Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1e907d6e-e4de-34e8-8d9b-da55cb2988bc.roa
File:                     1e907d6e-e4de-34e8-8d9b-da55cb2988bc.roa (raw, json)
Hash identifier:          9XRATu0avDz5YFjnRthEyCwXb4ykWqcstVkDk+xhcv0=
Subject key identifier:   12:59:AB:14:0B:FE:C7:C1:9D:93:E2:D0:92:04:5B:0E:C9:13:27:B0
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285848DE38491147BDA2C35BCC7740
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1e907d6e-e4de-34e8-8d9b-da55cb2988bc.roa
Signing time:             Thu 13 Feb 2025 10:29:45 +0000
ROA not before:           Thu 13 Feb 2025 10:29:45 +0000
ROA not after:            Wed 14 May 2025 09:29:45 +0000
asID:                     13213
IP address blocks:        174.127.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:38:49:11:47:bd:a2:c3:5b:cc:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb 13 10:29:45 2025 GMT
            Not After : May 14 09:29:45 2025 GMT
        Subject: CN=e531dc2d-3f66-45b0-a21e-eee00eaed2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:bf:c3:9d:fc:c1:9b:38:2b:81:52:81:13:
                    80:a0:a5:bd:3f:1e:6c:45:75:88:d4:f4:09:2b:95:
                    bd:8f:a2:50:4e:f2:5b:a1:2e:0c:e3:94:4a:5e:1e:
                    f6:7b:db:de:6d:45:ca:21:f1:6d:ca:0d:71:ac:57:
                    ac:a6:f3:66:39:df:c7:c3:b1:1e:c5:a7:06:39:2e:
                    80:64:9f:2d:20:0f:a1:7b:1f:69:1a:de:ee:f6:ad:
                    d2:60:a9:de:9c:90:57:e2:a7:63:b8:c7:96:4b:81:
                    42:bc:e2:6a:e5:62:f8:de:f6:5a:ec:73:44:38:da:
                    df:90:50:34:1a:a9:59:fe:85:9e:b1:bc:a5:75:43:
                    f9:6c:01:4c:c4:76:8d:02:62:48:53:65:6b:9d:50:
                    d8:eb:86:b8:f6:eb:08:18:d8:38:80:6c:ad:97:f2:
                    df:1a:8b:79:46:e9:e9:11:0e:6a:78:92:a3:84:2d:
                    d7:1d:4a:2a:20:5f:cd:15:08:1c:e7:60:a8:94:70:
                    c3:16:ef:ea:7f:0b:bf:38:c7:73:7c:c3:ea:8e:8d:
                    fe:73:30:d6:91:d9:e8:75:74:95:bb:32:8a:cc:37:
                    54:cd:6e:38:8e:9d:e4:27:93:cf:b2:a1:ce:60:b5:
                    b8:8d:bb:bd:80:8c:7f:f2:23:42:18:19:87:1f:60:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:AB:14:0B:FE:C7:C1:9D:93:E2:D0:92:04:5B:0E:C9:13:27:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1e907d6e-e4de-34e8-8d9b-da55cb2988bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:88:c7:c4:cc:26:04:e3:a1:cf:94:0b:b2:40:de:93:6f:22:
         2f:e3:99:02:4d:1e:d6:31:8d:62:58:92:67:b5:43:ef:61:e9:
         a2:1c:80:d9:42:e7:46:3c:78:36:a7:ff:2e:b5:25:54:0d:df:
         fc:cb:e2:da:a1:1b:52:35:6b:70:83:ba:41:dc:82:64:ac:d1:
         63:8a:a0:9c:a5:02:ce:ff:5b:e0:dd:95:a8:f9:40:13:55:8c:
         03:65:5a:27:b9:27:20:87:4a:0f:d7:93:50:51:d7:fd:71:d5:
         ee:e9:7a:e3:ae:0b:a0:3f:84:cf:27:cc:ee:e8:a8:bc:d8:9b:
         55:9e:31:8b:87:7f:a9:07:4a:44:26:46:07:1d:26:b7:c2:d1:
         10:c4:73:df:8e:90:fa:84:e1:b2:fa:4a:2b:de:fc:e9:04:66:
         b1:e3:e7:97:12:65:d2:85:d2:fc:b0:21:72:76:ea:d8:ec:56:
         6d:ba:0f:d1:59:0b:b9:cb:84:ba:06:d0:06:d6:15:3f:87:ec:
         17:45:62:3f:f8:20:a5:36:ef:a9:b6:a9:f2:10:19:c1:36:32:
         4b:23:22:eb:22:53:0a:7b:ac:be:aa:db:d7:58:cb:cc:42:dc:
         7c:86:8f:bd:2e:9b:28:f0:cd:a4:fb:0d:e0:1a:8a:fb:dc:9c:
         34:d9:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:01 2025 by rpki-client