2f:1e:a4:7e:1c:7c:82:68:7f:
         06:12:31:3d:e1:7a:c0:ac:85:ac:b2:76:fd:57:96:4b:5e:ff:
         d1:cb:f6:47:d7:6f:bb:49:de:5c:40:b7:6f:5e:f1:33:73:52:
         5a:9d:96:0d:32:ff:be:54:8b:76:7e:62:28:9d:c6:5f:14:84:
         ef:fc:fb:6e:6a:c9:78:9d:97:99:8e:5d:43:49:7d:12:f2:0d:
         0c:5c:d5:59:de:2a:95:47:c0:f0:f2:8a:9a:ca:e2:42:fb:03:
         d4:59:60:1b:23:8f:ad:24:b8:dc:74:3d:6a:96:10:c2:8f:b8:
         0a:5a:07:1e:a6:a6:cd:95:40:d3:8d:f6:36:7d:e5:4f:a2:25:
         0f:0d:10:24:bc:6e:42:92:34:b5:1a:0b:ec:36:bc:11:86:46:
         30:2e:75:43:34:c9:5b:22:44:01:3c:32:ac:7c:dd:45:a8:74:
         5b:f6:2f:7a:12:c3:06:18:86:eb:09:9a:de:a9:ea:d4:96:90:
         db:34:1c:27:35:39:c6:03:82:79:1b:e4:92:20:1a:08:16:7b:
         eb:77:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:47 2025 by rpki-client