Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/897d74de-4598-36d1-a3d8-51fab4477e0a.roa
File:                     897d74de-4598-36d1-a3d8-51fab4477e0a.roa (raw, json)
Hash identifier:          LFztH310adxLvY7CfNg1JrSTXZ41Nmy86/J7+aQpRc8=
Subject key identifier:   B1:B3:89:7A:DA:FA:0B:E7:C4:4E:A0:40:82:4D:C9:C0:C1:2B:A7:33
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584905B6B3CFB4BE8DF4EFE557D8
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/897d74de-4598-36d1-a3d8-51fab4477e0a.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     209854
IP address blocks:        74.49.196.0/24 maxlen: 24
                          74.49.197.0/24 maxlen: 24
                          74.49.198.0/24 maxlen: 24
                          74.49.199.0/24 maxlen: 24
                          74.49.204.0/24 maxlen: 24
                          74.49.205.0/24 maxlen: 24
                          74.49.206.0/24 maxlen: 24
                          74.49.207.0/24 maxlen: 24
                          74.49.212.0/24 maxlen: 24
                          74.49.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b3:cf:b4:be:8d:f4:ef:e5:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=144580a8-0c55-4bcd-80f6-58158b2de6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:94:c4:de:f3:a4:1a:da:5c:99:e0:ac:64:
                    c2:d6:b2:93:f2:b8:3c:46:f4:13:7a:d2:13:26:ab:
                    b7:1c:52:9b:4e:35:2f:aa:9f:b8:42:fc:fe:85:f9:
                    80:40:18:73:a8:bd:88:07:6d:57:a6:cf:2f:17:72:
                    9e:ae:bf:95:27:9a:4a:ad:53:c5:41:a3:e3:05:76:
                    95:ea:47:d4:ff:7e:1f:8d:54:ee:cf:5d:04:00:da:
                    24:57:55:4d:ea:ea:4f:f5:dd:ec:41:1b:a4:5c:f6:
                    b3:ec:86:0c:c7:62:6f:63:fd:a7:82:0b:37:bd:b0:
                    d6:33:34:5b:36:57:a6:20:ff:f0:e2:d5:de:04:c1:
                    51:f2:eb:6a:a7:7f:32:c5:1c:7c:4f:c6:99:01:a3:
                    e5:24:98:53:78:ee:41:00:14:cc:f5:91:b7:de:20:
                    65:d5:49:a8:3f:36:a5:64:14:3d:c9:d7:15:8d:08:
                    6a:0c:2e:23:df:5d:bc:30:30:cf:66:2d:03:ec:04:
                    50:2e:f9:7d:ae:3c:6d:b5:ab:46:af:1f:21:a9:51:
                    b1:2f:2a:fc:b0:e2:c5:6e:b7:82:a4:12:cb:21:28:
                    27:b2:9a:55:83:14:bb:e0:56:13:b5:61:eb:c4:b0:
                    2f:cd:b9:a7:f3:ac:99:40:81:da:2b:3c:33:57:25:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:89:7A:DA:FA:0B:E7:C4:4E:A0:40:82:4D:C9:C0:C1:2B:A7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/897d74de-4598-36d1-a3d8-51fab4477e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.196.0/22
                  74.49.204.0/22
                  74.49.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:05:60:9e:9d:a2:c0:38:f0:91:b5:29:6f:54:85:3d:4a:
         0f:5f:98:fd:77:5f:70:03:95:be:61:79:57:63:bc:18:b9:fe:
         66:d3:a3:a7:4d:1b:b9:18:d0:74:f7:87:ae:38:0e:93:2a:70:
         d9:db:f7:15:af:07:3f:cc:7f:6a:4c:de:ff:72:01:90:bc:b3:
         d0:05:06:11:b8:32:54:a6:58:0c:7d:77:4d:81:1b:60:27:62:
         87:e0:48:b9:56:78:d3:47:a3:6b:71:bd:26:d2:f7:66:4d:c0:
         f3:e0:1c:f9:61:e8:23:75:ce:2d:d3:df:18:62:42:be:06:ff:
         60:ca:d8:09:44:a1:e1:b9:78:aa:26:2b:d2:8e:85:9a:86:81:
         4e:62:ae:cc:27:ec:4c:d2:c6:b5:5c:d2:86:5b:1d:c3:e0:43:
         41:8b:c1:2a:e3:d3:d4:b0:06:01:a1:e4:bd:c1:76:8f:4e:46:
         d7:ad:33:80:83:3f:38:f2:8a:8e:1b:da:14:fb:0e:05:15:17:
         d6:76:2b:91:94:54:45:76:84:d8:d7:95:38:3f:6b:47:e9:c3:
         b0:d8:43:0d:37:83:31:8d:8b:8c:74:ae:e4:e4:1a:2e:49:6c:
         4b:71:30:39:01:f5:11:19:4f:7f:2a:94:35:15:90:6a:9c:df:
         65:b7:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:02:48 2025 by rpki-client