Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cd3e494f-58f2-3084-be5b-c0935e328e9a.roa
File:                     cd3e494f-58f2-3084-be5b-c0935e328e9a.roa (raw, json)
Hash identifier:          mkDNsRs5F7uY8eyTaLFv+qo27SQUhD0z56dYdLkQuco=
Subject key identifier:   A9:1A:E0:FF:B0:20:FE:B6:91:48:FA:CA:73:6B:C5:89:C9:2F:C2:94
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CC7145EAD0355E7AD180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cd3e494f-58f2-3084-be5b-c0935e328e9a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     14352
IP address blocks:        74.218.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:cc:71:45:ea:d0:35:5e:7a:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ee28f1eb-e8ba-410c-a617-58984d64b115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:2f:4d:c7:7a:26:aa:3e:4c:ef:6f:43:21:
                    61:cb:6c:33:21:9b:81:92:e6:48:80:de:62:96:23:
                    08:f7:a8:d0:ce:30:86:57:40:91:23:f3:c0:68:0f:
                    2e:71:b1:69:a7:5d:62:1d:be:32:07:49:5e:90:ec:
                    fc:af:5d:8e:a4:9d:67:0d:2f:7f:57:3c:f6:70:11:
                    5f:33:63:0e:b0:ca:0c:f6:8c:31:18:b3:31:0a:d9:
                    4e:94:66:5a:f3:c9:66:db:9c:de:62:52:5d:e2:03:
                    bc:f0:2e:c5:42:83:b0:1e:71:16:dd:5f:06:22:70:
                    d9:c5:ee:d2:41:d3:8f:bc:64:7f:bc:58:10:44:2f:
                    31:6a:30:e0:df:ab:bf:17:a8:af:5d:df:66:18:e1:
                    2b:78:c6:1c:e9:9d:69:0a:4e:a6:8c:83:b9:42:85:
                    bc:28:1d:5c:f3:02:ae:04:37:a0:2c:0e:44:70:f9:
                    be:15:8f:b7:cc:4f:a8:2c:07:5e:b2:10:51:a6:b1:
                    d9:ba:e5:45:a3:14:e6:08:d0:c1:9c:c2:1c:fb:a6:
                    89:40:0b:2b:2d:44:ae:c4:1a:e9:66:75:06:c2:5e:
                    84:b8:14:44:c4:8e:ac:12:52:ff:66:b0:74:35:43:
                    cb:28:e3:40:f1:37:ab:b2:c2:f5:c6:fd:e3:eb:7d:
                    fd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1A:E0:FF:B0:20:FE:B6:91:48:FA:CA:73:6B:C5:89:C9:2F:C2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cd3e494f-58f2-3084-be5b-c0935e328e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:18:74:b7:7f:e2:44:6e:40:62:28:57:51:ee:f7:3e:82:ed:
         f5:de:c6:d0:ae:b2:15:07:7f:04:9c:67:88:8a:ff:9a:fd:f6:
         90:97:ff:77:79:7a:7f:99:45:44:dc:ee:a2:0d:ac:6f:95:71:
         c6:d7:45:cb:bd:0f:14:eb:82:cf:2a:6e:89:b8:bc:c0:64:ab:
         d2:8f:59:2a:6e:8d:25:33:8a:1d:9e:92:19:c0:eb:38:48:a5:
         3a:d2:8c:1d:a4:73:f9:69:d4:fb:e1:56:bd:29:40:a9:f1:c7:
         19:8d:4b:cb:52:42:c3:6d:ec:6a:02:3f:46:d2:29:3a:71:ce:
         b0:38:88:45:01:6a:5a:7f:0c:56:08:65:7f:36:bc:04:97:7d:
         41:a6:13:34:69:88:d6:7f:ec:8a:4b:ce:38:ed:ad:9e:2e:a8:
         d9:7d:b3:f1:fd:74:aa:6e:3d:b3:84:20:45:b2:56:d6:ad:cf:
         1d:20:b5:49:8c:43:ff:8a:53:b2:8c:2a:cc:af:60:4c:25:1f:
         98:b0:8f:e4:dc:b9:2a:f2:d2:59:73:78:e8:f3:b9:2b:41:94:
         7b:8c:0f:85:3b:d1:a3:92:82:2a:71:fb:0d:66:f3:10:75:50:
         ef:04:9e:ec:2d:1b:ec:29:d3:c9:a4:50:96:bd:c0:b5:2a:75:
         4b:66:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:56:30 2025 by rpki-client