Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/355ccbcb-4fee-3940-bdc0-1d740371acea.roa
File:                     355ccbcb-4fee-3940-bdc0-1d740371acea.roa (raw, json)
Hash identifier:          82c9Bt0OiTNLN3HUvTqvUZElvBP+qncG53bWBjbuCLY=
Subject key identifier:   95:0A:6B:14:8D:44:2F:66:AD:29:50:E4:EB:7F:7D:C1:72:D3:34:A2
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584937D9329F882922E7E61E5400
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/355ccbcb-4fee-3940-bdc0-1d740371acea.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     36511
IP address blocks:        74.116.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:32:9f:88:29:22:e7:e6:1e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=d52d8184-d217-4604-b889-1760ddfa1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:d7:e6:2e:c5:62:25:58:b1:3d:8a:b1:8a:
                    7e:b4:60:8a:b9:57:d6:cc:2e:b2:96:46:0b:fd:24:
                    d9:ac:06:c1:72:25:2a:0c:34:64:35:77:23:67:0f:
                    bf:04:59:dd:96:b6:c7:47:c6:ea:eb:58:44:de:08:
                    b2:da:e8:2d:1c:a4:ed:3b:a9:ca:af:cb:b8:25:3b:
                    d4:56:15:e5:50:2d:bf:83:34:10:bf:fd:fd:e5:1d:
                    c4:ef:8c:3c:09:06:e6:92:d1:b9:52:fa:91:8a:a8:
                    d6:00:bd:5d:93:dd:14:15:16:c9:5f:5e:1c:d3:a9:
                    aa:d1:ef:02:71:23:ba:84:6b:a4:cc:2f:fb:ce:29:
                    77:48:1e:97:5a:03:7a:45:9e:b2:1a:04:de:c4:4f:
                    a5:26:55:59:2c:b9:19:7a:38:6e:db:64:b9:f2:cf:
                    1f:f5:ec:39:22:87:29:25:f9:35:e7:df:fe:ed:9e:
                    ad:71:93:02:ac:33:48:59:99:8e:d6:64:19:cc:ad:
                    58:71:d1:44:3d:18:e7:57:91:3b:83:1c:5d:ad:fe:
                    5e:ff:bd:a0:86:94:7b:e7:d9:2f:f9:b2:0d:64:44:
                    e5:5d:de:35:8a:3c:c7:64:ea:29:2d:6e:5a:ed:11:
                    7c:09:ec:c5:f5:6d:ef:43:2a:d3:48:8f:23:cc:ce:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:6B:14:8D:44:2F:66:AD:29:50:E4:EB:7F:7D:C1:72:D3:34:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/355ccbcb-4fee-3940-bdc0-1d740371acea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:30:9a:5e:de:73:db:1d:30:5a:b2:fd:f8:4e:fd:0a:34:d2:
         b7:fc:59:f6:b4:52:b1:51:33:a4:b5:39:6d:f8:02:94:71:27:
         90:f2:38:00:3b:80:a2:a1:f0:7d:49:c6:ec:ed:e8:20:0d:15:
         5b:fa:e5:90:5b:c4:bb:61:55:62:91:ca:5c:0c:f5:d6:bb:be:
         9c:50:6d:b0:82:59:95:d6:2a:6c:5c:29:65:2c:7b:b9:2a:eb:
         ba:8e:79:75:b6:5b:d9:fe:ae:53:c6:ff:8d:b8:26:59:96:6f:
         5c:a8:69:53:16:1f:e0:f1:b6:6a:6d:a8:ba:f7:b1:0f:41:ee:
         59:2c:6b:04:38:f8:20:30:c3:2f:6b:58:fc:be:6b:e0:f9:e8:
         3d:64:ee:be:e4:74:dd:6e:b1:a5:a7:2a:45:2d:27:18:b4:eb:
         26:71:b0:ad:02:12:fc:c3:ce:97:36:1f:e6:6b:38:0f:ef:18:
         2f:84:9c:b2:a3:9a:1a:21:00:bc:15:d6:5d:9e:59:a0:d2:7f:
         d2:46:3c:69:83:66:d7:e7:c3:3c:a5:07:29:5a:8d:85:f1:39:
         a3:d2:c4:71:90:8e:a9:c3:18:80:c2:53:ce:7f:d2:66:9b:31:
         85:3f:dc:d4:51:cb:94:25:3f:d6:0f:2d:bc:6d:90:2c:e1:bd:
         bc:15:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:07 2025 by rpki-client