Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d5cffdd6-8efe-33e1-a230-15cd93cce406.roa
File:                     d5cffdd6-8efe-33e1-a230-15cd93cce406.roa (raw, json)
Hash identifier:          i1j3I//SJf2/c/f8Cqi71NxVy5t2UGOzdqr/gCcTft4=
Subject key identifier:   F6:81:07:FE:B4:1E:2A:FD:69:DF:32:2F:86:F6:F4:82:EA:53:14:E2
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F432858495F497BB9ADE2EA5BC5BF8400
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d5cffdd6-8efe-33e1-a230-15cd93cce406.roa
Signing time:             Mon 31 Mar 2025 16:03:41 +0000
ROA not before:           Mon 31 Mar 2025 16:03:41 +0000
ROA not after:            Sun 29 Jun 2025 16:03:41 +0000
asID:                     834
IP address blocks:        74.115.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5f:49:7b:b9:ad:e2:ea:5b:c5:bf:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Mar 31 16:03:41 2025 GMT
            Not After : Jun 29 16:03:41 2025 GMT
        Subject: CN=c909f4cf-e619-42ea-95fd-d41a9cd4ee2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:13:63:10:11:29:2a:97:09:64:38:9b:8b:
                    43:82:89:4a:b6:a2:3b:00:22:5f:af:6a:9f:dd:b8:
                    49:04:60:08:40:17:06:a5:41:4f:65:2b:22:d4:81:
                    8b:98:cd:41:38:b0:03:02:23:19:a7:11:66:06:58:
                    2e:fd:e0:53:ab:73:99:b2:f0:fd:a1:9f:0b:0c:87:
                    a8:71:53:2a:a0:d7:53:17:07:3d:52:93:3b:3f:5e:
                    60:ed:79:12:60:35:cc:ac:5c:ce:f6:62:95:f6:4f:
                    01:37:dd:23:2e:0f:c6:2f:eb:e8:d3:b4:c7:93:59:
                    a3:ae:62:b4:7c:c5:57:59:d7:73:90:ac:50:88:44:
                    79:d0:a5:88:ce:e3:e3:8f:4b:9d:ee:19:3e:9a:82:
                    67:36:3d:54:68:ee:5a:13:b5:b9:1a:c5:4f:a2:87:
                    92:8a:74:03:b8:6c:20:c0:88:03:3b:4b:a0:91:72:
                    ab:0f:ea:72:c7:a8:e7:5d:0c:18:47:af:35:3e:fd:
                    8b:21:66:cb:fb:bf:9b:f7:cd:e0:e5:53:0a:0e:10:
                    4e:7c:b6:eb:d6:4d:1a:85:74:4e:1a:ce:b4:cb:9b:
                    33:d9:01:a1:1e:1f:6b:10:3b:b8:30:ed:8d:57:c9:
                    ee:b0:cf:71:1c:06:83:d4:32:7a:d2:b4:0c:6e:69:
                    e0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:07:FE:B4:1E:2A:FD:69:DF:32:2F:86:F6:F4:82:EA:53:14:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d5cffdd6-8efe-33e1-a230-15cd93cce406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0c:2a:7a:c4:35:67:1b:04:e8:b3:6f:b8:e3:c1:44:bf:9a:
         b1:1a:e1:b4:99:a7:8f:f0:54:8b:7a:c8:01:1b:fc:13:29:6d:
         9a:f8:7c:7a:1b:62:f5:c1:f2:e4:7d:c1:9f:01:5c:55:1c:3a:
         95:a4:f2:a9:c1:68:88:19:59:ba:12:cf:a0:3f:6c:13:ab:23:
         3c:6f:06:c9:4f:91:1c:75:95:0d:e3:7a:59:f1:8c:3c:7d:68:
         b7:78:54:6d:09:e7:2a:71:c3:54:c0:77:8e:8e:d0:53:de:d3:
         88:9b:51:fc:41:c0:1b:60:36:70:37:dc:db:6a:7d:5b:03:88:
         34:23:03:b1:64:e1:47:d9:ce:83:f0:06:dc:70:8d:9f:de:2f:
         45:03:2b:37:89:d1:7e:7f:b6:cb:fe:80:94:b9:8f:1c:4c:fd:
         4b:ad:70:b6:05:43:d0:47:f0:ef:f5:ca:71:2f:59:c3:f5:c7:
         6f:c1:b9:00:f1:68:9d:37:87:db:00:ba:8a:9c:e0:b4:3d:53:
         15:c4:c5:81:67:01:b4:d2:42:7d:9f:15:0f:e5:98:54:8c:bc:
         c6:57:e1:ea:34:81:14:af:76:c3:cb:0e:a3:3b:5a:a9:ef:63:
         05:df:7f:8a:c5:02:19:d3:89:8d:51:25:9e:df:56:59:d7:b3:
         68:f2:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:10 2025 by rpki-client