Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/2c324f34-50b3-3d6a-9dda-cb9051b3339e.roa
File:                     2c324f34-50b3-3d6a-9dda-cb9051b3339e.roa (raw, json)
Hash identifier:          xUwOVIW6dZnYPIE8qphS7lyNDOeLi3f8TXauaodD5hQ=
Subject key identifier:   40:99:82:16:0A:CB:43:59:16:EE:71:5F:1F:A1:46:BE:12:A3:F0:52
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285849350E7FC78B4A288215565E00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/2c324f34-50b3-3d6a-9dda-cb9051b3339e.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        74.115.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:7f:c7:8b:4a:28:82:15:56:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=6d756945-1d51-4498-b7d6-d02f4eb86333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:68:8c:ab:27:ed:74:70:5a:22:f3:c7:14:
                    60:e8:46:71:dc:82:fa:41:8e:1f:f1:c1:2d:ac:e4:
                    37:79:3f:f0:6e:df:d8:60:10:77:d0:1c:6f:14:3d:
                    61:6e:23:ac:b7:c8:f5:7a:1f:91:1a:f4:af:bb:cd:
                    d5:98:62:7f:0d:ee:a8:70:73:41:fb:b0:d9:cf:8d:
                    dd:80:39:8d:39:56:97:5a:5a:c4:e6:77:f2:3e:33:
                    c4:dd:da:b1:5e:b0:75:8c:3b:a4:c6:69:fe:5d:31:
                    7f:f2:45:dc:0b:27:56:9f:8e:11:2c:e0:f5:9b:12:
                    62:a2:22:9e:db:65:6e:a1:5e:57:a1:ae:54:58:a6:
                    44:a0:7d:92:a7:99:a2:31:6e:2f:89:1f:d1:fb:be:
                    11:88:ef:0e:ad:4c:f2:b2:3a:99:6f:db:35:d3:d5:
                    65:90:6a:7d:b2:aa:9a:c8:4f:ce:fd:f1:9d:3a:9c:
                    b1:0c:a8:7b:ff:ac:ee:07:be:a0:35:42:b5:f6:b8:
                    a3:b9:a0:32:5a:39:16:07:3d:72:43:e0:4c:b7:d6:
                    14:96:3b:c8:73:6e:4f:79:3e:d8:e1:e0:5a:1e:57:
                    7c:92:30:a5:39:95:5e:8f:05:9f:9b:df:85:68:a4:
                    80:7b:79:82:0e:3a:30:a6:a8:bb:e5:11:f3:7d:60:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:99:82:16:0A:CB:43:59:16:EE:71:5F:1F:A1:46:BE:12:A3:F0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/2c324f34-50b3-3d6a-9dda-cb9051b3339e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:9a:58:c4:03:29:0f:13:fb:a5:42:5a:f0:4e:84:f6:5e:
         28:7b:24:75:e3:91:2f:d4:c3:5e:37:b3:53:7e:1e:43:f5:ad:
         3a:4f:ed:be:fa:9b:d2:de:03:11:1c:52:d0:db:90:0d:5a:ac:
         dc:38:3f:dd:9f:d4:68:fa:57:b7:51:43:cf:af:df:d9:0b:07:
         72:7d:4b:25:9f:52:5d:a7:b9:3b:bd:3d:ed:47:e3:b5:d6:c6:
         a7:88:24:55:67:5e:0f:57:dc:71:eb:06:4b:a4:70:85:71:6e:
         0e:7e:fe:bc:43:52:40:d8:e9:90:50:29:96:1f:d4:51:7e:5d:
         fd:7e:ec:5c:c3:b3:9c:e9:a7:40:f9:c5:2b:f9:5f:2e:3f:e7:
         dd:02:64:4f:68:f5:84:9d:76:35:75:e2:05:cd:b8:61:53:47:
         71:61:52:ca:ba:5a:cb:01:12:b1:98:3b:d9:22:38:62:8b:55:
         12:bc:2b:4a:6e:24:ba:fe:c3:7b:7c:3c:4b:2f:06:d4:8f:5d:
         c6:4b:fe:eb:8c:80:36:54:e5:46:f6:4a:14:9e:96:9e:61:44:
         bd:a3:d5:7a:10:2b:e4:62:ac:4a:06:a9:73:8d:3f:43:d3:5e:
         0e:00:d3:81:4c:d2:d2:21:d4:7c:f6:24:a7:74:c0:19:7c:41:
         28:bb:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:40 2025 by rpki-client