Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
File:                     e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa (raw, json)
Hash identifier:          tiuD7k+1WdXLsqA1mXv906uzSbdlSE2aYiDvFZV93O8=
Subject key identifier:   75:47:4C:08:15:9E:89:7F:60:6F:84:78:40:1D:78:38:E9:DE:7E:91
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285848C2B648154F295F7B3E40AB40
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     54994
IP address blocks:        174.35.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:48:15:4f:29:5f:7b:3e:40:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=5698c4f0-7b20-41f3-bdba-c329d14f2602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:fd:4c:23:48:91:e3:9a:b0:06:86:74:46:
                    d9:74:64:db:f9:87:b7:77:3c:ca:7d:1a:16:7d:07:
                    6a:c4:58:f4:02:70:70:26:d3:9e:7b:4f:05:d5:ad:
                    e3:0b:11:cf:d9:30:85:0f:41:ef:5f:26:c2:f8:70:
                    1b:8f:f0:1b:90:d0:81:28:7e:41:b2:00:a2:07:68:
                    98:ed:0b:95:0e:c3:63:92:a2:82:d6:2e:62:f3:e5:
                    21:80:7f:87:d1:43:5e:73:18:5f:07:5b:d9:ea:74:
                    5e:41:65:1d:d0:c1:fa:87:ea:0c:ba:65:d0:40:0c:
                    57:ab:47:4b:e5:a4:4d:d9:0c:ac:01:a7:90:6e:5f:
                    da:57:44:23:0f:91:43:25:81:5f:a7:f8:81:39:46:
                    dd:9f:d0:82:6a:0d:22:b3:61:06:1f:9b:f2:b3:7b:
                    7c:9e:ed:82:66:65:85:b4:6d:b2:d4:9b:12:04:6b:
                    56:16:20:c3:58:0b:48:6a:12:b0:3b:43:47:a7:2a:
                    d4:6a:0b:c1:8a:72:2c:b9:e6:47:de:dd:e2:35:89:
                    aa:e9:4b:2e:4b:42:11:d8:a0:c5:65:29:fd:d5:fe:
                    c5:5b:cd:28:9d:91:b6:f8:78:e5:d5:37:95:0e:2d:
                    3f:dd:90:2e:ca:24:a0:10:0d:e2:16:c4:51:93:7a:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:4C:08:15:9E:89:7F:60:6F:84:78:40:1D:78:38:E9:DE:7E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:ff:dc:22:5f:46:31:33:b4:5d:10:ee:c8:95:24:c3:cd:
         b8:4e:04:1a:79:86:06:23:b2:a7:c3:8d:93:aa:fb:c2:ae:60:
         b1:0b:1d:68:6d:ec:70:37:00:8f:da:81:cd:b4:82:bc:dc:ae:
         12:c7:98:2f:30:2f:83:9e:45:c2:d1:e7:53:4e:dc:6b:0c:c4:
         e5:46:e3:73:df:df:c0:d2:a4:9d:54:68:c2:45:47:e9:89:00:
         31:ab:42:55:a0:31:1f:ef:9f:51:90:54:3a:99:c3:ca:47:a2:
         1b:f8:48:a1:ce:2d:ba:ed:80:b3:dd:3f:9a:d0:ed:df:24:41:
         53:4b:66:ba:4e:8b:48:dd:85:44:bd:17:1c:b6:81:72:ec:17:
         c4:c6:53:b5:b2:cd:a6:6d:ea:92:f2:31:5d:e9:6d:1d:70:a1:
         ef:9f:96:0e:7d:d2:67:0a:e5:29:af:64:c4:35:9e:93:28:f7:
         fb:ca:c6:c7:1a:c9:60:25:61:8b:0f:24:64:ce:e4:76:7e:89:
         e6:06:7f:1d:c2:bb:80:31:68:f6:b1:59:5f:a7:b6:93:7c:cb:
         80:e2:6b:8c:d5:51:56:c6:48:ae:0b:71:ef:ed:de:44:bc:bf:
         e1:d3:40:c4:48:bd:de:db:e0:54:11:fc:29:8d:96:95:7b:2e:
         85:dd:4f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:50 2025 by rpki-client