Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa
File:                     d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa (raw, json)
Hash identifier:          tIeYzn0DOvmu1Pwj8YM83S4ha0pJwpo/3tYg6cZ9Pyw=
Subject key identifier:   80:E2:4C:F4:39:07:34:0C:28:31:F5:9E:1B:71:3D:00:46:6C:EF:C7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584905B6B329D4B4AD66C89D4F80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     834
IP address blocks:        74.49.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b3:29:d4:b4:ad:66:c8:9d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=280a8448-24a9-41af-823e-c198d2f416da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:b4:8f:d8:e3:09:1d:53:bc:3d:88:5e:5d:
                    68:63:78:b3:cd:7a:1b:4a:f7:2b:7f:db:5e:72:7a:
                    5a:79:1d:f3:c5:60:00:89:fc:dd:0e:a7:28:5e:ae:
                    63:01:ba:68:a0:75:18:43:f1:a0:b7:cd:8b:d0:5f:
                    63:e3:7c:17:ef:af:b0:ba:d6:5e:e6:6b:e8:46:45:
                    e5:a0:8c:14:20:97:47:d5:99:23:d9:f7:fa:1a:18:
                    bf:4e:0a:29:6e:4b:9c:7b:2e:9d:8b:56:a9:66:e3:
                    18:bc:9d:2a:43:a5:75:7e:e6:e3:d4:68:90:ff:fe:
                    77:d8:1a:c5:df:64:b8:06:26:41:d7:5d:32:fd:ff:
                    f7:56:2e:ea:49:8f:36:0a:73:6d:d8:17:48:10:11:
                    49:36:22:a7:d2:1a:ad:50:f9:c4:6f:2d:50:55:8c:
                    b9:71:74:cd:79:b4:19:13:ea:91:6f:ae:8c:27:6f:
                    b3:11:bf:53:b4:88:b6:d1:d4:ee:8e:6f:7c:18:48:
                    e0:47:7e:54:9f:4f:14:d5:06:d7:d2:bd:5d:62:fd:
                    74:a8:2b:f9:e5:08:60:1c:b1:f6:e6:65:7d:1b:b1:
                    aa:ec:27:89:4f:84:09:9f:1a:cb:cd:7f:dc:a8:60:
                    12:82:e8:0e:16:93:8a:4e:ad:a5:4f:d8:d7:46:32:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E2:4C:F4:39:07:34:0C:28:31:F5:9E:1B:71:3D:00:46:6C:EF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d1ea9744-2f42-37c2-aae3-0bb96049fb81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:54:90:0e:17:9b:da:8d:3d:00:9c:16:09:7a:83:df:d8:81:
         49:29:47:e5:18:7d:9d:24:aa:7e:4f:f8:95:0c:14:7f:ce:7a:
         41:e1:77:92:8c:27:44:50:2e:8a:89:64:da:61:7e:64:7e:50:
         e4:14:fa:9e:8a:60:3c:33:74:de:9c:56:da:98:0b:87:31:be:
         9c:72:1b:b0:b1:a3:e8:8d:dc:64:58:ef:d9:e0:db:42:18:f9:
         e8:50:00:25:be:81:e4:6e:e7:c5:aa:5c:79:07:cf:bc:b3:a5:
         d9:85:28:33:c8:79:f8:59:37:4a:92:e1:12:81:eb:5a:21:5c:
         7d:e8:b5:6c:b3:6b:88:48:f1:62:55:d0:8d:f5:98:24:d9:77:
         52:d3:03:e3:2b:6b:9a:19:ae:e5:07:15:f8:a1:07:d5:69:05:
         d1:4f:57:de:a8:ae:1c:11:8e:af:1e:5a:c2:12:ce:0f:78:7c:
         2f:00:3e:65:d2:e5:06:bc:89:f9:e8:bb:df:76:82:9b:eb:5a:
         d2:c4:76:7a:91:78:99:39:96:e3:da:31:cf:29:5c:5e:4d:cd:
         34:cd:29:55:5c:dd:59:3d:e4:4b:41:88:11:3b:a6:b8:b1:d2:
         94:26:eb:be:f6:17:26:cd:50:16:2b:0e:d9:be:32:1f:01:ec:
         3f:20:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:05:55 2025 by rpki-client