Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/75bdfa70-8dce-3f86-8e59-f5c0b76d782c.roa
File:                     75bdfa70-8dce-3f86-8e59-f5c0b76d782c.roa (raw, json)
Hash identifier:          f5elV2aR/em9/bpIPNr8Q42rC8zvFeL0h0sYPtW1PTU=
Subject key identifier:   5D:F7:50:04:95:E2:B0:4E:B2:F2:EC:68:53:59:1A:84:42:AC:91:85
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848E2D102BA5D19B71750CB6000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/75bdfa70-8dce-3f86-8e59-f5c0b76d782c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     7922
IP address blocks:        74.49.240.0/24 maxlen: 24
                          74.49.242.0/24 maxlen: 24
                          74.49.244.0/24 maxlen: 24
                          74.49.246.0/24 maxlen: 24
                          74.49.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:02:ba:5d:19:b7:17:50:cb:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=203513e7-83e2-43b9-aef2-200569df3e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:95:2f:e2:a5:e5:3d:4b:62:db:8a:99:f8:
                    d2:65:3e:8e:75:d0:8e:80:d3:3f:66:a0:32:66:c3:
                    44:c0:70:49:1e:94:23:8d:c1:db:80:9f:7d:fb:68:
                    dc:87:c8:7e:bd:cd:46:ac:f0:65:b2:47:87:cf:ec:
                    bf:b9:02:a8:b4:c5:fe:22:79:a0:fc:ab:f3:1b:e7:
                    b7:d6:57:39:99:00:04:f3:2a:77:06:3f:ce:3c:3f:
                    45:80:91:c0:68:d2:4c:9d:b3:09:2a:85:90:4a:95:
                    7c:36:fc:af:74:d6:da:50:b8:2b:5c:fc:b8:26:25:
                    49:e3:0e:7c:8f:6c:87:da:98:be:a8:e3:df:06:9f:
                    c2:e1:36:e0:18:98:7a:16:64:4b:9e:80:a4:f2:82:
                    12:44:b8:37:fc:6d:79:e6:93:4f:7e:30:61:60:77:
                    89:5d:a3:f6:ed:7a:51:e9:2d:e6:8d:79:5f:df:9b:
                    2c:45:75:11:13:88:2b:f7:74:22:95:70:67:5c:3c:
                    dc:5c:fa:8f:f0:a3:df:2e:fd:9f:dc:24:95:43:91:
                    fd:60:cf:96:ff:90:bb:5c:01:c0:7a:8e:55:23:c0:
                    5a:35:1f:3b:3f:8f:cf:e6:dc:0e:b7:33:2f:4c:5e:
                    b4:75:dd:73:12:a5:4c:55:38:95:c9:96:d5:8b:0a:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F7:50:04:95:E2:B0:4E:B2:F2:EC:68:53:59:1A:84:42:AC:91:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/75bdfa70-8dce-3f86-8e59-f5c0b76d782c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.240.0/24
                  74.49.242.0/24
                  74.49.244.0/24
                  74.49.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:d2:8d:2a:c0:f7:25:42:03:16:33:06:de:ca:8e:fd:ea:55:
         74:a7:05:b5:dc:40:13:64:8c:9f:b1:91:1b:8d:ea:28:df:15:
         d8:40:08:31:e3:c8:f4:db:9a:21:07:d7:81:ac:1b:75:3c:11:
         be:f9:77:10:0d:a7:d1:4e:6b:f1:11:eb:fa:9a:a8:64:c1:b7:
         3c:a8:76:5f:9f:5f:1a:1b:ff:48:98:f3:98:ea:b1:50:39:84:
         cb:48:9b:e8:67:ee:4b:2f:31:b3:7a:c7:01:60:8b:b1:3f:f8:
         47:10:9e:d7:35:b7:31:52:32:7e:af:47:0e:b7:5f:89:cb:1a:
         d8:6d:02:3d:c4:57:d9:fd:c5:75:5b:5a:ad:2a:86:5a:6d:29:
         78:35:d8:95:52:49:4e:4c:66:e4:df:0e:57:e8:ed:ed:97:2a:
         7d:89:51:da:0e:a3:77:44:19:cc:52:4f:88:3b:28:19:91:f6:
         98:43:12:a2:28:94:a7:23:3c:aa:39:60:ff:e6:f9:4d:77:97:
         9d:78:a5:d3:08:ff:3d:f2:db:a5:2f:1b:6c:70:35:b9:aa:d3:
         d8:d2:80:d2:3d:11:dc:55:1e:1b:55:b5:4b:65:21:76:b9:f1:
         01:a2:4e:f4:63:a6:f6:b5:8c:51:66:51:d7:f7:5e:87:14:f9:
         a6:eb:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:31 2025 by rpki-client