Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/617cdccc-2b71-3850-b24d-bc66d7589dc6.roa
File:                     617cdccc-2b71-3850-b24d-bc66d7589dc6.roa (raw, json)
Hash identifier:          BAzCsToqKNH/h1fmBbbXVdBFKylYUWYffhy4E9bOyNs=
Subject key identifier:   9D:BF:2D:89:14:3F:3A:9D:5D:5D:57:42:F4:79:B7:9A:8F:51:BC:FC
Certificate issuer:       /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial:       010D0C9F432858491511594D6BFC62E80FB49680
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/617cdccc-2b71-3850-b24d-bc66d7589dc6.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     16938
IP address blocks:        74.123.144.0/24 maxlen: 24
                          74.123.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:59:4d:6b:fc:62:e8:0f:b4:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=d540781d-7c44-42e7-9655-baed6563648b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:66:68:74:06:a5:b8:6d:bf:95:ea:1c:54:
                    0a:13:9f:e5:08:dc:ed:35:31:2c:9c:3d:fa:b8:61:
                    af:67:41:90:b5:55:7a:90:43:79:d1:b4:d3:04:ef:
                    76:34:bd:d2:97:49:4d:6f:99:56:83:89:16:32:b2:
                    ce:76:bb:0a:97:e4:93:94:32:f9:92:c5:33:25:10:
                    9e:e3:09:53:fa:75:cd:86:9a:07:96:6f:90:5c:37:
                    ab:4d:f5:01:69:aa:91:6e:59:17:fe:be:7c:ca:4e:
                    51:ad:48:bc:f2:d0:a0:cd:34:5a:33:cc:ae:7e:b8:
                    c7:19:73:6e:45:f0:c1:2a:f6:ab:01:e3:96:c7:19:
                    cf:d1:be:70:b8:3e:a4:f4:a1:13:aa:d3:9b:c9:cb:
                    2b:ee:ae:10:75:2b:90:25:24:2d:76:7c:6f:60:ee:
                    33:99:34:0a:93:62:dc:d0:df:c3:8d:28:8c:af:eb:
                    66:c8:8c:3d:89:f4:8d:03:cb:f8:06:64:2a:8f:5c:
                    fe:fd:ab:51:7b:df:d2:c4:ef:9a:ad:65:46:a3:4e:
                    b0:cb:00:ad:ce:d7:26:fc:f5:b5:4c:93:ec:f2:88:
                    12:51:c1:d5:d3:67:4f:bd:b3:49:40:17:55:18:72:
                    db:be:8e:46:1e:62:c1:69:ac:a2:31:f8:98:6f:e5:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:2D:89:14:3F:3A:9D:5D:5D:57:42:F4:79:B7:9A:8F:51:BC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/617cdccc-2b71-3850-b24d-bc66d7589dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.144.0/24
                  74.123.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:6a:0a:82:b1:fa:27:c3:0c:be:cd:99:98:b7:e4:25:5e:
         9a:48:a5:b2:ee:02:f2:7b:60:6b:13:94:12:82:d6:12:8a:b4:
         96:e1:70:cb:f1:c9:55:b5:24:f4:b8:87:d2:01:f2:cf:01:c8:
         6d:3e:ff:79:67:95:a1:94:5b:d9:28:82:58:c8:59:13:07:25:
         71:57:a1:99:a8:b8:b2:44:38:f8:ab:b0:45:94:89:13:86:ba:
         4a:a5:2f:29:ca:a2:48:83:5d:bf:46:ec:53:75:7f:49:bb:9a:
         fc:57:c7:5e:fa:da:69:48:7f:0a:27:31:e8:4d:4e:b3:a6:26:
         34:ac:1b:c8:73:f6:4e:fb:c9:21:bd:ff:08:cb:75:e7:ab:aa:
         5f:09:0d:40:db:9c:46:c8:62:12:fc:a1:1f:c7:f2:3a:1c:1c:
         a1:17:5b:65:76:f0:66:2b:ab:50:45:a7:d2:39:18:5b:8a:c4:
         ca:6e:13:ae:12:09:8c:61:96:02:e7:bd:f5:b7:e9:e9:61:02:
         1c:d9:a3:86:63:5c:3e:47:8c:84:58:aa:3a:f5:94:a0:b4:6c:
         7c:90:b2:5a:cc:32:cd:1b:e1:58:c9:a5:b2:67:df:c4:55:03:
         42:b8:94:b6:cf:05:4f:d0:c9:40:36:5f:e7:d2:27:4b:1b:ac:
         ad:05:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:42 2025 by rpki-client